Privacy Policy

This policy explains what Atbdev LLC does with personal information when you use AtbDev. It covers information we hold. It does not cover what our partner Bridge does with information you submit directly to them during identity verification — their own privacy notice governs that.

Account information. Your email address. There are no passwords: sign-in codes are stored only as keyed hashes, expire within minutes and are used once.

Verification status. An identifier issued by Bridge for your customer record, and the current status of your verification. We do not receive or store your Social Security number, tax identifier, date of birth, or images of your identity documents — those go directly to Bridge.

Banking references. The name of a linked bank, the account type, and the last four digits of an account number. We do not store full account or routing numbers. Deposit instructions are fetched from Bridge each time you view them and are not retained by us.

Wallet and transaction records. Your wallet address and network, and for each transfer the amount, currencies, status, payment rail, destination and any blockchain transaction hash.

Technical information. Your IP address and browser user agent, used for rate limiting and to identify the session in our security logs.

We set two cookies, both strictly necessary:

• a session cookie that keeps you signed in, marked HttpOnly so scripts cannot read it
• a token cookie used to protect forms against cross-site request forgery

We do not use advertising cookies, analytics cookies, tracking pixels, or third-party trackers, and we do not sell or share personal information for cross-context behavioural advertising.

• to operate your account and process the transfers you request
• to meet obligations under anti-money-laundering, sanctions and financial recordkeeping law
• to detect and prevent fraud and unauthorised access
• to provide support and respond to your questions
• to keep the service secure and reliable

We do not use your information to build advertising profiles, and we do not sell it.

Bridge, our payments and custody partner, to open your customer record, hold your balance, and execute deposits and withdrawals.

Plaid, when you choose to link a bank account, to confirm the account and its ownership.

Our infrastructure providers, who host the application and its database on our behalf under contract.

Regulators, law enforcement and courts, where we are legally required to disclose or where disclosure is necessary to establish or defend a legal claim.

A successor entity, if the business is merged or acquired, subject to this policy continuing to apply.

• there are no passwords; sign-in codes are stored only as keyed hashes and expire within minutes
• sessions are held server side; the cookie carries a random token and only its hash is stored, so a database copy cannot be replayed as a login
• all traffic is encrypted in transit
• requests that move money are rate limited and require an explicit confirmation step
• our logs are redacted: API keys, full account numbers, tax identifiers, passwords and session tokens are stripped before anything is written

No system is perfectly secure. If a breach affects your personal information we will notify you as required by applicable law.

Financial recordkeeping rules require records of customer identity and transactions to be retained for at least five years after an account closes or a transaction completes. We keep account and transaction records for that period.

Security and webhook logs are kept for a shorter operational period and then deleted.

You can ask us for a copy of the personal information we hold about you, ask us to correct it if it is wrong, or ask us to delete it.

Deletion is limited by the retention rules above: while we must keep a record for financial compliance, we cannot erase it. Where that applies we will tell you which information we are keeping and why.

Depending on where you live you may have additional rights, including the right not to be discriminated against for exercising them. Contact us and we will tell you what applies and how to exercise it.

AtbDev is not available to anyone under 18 and we do not knowingly collect information from children. If we learn that we have, we will delete it.

We may update this policy. The date below shows when it last changed, and we will give notice through the service before a material change takes effect.

Direct any privacy question or request to:

Atbdev LLC

30 N Gould St, Ste R, Sheridan, WY 82801, USA

support@atbdevramp.io