ChainATM Privacy Policy

Last Updated: March 1, 2026

This Privacy Policy describes how Noctra GmbH ("we", "us", or "our") collects, uses, and discloses your personal information when you use our platform and services (collectively, the "Service").

1. INFORMATION WE COLLECT

We collect several types of information from and about users of our Service, including:

1.1 Personal Information

  • Contact Data: Email address and display name
  • Authentication Information: Information related to various authentication methods including social logins (LinkedIn, GitHub, Google), email authentication, wallet connections, and passkey technology (we do not store passwords or private keys)
  • Financial Information: We do not directly store full payment card details, but payment processors may collect this information on our behalf
  • Transaction Information: Records of cryptocurrency transactions, including amounts, currencies, blockchain addresses, and timestamps
  • User Preferences: Selected currencies, networks, and interface preferences
  • Communication Data: Records of your interactions with our customer service team
  • Technical Data: IP address, browser type, device type, operating system, access timestamps, and log data

1.2 Automatically Collected Information

  • Usage Data: How you interact with our Service, including pages viewed, features used, and time spent on the platform
  • Device Data: Information about your device, including hardware model, operating system, and browser
  • Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our Service and hold certain information

1.3 Information from Third-Party Services

When you connect external wallets or use third-party services through our platform (such as Coinbase), we may receive information from these services in accordance with their terms and privacy policies.

2. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

2.1 To Provide Our Service

  • Process transactions and facilitate cryptocurrency purchases
  • Authenticate your identity and maintain your account
  • Provide AI-powered assistance through our chat interface
  • Set up and maintain your user profile
  • Manage your credit balance and process payments
  • Provide customer support

2.2 For Improvement and Analytics

  • Analyze usage patterns to improve our Service
  • Debug and fix issues in our Service
  • Develop new features and services
  • Generate aggregated, non-identifying analytics

2.3 For Communication

  • Send you service announcements and updates
  • Provide information about features and offerings
  • Respond to your inquiries and support requests

2.4 For Security and Legal Compliance

  • Verify your identity and prevent fraud
  • Protect against unauthorized access
  • Comply with legal obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements
  • Enforce our Terms and Conditions

3. SHARING YOUR INFORMATION

We may share your personal information with the following categories of recipients:

3.1 Service Providers

We share information with third-party service providers who help us operate, provide, improve, and market our Service, including:

  • Payment processors (such as Stripe)
  • Cryptocurrency on-ramp providers (such as Coinbase Developer Platform)
  • Authentication providers (such as Privy for secure authentication services)
  • Cloud service providers
  • Analytics providers
  • Customer support tools

3.2 AI Service Providers

We use Google's Gemini AI model to power our AI assistant feature. The number of useable LLMs will increase over time. Information you provide in chat conversations may be processed by Google's AI services in accordance with their privacy policies.

3.3 Compliance with Laws

We may disclose your information where required by law, including in response to a subpoena, court order, or other legal process, or to establish or exercise our legal rights or defend against legal claims.

3.4 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

3.5 With Your Consent

We may share your information with third parties when you have given us your consent to do so.

4. SECURITY OF YOUR INFORMATION

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, loss, misuse, or alteration. These measures include:

  • Multiple secure authentication methods including social logins, email authentication, and passkey technology
  • Secure session management using Iron Session technology
  • Encrypting sensitive data in transit and at rest
  • Implementing secure cloud infrastructure
  • Regular security assessments and monitoring
  • Integration with trusted authentication providers like Privy

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

5. DATA RETENTION

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When determining how long to retain information, we consider:

  • The amount, nature, and sensitivity of the information
  • The potential risk of harm from unauthorized use or disclosure
  • The purposes for which we process the information
  • Whether we can achieve those purposes through other means
  • Applicable legal requirements

6. YOUR PRIVACY RIGHTS

Depending on your location, you may have certain rights regarding your personal information, which may include:

  • Access: You can request copies of your personal information we hold
  • Correction: You can request that we correct inaccurate information about you
  • Deletion: You can request that we delete your personal information in certain circumstances
  • Restriction: You can request that we restrict the processing of your information
  • Data Portability: You can request a copy of the information you provided to us in a machine-readable format
  • Objection: You can object to our processing of your personal information
  • Withdraw Consent: You can withdraw your consent at any time where we rely on consent to process your information

To exercise these rights, please contact us at contact@noctra-labs.com. We may ask you to verify your identity before responding to such requests.

7. CHILDREN'S PRIVACY

Our Service is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as soon as possible.

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from those of your country.

We have implemented appropriate safeguards to ensure that your information remains protected in accordance with this Privacy Policy when transferred internationally. These safeguards include contractual obligations imposed on the recipients of your information.

9. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to track activity on our Service and to hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

10. THIRD-PARTY LINKS AND SERVICES

Our Service may contain links to third-party websites and services that are not owned or controlled by us. This Privacy Policy only applies to our Service. We have no control over and assume no responsibility for the privacy practices of any third-party sites or services.

11. CHANGES TO THIS PRIVACY POLICY

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. CONTACT US

If you have any questions about this Privacy Policy, please contact us:

  • By email: contact@noctra-labs.com
  • Website: https://noctra-labs.com
  • By mail: Noctra GmbH (Schaanerstrasse 27, 9490 Vaduz, Liechtenstein)