This Policy explains how Fuzopay collects, uses, shares, retains, and protects personal data across our website, applications, APIs, account services, identity checks, virtual accounts, payments, and stablecoin transactions.
Effective July 31, 2026 · Last updated July 31, 2026
About Fuzopay
Fuzopay was founded by Tim Watkins — after decades in the banking industry, most recently as Head of Loans and a Director at JPMorgan — alongside co-founders Ronnel Uyanguren Binuya, Michael Kiinsey, David Romano, and Owen Price. The company officially launched in August 2024 and secured a $7.8M Series C in December 2025.
Because Fuzopay operates a connected suite — Global Bank Accounts, Crypto Conversion, Deposit, Transfer, Card & Cashback, Flexible Earn, Staking, Refer & Earn, and VIP & Promotions — this Policy covers data collected across all of them. Where a section applies to one product rather than the whole platform, that is called out.
01Introduction and Scope
Fuzopay LLC provides stablecoin-to-fiat and virtual-account services through third-party banking and payment partners. This Policy applies to prospective, current, and former users, website and app visitors, API users, account registration, KYC, transactions, and support. It should be read with theTerms of Use. It addresses LGPD, EU/UK GDPR, CCPA/CPRA, and other applicable laws.
This includes someone who only checked whether their country is supported on Global Bank Accounts, someone who generated a Deposit address but never completed verification, and someone with a fully active Staking position — the same Policy governs all three.
02Data Controller and Contact
Fuzopay LLC is the controller for customer-facing processing and can be reached atsupport@fuzopay.com,+1 (954) 862-1400, or 12555 Orange Dr, Davie, FL 33330 USA. Banks, payment providers, custody providers, and identity partners may act as processors, independent controllers, or joint controllers for regulated activities. Users may submit rights requests to Fuzopay. Local representative details, where legally required, are provided on request through the same contact.
The banking partners behind your Global Bank Account, and the custody or identity partners behind Deposit and Crypto Conversion, may independently control certain data under their own obligations. Fuzopay remains your point of contact.
03Definitions
Personal Data includes identifiers, contact information, financial and transaction records, device data, wallet addresses, and linked on-chain activity. Sensitive data may include government identifiers, credentials, biometric templates, and communications. The Policy also uses controller, processor, service provider, stablecoin, wallet address, on-chain data, KYC, AML, VASP, and virtual account in their ordinary regulatory sense.
“Virtual account” here means the same thing as a Global Bank Account on the platform. “Wallet address” means the same thing as a Deposit address.
04Personal Data We Collect
Depending on your use and legal requirements, we collect:
Identity and KYC documents
Selfie and biometric or liveness results
Proof of address
Source of funds
Account and contact data
Bank and virtual-account details
Transaction and balance data
Wallet addresses and public on-chain records
Device and usage logs
Cookie data
Support communications
Fraud or AML risk inferences
Direct identifiers are kept off-chain.
A note on blockchain data. Wallet addresses and stablecoin transactions are recorded on public blockchains. Once written, this data is visible to anyone and cannot be edited or deleted — including at your request. Most other personal data in this Policy can typically be accessed, corrected, or deleted on request. See Section 10 for how this limits certain deletion requests.
Identity, selfie/liveness, proof of address — collected during verification on Security & KYC, required before converting, spending, or withdrawing.
Bank and virtual-account details — generated when you open a Global Bank Account and used for ACH, wire, or SWIFT.
Wallet addresses and on-chain records — generated when you request a Deposit address, before KYC is required for that step.
Transaction and balance data — recorded across Conversion, Transfer, Card, Flexible Earn, Staking, and Refer & Earn.
Fraud or AML inferences — informed in part by patterns such as Transfer volume to new contacts, which is why Transfer adds a confirmation before a first-time send.
05How and Why We Use Personal Data
We process data to open and operate accounts, verify identity, perform KYC/AML/CTF and sanctions screening, execute payments and conversions, prevent fraud, secure the Services, support users, improve products, comply with law, and send permitted marketing. Legal bases may include contract, legal obligation, legitimate interests, and consent. Mandatory biometric checks are generally based on regulatory and fraud-prevention grounds, not bundled consent.
Transaction volume is used to calculate your VIP tier, which can affect conversion fee, cashback, and limits.
Staking and Flexible Earn balances are used to calculate accrued interest and the applicable rate tier.
Refer & Earn activity — including referred contacts’ later activity — is used to calculate referral rewards.
“Prevent fraud” includes the new-contact confirmation on Transfer and extra KYC review if activity looks unusual after verification.
06How We Share and Disclose Data
We do not sell personal data for money or share it for cross-context behavioral advertising.
Data may be disclosed to:
Banks
Payment and custody partners
KYC/AML vendors
Blockchain infrastructure and analytics providers
Cloud and support tools
Counterparty VASPs, under the Travel Rule
Advisers
Corporate successors
Authorities, where required
Wallet addresses and stablecoin transactions recorded on public blockchains are visible and immutable.
Banks — power Global Bank Account rails (ACH, wire, SWIFT) and external bank Transfers.
Payment and custody partners — hold and move crypto behind Deposit, Conversion, Flexible Earn, and Staking.
Blockchain analytics — monitor on-chain activity tied to your Deposit address and crypto Transfers.
Counterparty VASPs (Travel Rule) — apply when you send crypto externally to another regulated platform, not to Transfers inside Fuzopay.
07International Data Transfers
Operating a cross-border payments service requires transfers among Latin America, the United States, the EEA/UK, and provider locations. Safeguards may include adequacy decisions, EU Standard Contractual Clauses, the UK IDTA or Addendum, ANPD Standard Contractual Clauses, lawful contractual necessity, and technical or organizational controls. The mechanism used for each transfer route is the one required by applicable law for that route.
Every new country added to the Global Bank Accounts list is a new transfer route. This section is reviewed when that list grows, not only the marketing page.
08Data Retention
Data is retained only as needed for service delivery, security, disputes, and legal obligations. KYC and transaction records commonly remain for a statutory period after closure. Biometric templates should be deleted or anonymized shortly after verification. Logs and support records use shorter periods. Preference records remain after opt-out. Public on-chain data persists permanently and cannot be deleted.
Your Conversion, Transfer, Card, Flexible Earn, Staking, and Refer & Earn history sits on the transaction-record schedule. On-chain Deposit addresses and crypto Transfers sit in the permanent blockchain category, no matter how long ago they happened.
09Data Security
Safeguards include:
Encryption in transit and at rest, where appropriate
Least-privilege access controls
Confidentiality requirements
Vendor security reviews
Secure development practices
Ongoing monitoring
Incident response procedures
Multi-factor controls, where available
Breaches are assessed and notified within legally required periods. No system is completely secure. Users must protect credentials and any self-custodied wallet keys.
This matches the Security & KYC page: encryption, continuous monitoring, and balances held unusable until verification clears. Read that page for the product-level process.
10Your Privacy Rights
Depending on location, rights may include access, correction, deletion, restriction, portability, objection, consent withdrawal, review of automated decisions, and complaint to a regulator. Identity verification protects requests. AML retention and immutable blockchain data can limit deletion. California users receive no-sale/share and sensitive-data disclosures. EU and UK users should also read theGDPR Compliance statement.
How quickly we respond, by region
Region
Framework
Typical window
European Union / United Kingdom
GDPR
Generally within 1 month
California
CCPA / CPRA
Within 45 days
Brazil
LGPD
Per statutory timing
“Review of automated decisions” covers VIP tier calculation and Staking / Flexible Earn rate assignment, both determined from activity data. You can ask how a specific tier or rate was calculated.
11Cookies and Tracking Technologies
Fuzopay and providers use cookies, SDKs, pixels, local storage, and similar tools for authentication, security, fraud prevention, preferences, and analytics. Non-essential technologies require consent where applicable. Recognized Global Privacy Control signals are honored where law requires.
You can manage preferences through your browser or device settings. Cookie categories used on this site are described in this section — there is no separate cookie policy.
Essential cookies stay on for login, security, and fraud prevention. To limit analytics or similar non-essential storage, use your browser or device settings, or send a request to support@fuzopay.com.
COOKIE PREFERENCES
Choose what works for you
Strictly necessaryAlways on
Only the record of the choice you make here, so we can remember it and stop asking.
Functional — live chat
You haven’t chosen yet. You’ll be asked the first time you open a page that offers live chat.
Authentication cookies keep you logged into Global Bank Account and Card surfaces between visits. Fraud-prevention tooling here overlaps with Sections 05 and 09.
12Children’s Privacy
The Services are only for individuals aged 18 or older. Fuzopay does not knowingly collect personal data from children and will take reasonable steps to delete data collected in violation of this requirement, subject to legal retention and blockchain-immutability limits.
This is the same age requirement as Section 02 of the Terms of Use. Eligibility for any account — Global Bank Account, Card, Staking, or otherwise — requires being 18 or older.
13Third-Party Links and Services
This Policy applies only to Fuzopay. Banks, wallets, exchanges, and other linked or integrated services control their own privacy practices. Their privacy notices and terms apply when you interact with them. A link or integration does not mean Fuzopay endorses the third party.
If you send an external Transfer to a bank or an external crypto wallet, that receiving institution’s practices govern from the moment funds leave Fuzopay.
14Changes to This Privacy Policy
We may update the Policy for changes in products, technology, processing, or law. The Last updated date will change, and material updates may receive email or in-product notice. A Portuguese version may be published in parallel for Brazilian users. Consent will be obtained where a change legally requires it.
A new product launch that changes what data is collected or how it is used should trigger a review of this Policy, not only a change to the product page.
15How to Contact Us and Complaints
Contact Fuzopay LLC atsupport@fuzopay.com,+1 (954) 862-1400, or 12555 Orange Dr, Davie, FL 33330 USA for general questions, rights requests, and incidents.
Regulator contacts, if you would rather file a complaint directly:
Brazil — the ANPD, or Fuzopay’s Encarregado via the email above
European Economic Area — your local supervisory authority
United Kingdom — the ICO
California — the CPPA, or the California Attorney General
For account questions (a KYC delay, a Staking maturity date, a Transfer that has not arrived), Live Chat and the Help Center are typically faster. This section is for privacy-specific requests and complaints.
