Privacy Policy

Effective date: October 28, 2026

1. Who we are

Astro Breeze LLC ("Astro Breeze", "we") provides money-movement infrastructure to businesses. This policy explains how we process personal data of website visitors, client representatives and beneficial owners. For residents of certain US states, a supplementary state-notice applies below.

2. Data we collect

• Onboarding data: entity information; personal data of representatives, directors and beneficial owners (name, date of birth, government identifiers, proof of address).
• Transaction data: payment instructions, counterparties, amounts, currencies, rails and references.
• Technical data: IP address, device and browser information, and platform usage records.
• Communications: emails and messages with our team; recordings where permitted by law.

3. Why we process it

• To provide the Services: operating accounts and wallets, executing conversions and payouts, providing statements and support.
• To comply with law: AML/KYC obligations, sanctions screening, transaction monitoring and regulatory reporting.
• To protect and improve: fraud prevention, security, service analytics and product development.

Legal bases include performance of a contract, compliance with legal obligations, and our legitimate interests in security and service improvement.

4. Sharing

We share personal data only with: licensed partner banking institutions (to provide account and safeguarding services); blockchain-network counterparts for on-chain transactions (data on public chains is pseudonymous but inherently public); compliance and screening providers; auditors and professional advisers; and authorities where required by law. We do not sell personal data.

5. Retention

Identity, onboarding and transaction records are retained for the period required by applicable money-transmission and financial-records laws (typically five years or longer) after the end of the client relationship. Technical data is retained for shorter operational periods.

6. Your rights

Subject to applicable law, you may request access, correction, deletion or restriction of your personal data, and object to certain processing. Because financial-records laws require us to retain certain data, some requests may be limited. To exercise rights, contact [email protected].

7. US state privacy notices

Depending on your state of residence (including California, Colorado, Connecticut, Virginia and others), you may have additional rights regarding access, correction, deletion and opt-out of certain data processing. We do not sell or share personal data for cross-context behavioral advertising as defined by applicable state law. Authorized agents may submit requests on a consumer's behalf with proof of authorization.

8. International transfers

Data may be processed in the United States and other countries where we or our providers operate. Where required, transfers are protected by appropriate safeguards.

9. Security

We apply encryption in transit and at rest, role-based access control, and monitoring appropriate to financial data. No system is perfectly secure; we notify affected parties and regulators of reportable incidents as required by law.

10. Contact

Privacy questions or requests: [email protected].