Privacy Policy

Veil is built privacy-first. This Privacy Policy explains what limited information we collect when you use our virtual card service, why we collect it, and the choices you have.

01Who we are

Veil ("we", "us", "our") provides privacy-focused, no-KYC virtual payment cards through getveil.cards. We act as the data controller for the information described in this policy.

02Information we collect

We intentionally collect as little personal data as possible. Depending on how you use the service, this may include:

• Account data — an email address and a password (stored only as a secure hash) used to create and access your account.
• Payment / top-up data — the cryptocurrency network, wallet address you send from, transaction hashes, and amounts required to credit your balance.
• Card activity — card creation events, spend limits you set, merchant-lock settings, and transaction status needed to operate your cards.
• Technical data — IP address, browser type, and device information collected automatically for security and fraud prevention.
• Support data — the contents of messages you send us for support.

We do not require government ID, selfies, proof of address, or other KYC documentation to open a standard account.

03How we use your information

We use the limited data above to:

• Create, operate, and secure your account and virtual cards;
• Credit crypto top-ups and process card transactions;
• Detect, prevent, and investigate fraud, abuse, and prohibited activity;
• Provide customer support and respond to your requests;
• Comply with applicable legal obligations and enforce our Terms.

04Legal bases

Where required by law (for example, under the GDPR), we process personal data on the bases of performance of a contract (operating your account), legitimate interests (security and fraud prevention), legal obligation, and consent (where you provide it, such as optional cookies).

05Sharing your information

We do not sell your personal data. We share limited information only with:

• Card issuing and processing partners who technically enable the cards;
• Infrastructure providers (hosting, security) acting under contract on our behalf;
• Blockchain networks — note that crypto transactions are recorded on public ledgers outside our control;
• Authorities where we are legally compelled to do so by a valid legal order.

06Data retention

We keep personal data only as long as needed to provide the service, meet legal and security obligations, and resolve disputes. When data is no longer needed, we delete or anonymize it.

07Security

We use technical and organizational measures — including encryption in transit, hashed credentials, and access controls — to protect your data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

08Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict processing of your personal data, and to object or request portability. To exercise these rights, contact support@getveil.cards.

09International transfers

Your information may be processed in countries other than your own. Where we transfer data internationally, we take steps to ensure it remains protected in line with this policy and applicable law.

10Children

Veil is not directed to anyone under 18. We do not knowingly collect data from children.

11Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date.