Privacy Policy

Last updated: November 1, 2026

1. Our approach

Blockcade Ltd. (“Blockcade”, “we”) operates a self-custody crypto wallet, an on-chain exchange, and a payment gateway for merchants. This Privacy Policy explains what data we collect, why we collect it, and the rights you have over your information.

Blockcade is a self-custody platform. Your keys and recovery phrases NEVER leave your device. We can neither see them nor recover them for you.

2. Data we collect

2.1 Provided by you

• Merchant account details — business name, contact email, country, bank / crypto payout details.
• Referral / marketing preferences (opt-in).
• Support-ticket content you send us.

2.2 Collected automatically

• Public wallet addresses you look up.
• Transaction metadata — amounts, timestamps, on-chain tx hashes, chain IDs.
• Device information — anonymous device ID, platform, app version.
• Session logs — IP, user-agent, timestamps, error events (via Sentry).

2.3 We NEVER collect

• Recovery phrases, seed phrases, mnemonics.
• Private keys or any material that could sign a transaction.
• Plaintext passwords or PINs.

3. How we use your data

• Operate the wallet, exchange, and payment gateway.
• Detect fraud and enforce compliance (AML / OFAC screening).
• Send transactional emails (payment confirmations, security alerts).
• Aggregate anonymised analytics to improve the product.

4. Third-party processors

Blockcade uses the following processors, each bound by a data-processing agreement:

• CoinGecko — price data (no PII sent).
• LiFi + Changelly — swap routing (public wallet addresses + amounts).
• MoonPay + Yellow Card — fiat on/off-ramp (KYC data flows directly to the provider, not through us).
• Anthropic Claude — AI chat (chat text + wallet context; retained only per conversation).
• Sentry — error logs (masked PII).
• Amazon Web Services — hosting + storage (EU + US).

5. Retention

Merchant records: as long as your account is active plus 7 years for regulatory compliance. Transaction metadata: 7 years. Anonymous device data: 90 days.

6. International transfers

Blockcade operates globally. Data may be processed in any country where we have infrastructure. All transfers between jurisdictions use standard contractual clauses (SCCs) or an adequacy decision where available.

7. Your rights

Under GDPR, CCPA, the Nigerian Data Protection Act, and equivalent regulations you may request:

• Access — a copy of the data we hold.
• Correction — fix inaccuracies.
• Deletion — “right to be forgotten”.
• Portability — a machine-readable export.
• Objection — stop specific processing.

Email privacy@blockcade.app. We respond within 30 days.

8. Cookies

The marketing site uses a minimum set of first-party cookies for CSRF protection and session persistence. No third-party ad tracking.

9. Children

Blockcade is not directed at anyone under 18. If we learn we have collected data from a minor, we delete it.

10. Changes

We post material changes on this page and notify active merchants by email at least 30 days before they take effect.

11. Contact

Email privacy@blockcade.app. Postal: Blockcade Ltd., Abeokuta, Ogun State, Nigeria.