This U.S. Privacy Notice supplements our Privacy Policy and applies to residents of the United States. It describes the categories of personal information we collect and your rights under state privacy laws including the California Consumer Privacy Act ("CCPA/CPRA"), the Virginia Consumer Data Protection Act ("VCDPA"), the Colorado Privacy Act ("CPA"), and similar laws.
1. Categories of personal information collected
In the past twelve months, we may have collected the following categories of personal information:
- Identifiers: name, address, email, phone, government ID numbers, IP address.
- Customer records: financial account details, payment information.
- Protected classifications: date of birth and nationality (collected to comply with anti-money laundering laws).
- Commercial information: transaction history, products used.
- Internet and network activity: browsing, app usage, device information.
- Geolocation: approximate location derived from IP address.
- Inferences: risk scores derived from the above for fraud and AML monitoring.
- Sensitive personal information: government ID numbers and, in some cases, biometric identifiers from identity-verification checks.
2. Purposes of collection
We collect this information to provide the Services, verify identity, comply with legal obligations (including AML/KYC), prevent fraud, and improve our products. We do not use sensitive personal information for purposes other than those permitted under applicable law.
3. Sharing and "selling"
BOF Pay does not sell personal information for monetary consideration. Some sharing of online identifiers with analytics or advertising partners may be considered a "sale" or "sharing" for cross-context behavioral advertising under certain state laws. You can opt out using our Do Not Sell or Share My Personal Information page.
4. Your rights
- Right to know / access: request the categories and specific pieces of personal information we have collected about you.
- Right to correct: request correction of inaccurate personal information.
- Right to delete: request deletion, subject to legal retention obligations.
- Right to opt out: opt out of any "sale" or "sharing" of your personal information.
- Right to limit: limit the use of sensitive personal information to what is necessary to provide the Services.
- Right to portability: receive your information in a portable format.
- Right to non-discrimination: we will not discriminate against you for exercising any of these rights.
5. How to exercise your rights
Submit a request via info@bofpay.ai, through your account settings, or via the Do Not Sell or Share My Personal Information page. We will verify your identity before fulfilling a request. You may authorize an agent to submit a request on your behalf.
6. Appeals (VA, CO, CT, and similar)
If we decline your request, you may appeal by replying to our response or emailing info@bofpay.ai with the subject line "Privacy Appeal." If your appeal is denied, you may contact your state attorney general.
7. Shine the Light (California)
California residents may request information about disclosures of personal information to third parties for those parties' direct marketing purposes. BOF Pay does not share personal information with third parties for their direct marketing.
8. Contact
Privacy questions: info@bofpay.ai.