Get Started
Legal

Privacy Policy

We are committed to protecting your personal information and your right to privacy. This policy outlines how CrestVale Bank collects, uses, and safeguards your data.

Last updated: March 2026

1. Introduction

CrestVale Bank Inc. ("CrestVale Bank", "we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and related services. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the platform.

2. Information We Collect

We may collect the following categories of personal information:

  • Identity Data: Full name, date of birth, and government-issued ID information where required for compliance.
  • Contact Data: Email address, phone number, and mailing address.
  • Financial Data: Cryptocurrency wallet addresses, transaction history, account balances, and investment activity.
  • Technical Data: IP address, browser type, device identifiers, operating system, and usage data collected automatically when you access our platform.
  • Marketing Preferences: Your preferences for receiving communications from us.
  • Referral Data: Referral codes and referral-linked account activity.

3. How We Use Your Information

We use your personal information for the following purposes:

  • To create and manage your CrestVale Bank account.
  • To process investment transactions and disburse daily returns.
  • To communicate important account updates, security alerts, and platform notices.
  • To comply with applicable legal and regulatory requirements (including anti-money laundering obligations).
  • To detect, investigate, and prevent fraudulent activity and security breaches.
  • To improve our platform, services, and user experience through analytics.
  • To send marketing communications where you have given consent.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract performance: Processing necessary to fulfil our investment contract obligations to you.
  • Legal obligation: Processing required to comply with applicable laws and regulations.
  • Legitimate interests: Processing necessary for fraud prevention and platform security.
  • Consent: Where you have given explicit consent, such as for marketing communications.

5. Sharing Your Information

CrestVale Bank does not sell your personal information to third parties. We may share your data with:

  • Service providers who assist in platform operations (payment processors, cloud infrastructure, email delivery).
  • Regulatory or law enforcement bodies when required by applicable law.
  • Our professional advisers including lawyers and auditors under confidentiality obligations.

All third-party service providers are required to process your data in accordance with our instructions and applicable data protection laws.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Account data is typically retained for a minimum of 5 years following account closure to comply with anti-money laundering regulations.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data, subject to our legal obligations.
  • Portability: Request transfer of your data to another provider in a machine-readable format.
  • Objection: Object to processing of your data for certain purposes including direct marketing.
  • Restriction: Request that we restrict the processing of your data in certain circumstances.

To exercise any of these rights, please contact us at support@crestvalebank.com. We will respond to all legitimate requests within 30 days.

8. Cookies and Tracking

Our platform uses essential session cookies to maintain your login state and ensure platform security. We do not use advertising cookies or third-party tracking technologies without your explicit consent. You may disable cookies through your browser settings, but this may affect platform functionality.

9. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encryption in transit (TLS/HTTPS), hashed password storage, and access controls restricting data to authorised personnel only. No system is completely secure, and we cannot guarantee absolute security.

10. International Transfers

Your data may be processed in countries outside your country of residence where our service providers operate. We ensure that any such transfers are subject to appropriate safeguards in accordance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by email or through a prominent notice on our platform. Continued use of our services after updates constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Important Notice: CrestVale Bank is a fintech banking platform. Financial products including savings plans, fixed deposits, and loans carry inherent risk. Interest rates are subject to change. Fixed deposit returns depend on the agreed term and are not guaranteed beyond stated contract terms. Loan approvals are subject to eligibility assessment.

By using CrestVale Bank, you agree to our Terms of Service and acknowledge you have read and understood the Risk Disclosure. CrestVale Bank reserves the right to modify product offerings and interest rates at any time with appropriate notice.