1. Who we are
TrustVCC is the operator of an online virtual card platform. In respect of personal data processed through the Service, the operator of TrustVCC acts as the controller of that personal data. You can contact us about any privacy matter at [email protected].
2. What data we collect
We collect account data (email address and, optionally, a display name); operation data (balance top-ups, card issuance, transfers to and from Cards, including the details of USDT TRC-20 blockchain transactions and the wallet addresses involved); technical data (IP address, device and browser information, session identifiers); and any messages you send to support.
3. How we use data
We use your data to create and maintain your account, to issue and manage virtual cards, to credit and reconcile payments, to provide support, to keep the Service secure and prevent fraud and abuse, to meet legal requirements, and to improve the quality and reliability of the Service.
4. Legal bases for processing
We process personal data to perform our contract with you, on the basis of your consent where consent is required, to comply with our legal obligations, and for our legitimate interests in operating, protecting and improving the Service in a manner that does not override your rights.
5. Card and payment data
Sensitive card data is stored encrypted (AES-256-GCM) and is shown in full only to the card’s owner, where this is necessary in order to use the Card. Lists and summaries show only the last four digits. Access is segregated: sensitive data is available solely to the extent necessary for the Service to operate.
6. Sharing of data
We do not sell your personal data. We share it only with service providers that host and operate the Service or the underlying card infrastructure on our behalf and under corresponding confidentiality obligations, and with public authorities and other persons where required by law or where necessary to protect our rights, our users or the public.
7. Payments and the blockchain
The Balance is topped up in USDT on the TRON network. Blockchain transactions are recorded in a public ledger that is outside our control, so the wallet addresses and amounts associated with your top-ups may be publicly available. Private keys of deposit wallets are stored encrypted.
8. Data retention periods
We retain personal data while your account is active and for as long as necessary to provide the Service, to comply with legal, accounting and anti-fraud requirements, and to resolve disputes. When data is no longer needed, we delete or de-identify it.
9. Security
We apply technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including encryption of sensitive information — such as card data (AES-256-GCM) and wallet keys — access segregation and activity logging. No method of transmitting or storing data is completely secure, and we cannot guarantee absolute security.
10. Your rights
To the extent provided by applicable law, you may request access to your personal data, correction of inaccurate data, its deletion, restriction of or objection to certain types of processing, and a copy of the data you provided in a portable format. Where processing is based on consent, you may withdraw it at any time; this does not affect the lawfulness of processing carried out before withdrawal. To exercise these rights, contact [email protected].
11. Cookies
We use cookies and similar technologies that are strictly necessary for authentication and for remembering the language you have selected. We do not use cookies to sell your personal data.
12. Children
The Service is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe that a child has provided us with their personal data, contact us and we will take steps to delete it.
13. Changes
We may update this Privacy Policy from time to time. The current version is always available on this page.
14. Contact
For any questions and requests relating to privacy, contact [email protected] or Telegram: @trustvcc.