Privacy Policy

This Privacy Policy explains how GLORESEND (“GLORESEND”, “we”) collects, uses, shares and protects personal data when you visit our website, use the dashboard and APIs, or when a business issues you a card through GLORESEND.

Account and business information: names, work email, password (stored only as a one-way hash), organization name, team roles, and the verification details you submit: legal name, registration number, country, contact phone, business activity and documents.

Cardholder information: when our customers issue cards, the cardholder’s name and email, card status and balances, and transactions (amount, merchant, date). We do not store full card numbers or CVVs; they are retrieved from the issuer only when an authorized request asks for them.

Payment information: deposit and fee transactions, blockchain transaction hashes and addresses, and wallet ledger entries.

Technical information: IP address, browser and device, API request logs (method, path, status and timing, never request bodies), security events and two-factor settings.

Communications: messages you send through the contact form or support, and emails we exchange.

• to create and secure your account, and provide the Sandbox, dashboard, APIs and card services;
• to verify businesses and meet anti-money laundering, sanctions and fraud-prevention obligations;
• to process deposits, fees and card operations, and keep accurate financial records;
• to send service emails such as sign-up, password resets, verification and payment decisions, security notices;
• to answer requests, provide support and improve the Services;
• to comply with law and respond to lawful requests from authorities.

Where the law requires a legal basis, we rely on the performance of our contract with you, our legal obligations (for example AML and record keeping), our legitimate interests in running a secure and reliable service, and your consent where we ask for it.

We share personal data only as needed to provide the Services:

• card issuing banks, program partners and card networks, to issue and operate cards;
• identity verification, compliance and fraud-prevention providers;
• infrastructure providers (hosting, databases and email delivery) acting on our instructions;
• professional advisers, and authorities when the law requires it;
• a buyer or successor in the event of a merger or acquisition, under equivalent protections.

We do not sell personal data. Some providers may process data outside your country; when they do, we rely on appropriate safeguards.

We keep personal data only as long as needed for the purposes above. Verification and transaction records are kept for the period required by financial regulations (commonly five years or more after the relationship ends). Expired sessions and password reset links are deleted automatically.

We use technical and organizational measures to protect personal data against unauthorized access, loss or misuse. See our Security page. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to restrict or object to certain processing, and to withdraw consent. Some data must be kept to meet legal obligations even if you ask us to delete it.

Cardholders should first contact the business that issued their card, which is responsible for their relationship. To exercise your rights, contact our contact form. You may also complain to your data protection authority.

We use a strictly necessary session cookie to keep you signed in, and store your Sandbox/Live preference in your browser. We do not use advertising cookies or sell browsing data.

The Services are for businesses and are not directed to children under 18. We do not knowingly collect their personal data.

We may update this policy. The new version takes effect when posted here; we will notify account owners of material changes by email.

Privacy questions or requests: our contact form.