Privacy notice: United States
Applies together with the main Privacy Policy. Governing privacy law: State privacy laws including the California Consumer Privacy Act.
Version 2026-10-08 · Effective 8 October 2026 · IAEX NETWORK (proprietor: Abhishek Tiwari)
This notice supplements Part A for residents of the United States, including residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, and any other state with a comprehensive privacy law. It is our notice at collection and our privacy notice under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA").
Financial-privacy law
Vaulte is not a bank and does not itself receive or hold customer funds. The licensed partners that do (banks, money transmitters and payment institutions) give you their own privacy notice under the Gramm-Leach-Bliley Act where it applies. Information that is subject to the Gramm-Leach-Bliley Act or the Fair Credit Reporting Act is exempt from most state privacy laws, so some of the rights below do not apply to it; they do apply to the rest of your data. We do not share your information with non-affiliated companies for them to market to you.
Categories of personal information (past 12 months)
| CCPA category | Collected | Disclosed for a business purpose to | Sold or shared |
|---|---|---|---|
| Identifiers (name, email, address, IP address, account name) | Yes | Payment partners, verification and screening providers, hosting and email providers | No |
| Customer records and financial information (bank, wallet and payment details, transaction history) | Yes | Payment partners, providers | No |
| Government identifiers (tax IDs, passport and ID numbers) — sensitive | Yes, for verification | Verification and screening providers, partners | No |
| Account log-in with password — sensitive | Yes (password hash only) | No one | No |
| Commercial information (invoices, orders, purposes) | Yes | Partners, the seller or buyer on the transaction | No |
| Internet or network activity (device, logs) | Yes | Security and hosting providers | No |
| Geolocation (country level from IP address) | Yes | Security providers | No |
| Professional information (job title, employer) | Yes | Partners, providers | No |
| Inferences (risk rating from screening) | Yes | Partners | No |
| Biometric information | Only if a face-match provider is enabled and you are told first | The provider | No |
We use sensitive personal information only to provide the service, verify identity, prevent fraud and comply with law, so there is no right to limit its use beyond these purposes. We keep each category as set out in Part A, section 6. We have not sold or shared personal information in the past 12 months, and have no actual knowledge of selling or sharing the data of anyone under 16.
Your rights
| Right | What it means |
|---|---|
| Know / access | The categories and specific pieces of personal information we hold, the sources, the purposes and the recipients. |
| Delete | We delete what we can; we must keep records the law requires (for example Bank Secrecy Act records for 5 years). |
| Correct | We correct inaccurate information. |
| Portability | A copy in a portable, readily usable format. |
| Opt out of sale, sharing, targeted advertising and profiling with legal effects | We do none of these. We also honour opt-out preference signals such as Global Privacy Control, although there is nothing to opt out of. |
| Limit use of sensitive information | Used only for the permitted purposes above. |
| No retaliation | We will not deny service, charge different prices or give a different quality of service because you use a right. |
How to make a request, and appeals
Use the data-request form or email connect@iaexnetwork.com. We verify your identity by matching your request to your account or by emailing a code. You may use an authorised agent: send us their signed permission, and we may still verify you directly. We respond within 45 days, and may extend once by 45 more days with notice. If we decline a request you can appeal by replying to our decision with the word "appeal"; we answer within 60 days (45 days in some states) and, if we uphold the refusal, give you the state attorney general's contact details to complain. California residents may also contact the California Privacy Protection Agency.
Other US notices
- Do Not Track: we do not track you across other sites, so there is nothing to change when a browser sends the signal.
- Children: Vaulte is for adults. We do not knowingly collect data from anyone under 18 and comply with the Children's Online Privacy Protection Act.
- California "Shine the Light": we do not disclose personal information to third parties for their direct marketing.
- Data breaches: we notify residents and attorneys general as state breach laws require.
- Records and sanctions: we keep identification and transaction records and run sanctions checks as U.S. anti-money-laundering and Office of Foreign Assets Control rules require, and may disclose them to authorities.