Privacy Policy

1. Who we are

Beeze is operated by Base54 ("Base54", "Beeze", "we", "us", "our"), the data controller responsible for your personal data. Some of our regulated partners (such as card issuers, custodians and identity-verification vendors) act as independent controllers or as our processors for specific activities; where that is the case, their own privacy notices also apply.

2. Data we collect

We collect the following categories of personal data:

• Identity & verification data — your name, date of birth, nationality, address, government identity documents, selfie/liveness images, and tax or national identifiers, collected to meet KYC and anti-money-laundering obligations.
• Contact data — email address, phone number and the handle you choose.
• Financial & transaction data — your balances, transfers, conversions, card transactions, funding sources, and counterparties.
• Device & usage data — device identifiers, IP address, app version, and how you interact with the app, collected for security and to improve the Services.
• Communications — messages you send to our support team and records of our interactions.

We collect this data directly from you, automatically as you use the app, and from third parties such as identity-verification providers, payment partners, sanctions and fraud-screening databases, and public sources.

3. How we use your data

We use your personal data to:

• create and operate your account and provide the Services;
• verify your identity and comply with KYC, AML, sanctions and other legal obligations;
• process top-ups, transfers, conversions and card transactions;
• detect, investigate and prevent fraud, financial crime and security incidents;
• provide customer support and communicate with you about your account;
• improve, secure and develop the Services; and
• send service and, where you have agreed, marketing communications.

4. Legal bases

Where data-protection law (such as the GDPR, Ghana's Data Protection Act 2012, Nigeria's Data Protection Act 2023, Kenya's Data Protection Act 2019 or South Africa's POPIA) applies, we rely on: performance of our contract with you; compliance with our legal and regulatory obligations; our legitimate interests in operating, securing and improving the Services; and your consent (for example, for optional marketing), which you can withdraw at any time.

5. Who we share data with

We share personal data only as needed, with:

• regulated partners — card issuers, custodians, stablecoin issuers and on/off-ramp providers — to deliver the Services;
• identity-verification, fraud-prevention and sanctions-screening providers;
• cloud hosting, communications and analytics providers acting as our processors;
• regulators, law enforcement, courts and tax authorities where required by law; and
• professional advisers, and parties to a corporate transaction such as a merger or acquisition.

We do not sell your personal data.

6. International transfers

Because we and our partners operate across borders, your data may be transferred to and processed in countries other than your own. Where it is, we put appropriate safeguards in place — such as standard contractual clauses or transfers to recipients in countries recognised as providing adequate protection — as required by applicable law.

7. How long we keep data

We keep personal data only for as long as necessary for the purposes above. Identity, transaction and compliance records are typically retained for the period required by financial-services and AML law — generally at least five to ten years after your relationship with us ends — after which we delete or anonymise it.

8. Your rights

Subject to applicable law, you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data;
• request erasure of your data where we are not required to keep it;
• object to or restrict certain processing, and withdraw consent;
• request portability of data you provided to us; and
• lodge a complaint with your data-protection authority.

Some rights are limited where we must retain data to meet legal or regulatory obligations. To exercise a right, contact us using the details below.

9. How we protect data

We use technical and organisational measures — including encryption in transit and at rest, access controls, device-level authentication, and monitoring — to protect your data. No system is completely secure, so we also ask you to protect your passcode, one-time codes and recovery phrase and to tell us immediately of any suspected compromise.

10. Cookies & analytics

Our website and app use cookies and similar technologies for essential functionality, security, and to understand how the Services are used. Where required, we ask for your consent to non-essential cookies, and you can manage your preferences in your browser or device settings.

11. Children

The Services are not directed at people under 18, and we do not knowingly collect their data. If you believe a minor has provided us personal data, please contact us so we can delete it.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new "last updated" date and, for material changes, notify you in the app or by email.

13. Contact & complaints

For privacy questions or to exercise your rights, email our data-protection team at privacy@beeze.app. You also have the right to complain to the data-protection regulator in your country. For the terms governing your use of the app, see our Terms & Conditions.