Privacy Policy

1 · Who we are

Nimble & Cross is operated by Nimble & Cross Financial Inc. (Toronto, ON, Canada) and Nimble & Cross Global Ltd. (Cayman Islands). This policy describes how we collect, use, and share personal information across the Nimble & Cross platform.

2 · What we collect

We collect only what we need to provide the service and meet our regulatory obligations.

• Account data — name, email, country, password hash.
• KYC data — date of birth, government ID, address, business documents. Required by our card-issuing and banking partners.
• Financial activity — accounts, transactions, invoices, receipts, tax filings created or imported through Nimble & Cross.
• Communications — emails, support tickets, in-app messages.
• Device data — IP address, browser type, device identifiers, used for security and fraud prevention.

3 · How we use it

• To operate the platform and execute actions you request (incorporations, payments, filings).
• To meet our regulatory and partner-mandated KYC, AML, and tax-reporting obligations.
• To improve our platform, debug, and provide customer support.
• To send transactional communications you cannot opt out of (e.g., security notices).

We do not sell your personal information. We do not share it with third parties for advertising.

4 · Who we share with

To run the platform, we share necessary data with the following partners, each bound by data-processing agreements:

• Lithic — card issuing.
• Bridge (Stripe) — stablecoin issuance and treasury.
• Paytrie — CAD on-ramp.
• Browserbase — isolated browser environments used to execute government filings on your behalf.
• The Canada Revenue Agency, IRS, and the Cayman Registrar — when you authorize Nimble & Cross to file on your behalf.
• Cloud providers — Google Cloud Platform (primary), and infrastructure subprocessors listed in the trust center.

5 · Your rights

Depending on your jurisdiction (Canada PIPEDA, GDPR/UK-GDPR, CCPA, etc.), you may have the right to access, correct, delete, port, or restrict the processing of your personal information. To exercise any of these rights, write to privacy@nimblecross.com. We respond within 30 days.

6 · Retention

We retain account data while your account is active and for as long as regulatory and tax obligations require afterwards — typically 7 years for financial records. We delete or anonymize data sooner where permissible.

7 · International transfers

Nimble & Cross's primary data is hosted in Canada (PIPEDA jurisdiction). Limited data is transferred to partners in the United States, the EU, and the United Kingdom under appropriate transfer mechanisms (Standard Contractual Clauses, adequacy decisions where available).

8 · Children

Nimble & Cross is not directed at children under 18 and we do not knowingly collect personal information from them.

9 · Updates

We will post any material changes to this policy on this page and notify active accounts by email at least 30 days before they take effect.

10 · Contact

Privacy questions or requests: privacy@nimblecross.com
Data protection officer: dpo@nimblecross.com
Postal: Nimble & Cross Financial Inc., Toronto, ON, Canada.