Effective Date: April 2026

Bay Bridge Inc. ("we", "us", "our", or "the Company") operates the BitVoy cryptocurrency wallet service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. By accessing or using BitVoy, you consent to the practices described in this policy.

1. Information We Collect

We may collect the following types of information:

  • Account Information: Email address, username, and authentication credentials (including passkeys and FIDO2/WebAuthn registration data) used to create and secure your account.
  • Blockchain Data: Wallet addresses, transaction histories, and related on-chain data associated with your use of the Service. Please note that blockchain transactions are publicly recorded and cannot be deleted.
  • Device and Usage Information: Browser type, operating system, IP address, access times, pages viewed, and other diagnostic data collected automatically when you interact with the Service.
  • Session and Storage Data: We use session storage and IndexedDB in your browser to maintain your session, store encrypted key material locally, and provide a seamless user experience. Cookies may be used in limited circumstances for server-side session management.
  • Third-Party Authentication Data: If you sign in via OpenID Connect (OIDC) providers (e.g., Google, Apple), we receive limited profile information (such as your email and a unique identifier) as authorized by you during the authentication process.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To create, maintain, and secure your wallet account.
  • To process and record cryptocurrency transactions on your behalf.
  • To authenticate your identity and protect against unauthorized access.
  • To communicate with you regarding your account, security alerts, and service updates.
  • To improve, personalize, and optimize our Service.
  • To comply with applicable laws, regulations, and legal obligations.

3. Sharing of Information

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party vendors who assist us in operating the Service (e.g., cloud hosting, analytics), subject to confidentiality agreements.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request.
  • Safety and Security: To protect the rights, property, or safety of the Company, our users, or others, including to detect, prevent, or address fraud or security issues.
  • Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, with notice provided to you.

4. Blockchain Transparency

BitVoy operates on public blockchain networks (including Avalanche C-Chain). Transactions submitted through the Service are recorded on the blockchain and are publicly visible. Wallet addresses and transaction data on the blockchain cannot be modified or deleted by us. You should be aware that your on-chain activity may be observable by third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of sensitive data in transit and at rest.
  • Use of passkey-based (FIDO2/WebAuthn) authentication to eliminate password-related risks.
  • Multi-party computation (MPC) for key management, ensuring that no single party holds complete access to your private keys.
  • Regular security reviews and monitoring.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

6. Browser Storage

We primarily use session storage and IndexedDB (browser-based storage mechanisms) to operate the Service. Cookies may be used in limited circumstances for server-side session management. These technologies are used to:

  • Maintain your authenticated session.
  • Store encrypted cryptographic key material locally on your device.
  • Remember your language and display preferences.

Clearing your browser storage may result in loss of locally stored key data and may require account recovery.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements. Note that blockchain data cannot be deleted.
  • Portability: Request your data in a structured, commonly used format.
  • Objection: Object to certain processing of your personal information.

To exercise any of these rights, please contact us using the information provided below. We will respond within a reasonable period of time.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We may also retain certain information as required by law or for legitimate business purposes, such as resolving disputes and enforcing our agreements. Blockchain transaction records are permanent and are not subject to deletion.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including Japan, where our servers are located. By using the Service, you consent to the transfer of your information to these countries, which may have different data protection laws than your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page with a revised effective date. Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

12. Continuous Improvement

We continuously review and improve our personal information protection management system in response to changes in our business operations, applicable laws, social environment, and technology landscape.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us at:

Bay Bridge Inc.
Email: support@bitvoy.org