Privacy Policy

Introduction

PRL Vault ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our custodial Pearl (PRL) wallet and bonding curve launchpad platform.

We believe in transparency. This policy describes exactly what data we collect, why we collect it, and how you can control it.

Information We Collect

Account Information

When you create an account, we collect:

• Email address (for authentication and notifications)
• Password (hashed using bcrypt, never stored in plaintext)
• Two-factor authentication secrets (encrypted using AES-256-GCM)

Wallet & Transaction Data

For custodial wallet functionality:

• Pearl (PRL) deposit addresses (Bech32m Taproot format)
• Encrypted private keys (AES-256-GCM envelope encryption)
• Transaction history (deposits, withdrawals, trades)
• Balance information (on-chain and internal ledger)
• KYC status (if you complete verification)

Usage Data (with consent)

When you consent to analytics cookies:

• Pages visited and features used
• Browser type and device information
• IP address (for fraud prevention)
• Timestamps and session duration

Cookie Categories

How We Use Your Information

We use collected information to:

• Provide custodial wallet services and execute transactions
• Authenticate users and protect against fraud
• Process deposits, withdrawals, and launchpad trades
• Enforce our Terms of Service and platform policies
• Comply with legal obligations (AML/KYC regulations)
• Improve platform features and user experience (with consent)
• Send important notifications about your account

Data Sharing & Disclosure

We do not sell your personal data. We may share information:

• With law enforcement if legally required
• With KYC/AML verification providers (if you opt in to verification)
• With our hosting and infrastructure providers (encrypted data only)
• In case of business transfer or acquisition (you will be notified)

Data Security

We implement industry-standard security measures:

• AES-256-GCM encryption for sensitive data at rest
• bcrypt password hashing with salt
• TLS/SSL for data in transit
• Mandatory two-factor authentication for withdrawals
• Admin approval for large withdrawals (≥$1000 USD equivalent)
• Regular security audits and monitoring

Note: As a custodial platform, we hold private keys on your behalf. Please understand the trust implications and only deposit what you're comfortable entrusting to PRL Vault.

Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account (subject to legal retention requirements)
• Withdraw consent for analytics/marketing cookies at any time
• Export your transaction history
• Object to data processing for certain purposes

To exercise these rights, contact us at privacy@prlvault.com

Data Retention

We retain your data as long as your account is active, plus any legally required retention periods. Transaction records may be kept for tax and regulatory compliance (typically 7 years). You can request account deletion, but certain data may need to be retained for legal purposes.

Children's Privacy

PRL Vault is not intended for users under 18 years of age. We do not knowingly collect information from children. If we discover we have collected data from a minor, we will delete it immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the platform. Continued use after changes constitutes acceptance.

Contact Us

For privacy-related questions, concerns, or requests: