Privacy Policy.
What data we process, why, and your rights.
Who we are
The controller of your personal data is Sigma Assets GmbH, Gubelstrasse 11, 6300 Zug, Switzerland (UID CHE-123.456.789), operator of Money Suisse. Sigma Assets GmbH is a member of VQF, a self-regulatory organisation recognised by FINMA.
Our data protection officer can be reached at privacy@moneysuisse.com or by post at the address above, marked “Data Protection”.
Data we collect
Identity data: name, date of birth, nationality, address and the result of identity verification. Verification is carried out by us; your identity documents are stored securely off-chain and are not written on-chain.
Account data: email, phone number, sign-in method, passkey identifiers and security settings.
Transaction data: wallet addresses, the tokens you hold and the transfers you make. Amounts and counterparties are encrypted on the Swisstronik network and are not visible to the public.
Technical data: device type, browser, IP address and log data needed to keep the service secure.
Why we process it
To open and run your account and to perform our contract with you (Terms of Use).
To meet our legal obligations, in particular under the Swiss Anti-Money Laundering Act (AMLA) and the VQF regulations.
To protect you and the service against fraud and abuse, based on our legitimate interest.
To send product updates, only with your consent. You can withdraw consent at any time.
Who we share it with
Service providers that process data on our behalf under a data processing agreement: card issuing, cloud hosting in Switzerland and the EU, and customer support tools.
Competent authorities, where we are legally required to disclose information, for example on a lawful request from the Swiss Money Laundering Reporting Office (MROS).
We do not sell your personal data.
International transfers
We store data primarily in Switzerland and the European Economic Area. Where data is transferred to a country without an adequate level of protection, we use the standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC).
How long we keep it
We keep identity and transaction records for ten years after the end of the business relationship, as required by AMLA. Other data is deleted when it is no longer needed for the purposes above.
Your rights
You have the right to access, correct and delete your data, to restrict or object to processing and to data portability, within the limits of the Swiss Federal Act on Data Protection (FADP) and, where applicable, the GDPR.
To exercise your rights, write to privacy@moneysuisse.com. We reply within 30 days. You can also lodge a complaint with the FDPIC.
Changes to this policy
We may update this policy. We will inform you of material changes by email or in the app at least 30 days before they take effect.
This document is provided in English. Translations into German, French and Italian are for convenience; the English version prevails.