Global Privacy Policy & Data Handling Terms

Volkov Intelligence Systems L.L.C. · Sandy, Utah, USA · Last updated July 26, 2026

Master Legal Infrastructure · Revision 2026.4 · Effective July 26, 2026 · Sandy, Utah, USA · Version 2026.4-global-unified

1. Scope & Data Controller

This Privacy Policy governs personal data processed by Volkov Intelligence Systems L.L.C. (registered seat: Sandy, Utah, USA) and its affiliates for the Clarity Wallet interface, Universal Search (⌘K), and Spark Rails.

For GDPR, UK GDPR, and CCPA/CPRA, the Data Controller is Volkov Intelligence Systems L.L.C. Data Protection Officer (DPO): dpo@volkovintelligence.com · Privacy requests: privacy@volkovintelligence.com

2. Overview & Non-Custodial Architecture

Clarity Wallet operates primarily as a non-custodial, client-side cryptographic interface. We do not store, hold, or transmit your private keys, BIP-39 recovery phrases, or unencrypted personal wallet data on our servers.

3. Information We Do Not Collect

Private Keys & Seed Phrases: Your 12- or 24-word BIP-39 seed phrase and derived HD wallet private keys never leave your local client device memory.

Unencrypted Financial Credentials: Full credit card numbers (PANs), CVVs, and raw bank account passcodes are never ingested, processed, or stored by Clarity servers.

4. Categories of Data Processed & Legal Grounds

We process personal data only when a clear legal basis exists under applicable global privacy laws.

Category	Specific Data Elements	Legal Basis (GDPR Art. 6)	Retention Period
Identity & Verification	Legal name, date of birth, government ID, tax IDs, facial biometric data (KYC vendors).	Legal Obligation (AML/CTF, FATF Travel Rule); Contract.	5–7 years post-account termination.
Technical & Device Data	IP address, browser fingerprint, OS specs, telemetry logs, API access keys.	Legitimate Interests (security, fraud prevention).	12 months rolling.
On-Chain & Transactional	Public wallet addresses, contract interactions, Spark session metadata, tokenization metadata (never full PAN/CVV).	Contract; Legitimate Interests.	Permanent where broadcast to public ledgers.
Communication Data	Support tickets, correspondence, registration forms.	Consent; Contract.	3 years post-resolution.

For fiat routing we also collect verified email, ISO country of residence, payment method flags (FedNow, ACH, SEPA, Card, Apple Pay, Google Pay), and masked identifiers. We do not sell data or use balances for advertising.

5. FATF Travel Rule & On-Chain Privacy

For digital asset transfers above applicable statutory thresholds (e.g., $1,000 USD / €1,000 EUR), required Originator and Beneficiary information may be transmitted to counterparty VASPs under FATF, EU MiCA, and U.S. FinCEN rules. Public blockchain records are permanent; GDPR erasure (Art. 17) cannot apply to decentralized ledgers.

7. International Data Transfers

Cross-border processing may occur in the United States and other regions. For EEA/UK/Swiss transfers without adequacy, we use EU Standard Contractual Clauses (SCCs), the UK IDTA, TLS 1.3 in transit, and AES-256 at rest where applicable.

8. Your Rights Across Global Jurisdictions

European Economic Area & United Kingdom: Access and portability (Art. 15/20); rectification and erasure (Art. 16/17); restriction and objection (Art. 18/21) where applicable.

California (CCPA/CPRA) & United States: Right to know categories collected; we do not sell personal information or share it for cross-context behavioral advertising; non-discrimination applies.

Submit verifiable requests to privacy@volkovintelligence.com. On-chain CLRTY-1, Ethereum, Bitcoin, and Solana records cannot be deleted.

9. Automated Decision-Making

We use automated risk scoring, fraud telemetry, and order validation. You may request human review of decisions with binding legal effect (e.g., sanctions-driven suspensions).