Privacy Policy

1. Who We Are

Thaumar Limited ("we", "us") operates the Stable Chain service ("Service"), which receives deposits through licensed collection partners in Japan and delivers value to merchants by stablecoin transfer. This Policy explains how we handle the personal data of merchants, their representatives, and end users who make deposits.

2. Data We Collect

Identity & KYC data: name, date of birth, nationality, identity documents, and beneficial-ownership information.

Contact & account data: email address, organization details, and login credentials (secrets are stored encrypted).

Financial & transaction data: bank, branch, and account details; remitter name; deposit amounts and times; matching and return status; and fees.

Crypto-asset data: destination wallet addresses, networks, and transaction hashes. Data recorded on a blockchain is public and cannot be deleted.

Technical data: IP address, device and browser information, access logs, and cookies used for security and operation.

3. How We Use It

To provide and operate the Service; reconcile deposits and execute transfers; perform identity verification, sanctions screening, transaction monitoring, and fraud prevention; comply with anti-money-laundering, counter-terrorist-financing, and other legal obligations; maintain security and audit logs; communicate with you about the Service; and improve the Service.

4. Legal Bases

Where applicable law requires a legal basis, we rely on: performance of a contract; compliance with legal obligations (including identity verification and record-keeping); our legitimate interests (security and fraud prevention); and your consent where required.

5. Who We Share It With

The merchant you are paying, to identify and reconcile your deposits (including remitter name and access information for the payment page); collection partners, to receive and reconcile deposits; the custodian and blockchain networks, to execute transfers (data recorded on a blockchain is public); banks and other financial institutions involved in deposits and returns; service providers (such as cloud hosting, email delivery, and identity-verification services) under data-processing agreements; a successor or acquirer in connection with a merger or business transfer; and authorities and regulators where required by law or in connection with legal claims.

We do not sell personal data.

6. International Transfers

As an overseas service that uses a Japanese collection rail, we may transfer personal data between countries and regions, including Japan. When we do, we apply appropriate safeguards as required by applicable law.

7. Retention

We retain personal data for as long as needed to provide the Service and to meet our legal obligations, including anti-money-laundering record-keeping. Transaction data recorded on a blockchain cannot be deleted.

8. Security

We apply technical and organizational measures, including encryption of secrets, access controls, audit logging, and signed webhooks. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Subject to applicable law and our legal retention duties, you may request access to, correction, deletion, or restriction of your personal data, request its portability, object to its processing, and withdraw your consent. We may ask you to verify your identity, and we may be unable to delete data that we are legally required to retain (such as anti-money-laundering records).

10. Cookies

We use cookies and similar technologies (including browser storage) for security, session management, and remembering your preferences (such as language).

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy in the Service with a new effective date.

12. Contact

Thaumar Limited, Vistra Corporate Services Centre, Wickhams Cay II, Road Town, Tortola, VG1110, British Virgin Islands

Contact: support@thaumar.com