Legal & Privacy
  • 1. Introduction
    This Privacy Policy describes how VANTA TECHNOLOGY LIMITED (“we”, “our”, or “us”) collects, uses, discloses, and protects your personal information when you interact with us or use our digital stablecoin product, CNHS, pegged to CMH, and related services (collectively, the “Services”).
    We are committed to safeguarding your privacy and handling your data transparently in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), U.S. state privacy laws (e.g., CCPA), and global best practices.
  • 2. Information We Collect
    We may collect and process the following categories of personal information:
    a. Identity and Verification Data
    • Full legal name
    • Government-issued ID (e.g., passport, driver’s license)
    • Date of birth
    • Nationality or residency
    • Selfie or biometric data (if required for KYC)
    b. Contact Information
    • Email address
    • Phone number
    • Residential address
    c. Financial and Transactional Information
    • Wallet addresses
    • Transaction history (on/off-chain)
    • Bank account or payment details (if applicable)
    d. Technical and Usage Data
    • IP address
    • Device identifiers (e.g., UDID, IMEI)
    • Browser type and version
    • Usage logs and interaction data
    e. Cookies and Similar Technologies
    • Session cookies
    • Analytics cookies
    • Tracking pixels
  • 3. How We Use Your Information
    We use your information for the following purposes:
    • To verify your identity and fulfill KYC/AML requirements;
    • To enable and process transactions using CNHS;
    • To comply with legal obligations, including financial regulations;
    • To detect and prevent fraud, suspicious activity, or abuse;
    • To provide support, communicate with you, and improve our Services;
    • To analyze usage and improve platform security.
  • 4. Legal Basis for Processing
    Depending on your jurisdiction, we rely on one or more of the following legal bases to process your data:
    • Your consent (where applicable);
    • Performance of a contract with you;
    • Compliance with a legal obligation;
    • Our legitimate interests (e.g., fraud prevention, service development).
  • 5. Disclosure of Information
    We may disclose your information to:
    • Law enforcement or regulatory authorities, when required by law;
    • Third-party identity verification and compliance service providers;
    • Financial institutions and payment processors;
    • Our affiliates, subsidiaries, and business partners under confidentiality agreements;
    • In connection with a corporate transaction (e.g., merger, acquisition).
    We do not sell or rent your personal information to third parties for marketing purposes.
  • 6. Cross-Border Data Transfers
    Your personal data may be processed or stored in jurisdictions outside your country of residence. In such cases, we will implement safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms to ensure data protection consistent with applicable laws.
  • 7. Data Retention
    We retain your information as long as necessary to:
    • Provide you with the Services;
    • Comply with regulatory and legal obligations;
    • Prevent fraud and resolve disputes.
    In most cases, personal data related to financial transactions will be retained for a minimum of 5 to 7 years, or as required by applicable law.
  • 8. Your Rights
    Depending on your jurisdiction, you may have the right to:
    • Access the personal data we hold about you;
    • Correct or update your data;
    • Request deletion or restriction of processing;
    • Object to certain data uses;
    • Withdraw consent (where applicable);
    • Port your data to another provider;
    • Lodge a complaint with a data protection authority.
    To exercise these rights, please contact us at: business@cnhs.io.
  • 9. Cookies and Tracking Technologies
    We use cookies and similar technologies to:
    • Authenticate users;
    • Maintain user sessions;
    • Analyze platform traffic;
    • Enhance site performance.
    You may adjust your cookie preferences via your browser settings, although some features may be limited as a result.
  • 10. Security Measures
    We implement industry-standard security controls to protect your personal data, including:
    • Data encryption (at rest and in transit)
    • Secure access controls
    • Regular security audits
    • Third-party penetration testing
    Despite these measures, no system is completely secure. We cannot guarantee absolute security of your information.
  • 11. Children's Privacy
    Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has submitted data, we will take appropriate steps to delete it.
  • 12. Changes to This Privacy Policy
    We may revise this Privacy Policy periodically. Material changes will be posted on our website and/or sent via email. Continued use of the Services after such updates constitutes your acceptance.
  • 13. Contact Us
    For questions about this Privacy Policy or your personal data, please contact:
    VANTA TECHNOLOGY LIMITED19H MAXGRAND PLAZA NO.3 TAI YAU ST SAN PO KONG HONG KONG
Copyright © 2025 Vanta Technology Limited. All rights reserved.