ONEUSD Privacy Policy

Introduction

Effective Date: July 9, 2026

Cross Technologies Ltd. ("we," "us," or the "Company") considers the protection of personal information ("Personal Data") to be extremely important. Please read this Privacy Policy carefully.

This Privacy Policy applies to the ONEUSD service owned and operated by the Company (the "Service"). It explains how we handle Personal Data collected when you use the Service, your rights regarding your Personal Data, and how to contact us if you have questions. We process your Personal Data responsibly in compliance with applicable laws and regulations.

By using, accessing, connecting to, or interacting with the Service, you consent to the collection, use, disclosure, retention, and security of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use, access, or connect to the Service.

1. Legal Bases for Processing

We process Personal Data only when we have a valid legal basis to do so. Depending on the context and applicable law, our legal bases may include:

  • Your Consent: This means that you, as a data subject, have consented to the processing of your Personal Data for specified purposes.
  • Legal Obligation: Processing your Personal Data is necessary for us to comply with our legal obligations.
  • Legitimate Interests: This means processing is necessary for our legitimate interests (provided such interests are not overridden by the rights and interests of data subjects).

2. Collection of Personal Data

We collect the following Personal Data. The types of Personal Data collected may vary depending on how you use or interact with our Service. We do not collect additional categories of Personal Data unless we inform you in advance.

A. Information You Provide to Us

  • Wallet connection: When you connect a wallet, we collect the wallet address. We do not collect, store, or have access to sensitive information such as the wallet's private key or seed phrases.
  • Pre-registration and Benefit Provision for Prediction Service: We collect and use your email address to provide information on and distribute benefits related to pre-registration for the Prediction service.
  • Customer inquiries: Information provided when you submit an inquiry (e.g., email address, wallet address, transaction information, and other related information).
  • Privacy-related inquiries: Email address and information you voluntarily provide when contacting us regarding data processing or exercising your rights.

B. Technical Information Collected During Use

When you use our Service, your IP address and limited anonymized usage statistics collected through Google Analytics may be processed to monitor and improve Service performance.

3. Purposes of Use of Personal Data

We may process your Personal Data for the following purposes:

  • To provide and operate the Service: Your Personal Data is used to provide the Service, perform contracts, and for other customer support purposes.
  • To protect the Service and user information: Your Personal Data is used to identify and resolve violations, investigate suspicious activity, detect, prevent, and respond to harmful or illegal activity, and detect fraud.
  • To Send service information and Marketing Communications: Your personal data may be used, depending on your consent, to send you information related to our services, such as news, promotions, and other updates.
  • To respond to customer support inquiries: Your Personal Data may be used to manage your inquiries and requests via email or other methods.
  • To improve Service quality: Your Personal Data may be used for analytical purposes to better understand web usage patterns and improve the quality of the Service.
  • To comply with legal and regulatory obligations: Your Personal Data may be used to enforce our Terms of Service, comply with laws, legal processes, or legal obligations, exercise or defend legal claims, detect, prevent, and resolve fraud, comply with requests from (domestic or overseas) law enforcement agencies, regulators, and tax authorities, resolve security or technical issues, or protect the property and legal rights of the Company or others.

4. Retention Period

We retain your Personal Data for the period necessary to achieve the purposes set out in this Privacy Policy or as required by your instructions. This includes data retention for legal, accounting, or other obligations. When we no longer need Personal Data, we take reasonable steps to delete, anonymize, or securely dispose of it.

5. Sharing of Personal Data with Third Parties

We may share your Personal Data with external processors where necessary to operate the Service. This includes collaborating with third parties to provide services such as hosting, service maintenance, network management, cybersecurity, and support. We use Google Analytics for metrics analysis purposes, and we use AWS (a cloud service provider) for data storage and service operations.

When handling Personal Data through third parties, we make reasonable efforts to ensure that data is processed securely in accordance with lawful requirements, including through mechanisms such as Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs).

6. Cross-Border Transfers of Personal Data

We are a global service provider located in the British Virgin Islands. Your Personal Data is stored on servers located in the Republic of Korea, which has been recognized under the GDPR adequacy decision as providing an equivalent level of data protection to EU Member States.

7. Disclosure of Personal Data

We may disclose your Personal Data to the extent required by legal obligations, or where we in good faith believe disclosure is necessary for legal procedures. We may also disclose data in connection with business transfers, mergers, or corporate restructuring.

8. Your Rights as a Data Subject

You have certain rights regarding your Personal Data that we collect and process. You may exercise these rights in relation to your Personal Data processed by us.

  • Right of Access / Right to Be Informed: You may request information about our processing activities, confirm whether we process your Personal Data, and receive a copy of such data. In some cases, we may refuse an access request, and if so, we will explain the reason.
  • Right to Rectification: You may request that we correct inaccurate Personal Data or complete incomplete Personal Data without undue delay. If you cannot update information directly, we will assist you where feasible.
  • Right to Erasure (Deletion): You may request anonymization, deletion, or removal of your Personal Data. We will comply unless we have a legitimate legal interest or requirement to retain it.
  • Right to Restrict Processing: You may request that we limit the use or storage of your Personal Data for specific purposes, especially if you believe the data is inaccurate or processing is unlawful.
  • Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing. We may continue processing only if: (i) we have compelling legitimate grounds, or (ii) it is necessary for legal claims.
  • Right to Data Portability: Where processing is based on a contract or consent, you may request to receive your data in a structured, machine-readable format or request its transfer to a third party.
  • Right to Withdraw Consent: You may withdraw consent at any time. This does not affect the lawfulness of processing prior to withdrawal. To withdraw consent shared with a third party, please contact them directly.
  • Right to Non-Discrimination: We do not discriminate against you for exercising your legal rights.
  • Identity and Authority Verification: To process requests, we may verify your identity. If acting on behalf of another, you must provide proof of authority, such as a power of attorney or documentation of legal guardianship.
  • Response Time and Format: We will acknowledge receipt within 10 business days and generally respond within one (1) month. If additional time is required (up to 90 days), we will explain the extension. We may charge a fee for excessive or manifestly unfounded requests.

9. Data Security

We take the security of your Personal Data very seriously and maintain a dedicated team with expertise in information security. The members of this team do their best to protect your data. We implement technical, administrative, and physical measures to protect your Personal Data and will continuously improve and maintain these measures. These measures include encryption and deletion.

10. Cookies and Other Tracking Technologies

Cookies are small text files containing data that are downloaded to your computer or mobile device. Browser cookies and similar technologies (referred to as "Cookies" in this section) allow a website or app to store information on your device or access stored information. These technologies are commonly used by most website and app providers to enable smooth navigation between pages, help ensure the security of webpages or applications, understand how websites are used, remember user settings, and improve the overall user experience.

When you use our Service, we may place Cookies on your device. General information about Cookies is available at www.allaboutcookies.org.

11. Children

This Service is not intended for children, and we do not knowingly collect Personal Data from them. You must have the legal capacity to enter into a contract to use the Service.

12. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in applicable laws, our data collection, use, and sharing practices, or technological developments. We will make the revised Privacy Policy accessible throughout the Service. You should review this Privacy Policy periodically. The "Effective Date" of this Privacy Policy indicates the date it was last updated.

By continuing to access or use the Service, you acknowledge that you have read and understood the latest version of this Privacy Policy.

13. Contact Information

If you have questions regarding your Personal Data or this Policy, please contact us at:

Email: support@crossdefi.io

(A response may take up to one month.)

By using the ONEUSD Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.