PRIVACY POLICY

Last Updated: August 22, 2025

This Privacy Policy explains how Oneinfinite CORP ("ONE," "we," "us," or "our") collects, uses, shares, and protects information about you when you use our payment orchestration platform and related services (collectively, the "Services"). We are committed to protecting your privacy and handling your data in an open and transparent manner.

By creating an account or using our Services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

To provide and improve our Services, we collect the following types of information:

a. Information You Provide Directly to Us:

• Account Information: When you register for an account, we collect your name, email address, phone number, and company information.
• Verification Data (KYC/KYB): To comply with legal and regulatory obligations, we collect comprehensive verification data, which includes images of your government-issued ID, proof of address, business registration documents, and biometric data (such as facial scans for liveness checks).
• Financial Information: We collect information related to your designated USD₮ Wallet Address for settlement purposes.
• Communications: We collect information you provide when you contact our support team, participate in surveys, or communicate with us in any other way.

b. Information We Collect Automatically:

• Transactional Information: We collect details about the payment transactions processed through our Platform on your behalf, including amounts, timestamps, and payment methods.
• Log and Usage Data: We collect information about your interactions with our Services, including IP address, browser type, device information, pages visited, and dates and times of access.
• Cookies and Similar Technologies: We use cookies to operate and administer our site, gather usage data, and improve your experience.

c. Information We Receive from Third Parties:

• Identity Verification Services: We receive information from specialized third-party services to verify your identity and screen against AML, sanctions, and PEP lists.
• Payment Partners: Our integrated payment processors (e.g., credit card processors) provide us with transaction confirmation details.
• Publicly Available Sources: We may collect information from public databases and other sources for due diligence purposes.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain the Services: To operate our payment orchestration platform, process transactions, and execute settlements.
• For Compliance and Security: To verify your identity (KYC/KYB), prevent fraud, mitigate risk, and comply with our legal obligations (such as AML and CFT regulations).
• To Communicate with You: To send you transactional notifications, security alerts, and support messages.
• To Improve Our Services: To analyze usage patterns, troubleshoot issues, and develop new features and functionalities.

3. How We Share Your Information

We do not sell your personal information. We may share your information with the following parties for the purposes described in this policy:

• Service Providers: With third-party vendors who perform services on our behalf, such as identity verification, cloud hosting, and data analytics. These providers are contractually obligated to protect your data.
• Financial Partners: With payment processors, banking partners, and digital asset exchanges as necessary to facilitate the payment and settlement flow.
• For Legal Reasons: With law enforcement, government officials, or other third parties when we are compelled to do so by a subpoena, court order, or similar legal procedure, or when we believe in good faith that the disclosure of information is necessary to prevent physical harm or financial loss.
• Business Transfers: In connection with a merger, acquisition, financing, or sale of all or a portion of our assets.

4. Data Security

We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no security system is impenetrable, and we cannot guarantee the security of our systems 100%.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Services. We may also retain your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, which may require retention for several years after you close your account.

6. Your Rights and Choices

Depending on your location and subject to applicable law, you may have certain rights regarding your personal information, including the right to access, correct, or delete your data. To exercise these rights, please contact us through the methods described below.

7. International Data Transfers

ONE is based in the United States, and we process and store information on servers located in the U.S. By using our Services, you consent to the transfer of your information to the U.S., which may have different data protection laws than your country of residence.

8. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

9. Changes to This Policy

We may amend this Privacy Policy from time to time by posting a revised version on our website. The revised version will be effective at the time we post it. We encourage you to review this page periodically for the latest information on our privacy practices.

Contact Information: For questions regarding this Privacy Policy, please contact us at info@one.lat.