Legal

Privacy Policy

Last updated: January 1, 2026

This Privacy Policy explains how Spring Light LLC ("Spring Light", "we", "us") collects, uses, shares and protects personal information when you use our website and services. It applies to information collected through this site, our applications and our communications with you.

1. Information we collect

Identity & verification data: name, date of birth, government-issued ID details, photo, residency information and selfie/liveness imagery used for KYC.
Contact data: email address and other contact information you choose to provide.
Account & transaction data: account identifiers, deposit and withdrawal addresses, transaction history, account statements, support messages.
Device & usage data: IP address, device and browser identifiers, operating system, log data, and analytics events necessary to operate the service securely.
Compliance data: sanctions screening results, source-of-funds information and any documents you submit to satisfy regulatory requirements.

2. How we use information

To provide, secure and maintain the Services
To verify your identity and meet our AML, KYC, sanctions and other legal obligations
To monitor for and prevent fraud, abuse and security incidents
To respond to your support requests and communicate operational notices
To comply with subpoenas, court orders, regulatory requests and other legal process

3. Legal bases

Where applicable, we process personal information to perform our contract with you, to comply with our legal obligations, and on the basis of our legitimate interests in operating a safe and lawful service.

4. How we share information

Service providers: identity verification vendors, blockchain analytics providers, infrastructure and security vendors, all under contractual confidentiality and security obligations.
Regulators & law enforcement: in response to lawful requests and to satisfy reporting obligations such as Suspicious Activity Reports.
Counterparties: limited information may be shared with counterparties or their financial institutions where required by the Travel Rule or similar regulations.
Corporate transactions: in connection with a merger, acquisition or sale of assets, subject to appropriate confidentiality protections.

We do not sell your personal information.

5. Data retention

We retain personal information for as long as necessary to provide the Services and to satisfy our legal, regulatory and reporting obligations. Records relating to KYC, transactions and AML monitoring are typically retained for at least five years after account closure or longer where required by law.

6. Security

We implement administrative, technical and physical safeguards designed to protect personal information. See our Security page for more information. No security program is perfect, and you are responsible for maintaining the security of your own credentials and devices.

7. Your choices & rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information. We may retain certain information where required by law or for legitimate business purposes (for example, AML records). To make a request, email admin@springlightllc.com.

8. Cookies

We use a small number of cookies and similar technologies to operate the Services securely and to remember your preferences. You can control cookies through your browser. Essential cookies cannot be disabled without affecting the Services.

9. International transfers

If you access the Services from outside the United States, you understand that your personal information may be processed in the United States, where data protection laws may differ from those of your jurisdiction.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date above indicates when it was last revised.

11. Contact

For privacy questions or to exercise your rights, contact admin@springlightllc.com or write to Spring Light LLC, 4270 S Mead St, Seattle, WA 98118, United States.