B2B Website Privacy Policy

(last updated on October 02, 2026)

1. INTRODUCTION

This Privacy Policy (hereinafter, the “Privacy Policy”) explains how 3-102-084697 S.R.L., a company incorporated under the laws of Costa Rica, with its registered address at Suite 408, 4th Floor, Condominio Distrito Cuatro, Guachipelín, San Rafael, Escazú, San José, Costa Rica (hereinafter, “Company”, “we”, “us” or “our”), collects, uses, stores, shares and otherwise processes personal data in connection with the website available at https://b2b.cryptostorybusiness.com/, including its related webpages and functionality (collectively, the “Website”).

This Privacy Policy applies to personal data processed when you:

(a) access or browse the Website;

(b) interact with the Website, including its product or module configuration functionality;

(c) submit a request through the Website, including a request for a demonstration, commercial proposal, financial model, information regarding an API, white-label or other B2B solution, or other available request type;

(d) provide your contact details for us to communicate with you through your selected communication channel; or

(e) otherwise communicate with us in connection with the Website or a potential B2B relationship.

The Website is intended primarily for business and professional users, including existing and prospective business partners, service providers and other persons acting in a professional or commercial capacity.

This Privacy Policy applies to the Website only. Where personal data is processed in connection with a specific B2B solution, integration, service or contractual relationship, additional privacy notices, data processing terms or other data protection documentation may apply.

Please read this Privacy Policy carefully to understand how and why we process your personal data and the rights that may be available to you under applicable data protection laws.

2. PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data in connection with your use of the Website:

2.1. Contact data

When you submit a request through the Website, you may choose your preferred communication method and provide one of the following contact details:

(a) business email address;

(b) Telegram username or other Telegram contact identifier; or

You may select one of the communication methods available through the Website and provide the corresponding contact information. We do not require you to provide contact details for the other available communication methods.

2.2. Request and configuration data

When you submit a request through the Website, we may collect information relating to your request and your interaction with the Website, including:

(a) the type of information, solution or follow-up you have requested, such as a demonstration, commercial proposal, financial model, information about an API, your own branded application or another B2B solution;

(b) the products, features or modules you have selected or configured through the Website;

(d) the language associated with your request.

This information may be submitted together with your selected contact information so that we can understand the context of your request and provide a relevant response.

2.3. Website usage and analytics data

When you access or use the Website, certain information may be collected automatically through analytics technologies, cookies, pixels and similar technologies, including Google Analytics and Meta Pixel.

Depending on the technology used and your cookie preferences, this information may include:

(a) IP address;

(b) browser type and browser-related information;

(d) pages or sections of the Website viewed or interacted with;

(e) referring website, source or channel through which you accessed the Website;

(f) UTM parameters and other campaign or attribution information;

(g) cookie, pixel or similar online identifiers; and

(h) information regarding your interactions with the Website and our advertising or marketing campaigns.

Analytics and advertising technologies that are not strictly necessary for the operation of the Website are used subject to applicable consent requirements and your choices made through our cookie consent mechanism.

2.4. Technical and server log data

Our hosting and technical infrastructure providers may automatically process standard server and technical log information generated when the Website is accessed. Such information may include IP address, date and time of access, requested pages or resources, browser or device information, technical events, errors and other information necessary for the operation, security and maintenance of the Website.

2.5. Cookies and similar technologies

The Website uses cookies and similar technologies. These may include:

(a) strictly necessary cookies required for the operation, security or essential functionality of the Website;

(b) analytics cookies and similar technologies used to understand how visitors use the Website and to measure Website performance; and

(c) advertising cookies, pixels and similar technologies used to measure advertising effectiveness, attribute visits or conversions to marketing campaigns and support advertising and remarketing activities.

The analytics and advertising technologies used on the Website may include Google Analytics and Meta Pixel. These technologies may use cookies, pixels and similar identifiers to collect information about your device, browser, interactions with the Website, referral source and advertising or campaign-related activity.

Cookies used on the Website may include session cookies, which expire when you close your browser, and persistent cookies, which remain on your device for a defined period or until deleted. Cookies and similar technologies may be set by us or by third-party providers whose technologies are integrated into the Website.

Where required by applicable law, analytics and advertising cookies or similar technologies will not be activated until you have provided the required consent through the Website's cookie consent mechanism.

Where consent is required, you may accept or reject non-essential cookies and similar technologies through the cookie consent mechanism. Refusing or withdrawing consent to non-essential cookies will not prevent you from accessing the core functionality of the Website, although certain non-essential features or functionality may be affected.

You can find additional information about the cookies and similar technologies used on the Website, including their purposes and available choices, through our cookie consent mechanism. You may review or change your available cookie preferences, including withdrawing previously provided consent, at any time through the cookie settings available on the Website.

You may also be able to control or delete cookies through your browser settings. Browser-level controls operate independently from the cookie preferences available through the Website and may affect the functionality of websites you visit.

3. HOW WE USE YOUR PERSONAL DATA

We may use the personal data described in this Privacy Policy for the following purposes:

3.1. To process and Respond to Your Requests

We use your contact information and request-related information to receive, review and respond to requests submitted through the Website, including requests for demonstrations, commercial proposals, financial models, information regarding APIs, white-label or other B2B solutions, and other available commercial inquiries.

This includes using the contact method you have selected, such as email, Telegram or WhatsApp, to communicate with you regarding your request, arrange a demonstration, provide requested information, answer questions and discuss potential commercial cooperation.

3.2. To personalize our commercial response

We may use information regarding the products, features or modules you selected or configured, the type of request you submitted, the relevant section of the Website and the language associated with your request to understand your interests and prepare a more relevant demonstration, proposal, response or other commercial communication.

3.3. Sales and business development

We may use your contact information and information relating to your request to follow up with you regarding potential business cooperation, our B2B solutions, integrations, products or services that may be relevant to your inquiry or expressed interests.

This may include maintaining information about your request and related communications in our internal systems for sales, business development and relationship-management purposes.

3.4. Marketing communications

Where permitted by applicable law, we may use your contact information to send you marketing or promotional communications regarding our B2B solutions, products, functionality, commercial opportunities, updates or related offerings that may be relevant to you.

Such communications may be sent through the contact channel you selected or provided to us, including email, Telegram or WhatsApp, as applicable.

Where consent is required by applicable law, we will send such communications only on the basis of your consent.

You may opt out of receiving marketing communications at any time by using any unsubscribe or opt-out mechanism provided in the relevant communication or by contacting us using the details provided in this Privacy Policy.

Opting out of marketing communications will not prevent us from sending communications that are necessary to respond to an active request or otherwise manage an existing business relationship with you.

3.5. Website analytics and performance

We use analytics information to understand how visitors access and interact with the Website, measure Website traffic and performance, identify usage trends, understand which pages, content or functionality are of interest to visitors, and improve the Website and our B2B offering.

This may include the use of Google Analytics, subject to applicable consent requirements and your cookie preferences.

3.6. Advertising, attribution and remarketing

We may use advertising cookies, pixels and similar technologies to measure the effectiveness of our advertising campaigns, understand how visitors arrive at and interact with the Website, attribute visits or conversions to particular campaigns or marketing channels, create or measure advertising audiences and support advertising or remarketing activities.

This may include the use of Meta Pixel, subject to applicable consent requirements and your cookie preferences.

3.7. Website operation, security and technical administration

We may process technical and server log information where necessary to operate, maintain, secure and troubleshoot the Website and its supporting infrastructure, prevent or investigate misuse, fraud or security incidents, and ensure the technical integrity and availability of the Website.

3.8. Legal and compliance purposes

We may process personal data where reasonably necessary to comply with applicable legal or regulatory requirements, respond to lawful requests from competent authorities, establish, exercise or defend legal claims, enforce our applicable terms and policies, or protect our rights, property, systems or legitimate business interests.

4. LEGAL BASES FOR PROCESSING

Where applicable data protection law requires us to identify a legal basis for processing personal data, we rely on one or more of the following legal bases, depending on the circumstances:

4.1. Taking steps at your request before entering into a contract

Where you submit a request in your individual capacity concerning a potential contractual relationship with us, we may process your contact information, request details and configuration information where necessary to respond to your request, provide requested information, arrange a demonstration, prepare or discuss a commercial proposal, or take other steps at your request in connection with a potential contractual relationship.

4.2. Legitimate interests

We may process personal data where necessary for our legitimate business interests or those of a third party, provided that such interests are not overridden by your interests, fundamental rights or freedoms.

Our legitimate interests may include:

(a) responding to and managing B2B inquiries;

(b) developing and maintaining relationships with prospective and existing business partners;

(d) understanding the commercial interests and requirements of prospective business partners;

(e) improving our Website, B2B solutions and commercial offering;

(f) operating, maintaining and securing the Website and our internal systems;

(g) preventing and investigating fraud, misuse, security incidents or other unlawful activity; and

(h) establishing, exercising or defending legal claims and protecting our legal and commercial interests.

Where we rely on legitimate interests for direct marketing, we do so only where permitted by applicable law and subject to your right to object to such processing at any time.

4.3. Consent

We rely on your consent where required by applicable law, including for the use of non-essential analytics and advertising cookies, pixels or similar technologies and, where required, for certain marketing communications.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

You may manage available cookie preferences through the Website's cookie consent mechanism and may withdraw consent to marketing communications through the applicable unsubscribe or opt-out method or by contacting us.

4.4. Compliance with legal obligations

We may process personal data where necessary to comply with a legal obligation to which we are subject, including applicable legal, regulatory, tax, accounting, record-keeping or other mandatory requirements, or to respond to legally binding requests from competent public authorities.

5. HOW WE SHARE YOUR PERSONAL DATA

We do not sell personal data for monetary consideration. We may disclose, share or otherwise make personal data available to third parties for the purposes described in this Privacy Policy, including analytics and advertising purposes, subject to applicable law, applicable consent requirements and your cookie preferences, as further described below.

5.1. Service providers and technical vendors

We may engage third-party service providers and vendors that support the operation, hosting, maintenance, security and technical functionality of the Website and our internal systems.

These providers may process personal data on our behalf to the extent necessary to provide their services to us and may include, for example, website hosting, infrastructure, IT and technical service providers.

Where required by applicable law, we require service providers processing personal data on our behalf to process such data in accordance with appropriate contractual and data protection requirements.

5.2. Analytics and advertising providers

Subject to applicable consent requirements and your cookie preferences, certain personal data and information about your use of the Website may be collected or received by:

(a) Google, through Google Analytics, for Website analytics, measurement and related purposes; and

(b) Meta, through Meta Pixel, for advertising measurement, attribution, audience and remarketing purposes.

Depending on the relevant processing activity and applicable law, these providers may process certain personal data as independent controllers or in another capacity determined by their applicable terms and data protection arrangements.

These providers may process information such as online identifiers, IP address, browser or device information, Website activity, referral information and advertising or campaign-related information in accordance with their respective terms and privacy policies and, where applicable, our settings and instructions.

5.3. Communication platforms

Where you choose Telegram or WhatsApp as your preferred communication method, we may communicate with you through the platform you selected.

In such cases, your use of the relevant communication platform and the processing of personal data by that platform are also subject to the applicable terms and privacy practices of Telegram or WhatsApp, as applicable.

If you choose email as your preferred communication method, personal data contained in the relevant communications may also be processed by the email and technical infrastructure providers used to transmit and manage such communications.

5.4. Professional advisers and legal requirements

We may disclose personal data to our professional advisers, including legal, accounting, audit or other professional advisers, where reasonably necessary for legitimate business, compliance or legal purposes.

We may also disclose personal data where required by applicable law, regulation, legal process or a binding request from a competent authority, or where reasonably necessary to establish, exercise or defend legal claims, protect our rights or property, investigate fraud or security incidents, or protect the rights and safety of others.

5.5. Corporate transactions

Personal data may be disclosed or transferred in connection with an actual or proposed merger, acquisition, financing, reorganization, sale of all or part of our business or assets, or similar corporate transaction, subject to applicable legal and confidentiality requirements.

5.6. Other disclosures

We may disclose personal data to another person where you have requested or authorized the disclosure, where you have provided consent where required, or where such disclosure is otherwise permitted or required by applicable law.

6. INTERNATIONAL DATA TRANSFERS

The Company is established in Costa Rica, and the third-party service providers and platforms described in this Privacy Policy may operate or process personal data in countries other than the country in which you are located.

As a result, your personal data may be transferred to, stored in or otherwise processed in Costa Rica, the United States or other countries where the Company or its relevant service providers maintain operations or processing infrastructure.

Where personal data is transferred from the European Economic Area (hereinafter, “EEA”), the United Kingdom or another jurisdiction that restricts international transfers of personal data to a country that is not recognized as providing an adequate level of data protection, we will take appropriate measures where required by applicable law to protect the transferred personal data.

Such measures may include, as applicable:

(a) transferring personal data to a recipient located in a country recognized by the relevant competent authority as providing an adequate level of data protection;

(b) using approved contractual safeguards, including the European Commission’s Standard Contractual Clauses or the applicable United Kingdom international data transfer mechanisms; or

Where required, we may also implement supplementary technical, organizational or contractual measures taking into account the nature of the personal data, the relevant processing activity and the destination of the transfer.

Certain third-party providers identified in this Privacy Policy may maintain their own international data transfer arrangements and safeguards in accordance with applicable data protection laws.

You may contact us using the details provided in this Privacy Policy if you would like further information about the safeguards applicable to international transfers of your personal data, where such information is required to be made available under applicable law.

7. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or otherwise processed, including for legitimate business, legal, regulatory, accounting, security and dispute-resolution purposes.

7.1. Requests and сontact data

Personal data submitted in connection with a request through the Website, including your contact information, request details, selected modules and related communications, may generally be retained for up to 24 months following our last meaningful interaction with you.

This period allows us to manage prospective B2B relationships, respond to follow-up inquiries and maintain appropriate records of our business development activities.

If you enter into a commercial relationship with us, relevant personal data may be retained for a longer period in accordance with the applicable Commercial Agreement, our business record-keeping requirements and applicable law.

We may also retain particular information for a longer period where reasonably necessary to comply with a legal obligation, establish, exercise or defend legal claims, resolve disputes, prevent fraud or misuse, or protect our legal rights.

7.2. Marketing data

Where we process your contact information for marketing purposes, we may retain the information necessary for such communications for as long as we have a valid legal basis to do so, or until you opt out, withdraw your consent where consent is the applicable legal basis, or otherwise object to the processing as provided by applicable law.

If you opt out of marketing communications, we may retain limited information necessary to record and respect your opt-out preference and prevent further marketing communications from being sent to you.

7.3. Analytics, advertising and cookie data

Personal data and identifiers collected through cookies, analytics tools, advertising pixels and similar technologies are retained in accordance with our applicable settings, the duration of the relevant cookies and the retention practices of the relevant service provider, including Google Analytics and Meta, as applicable.

Further information regarding the cookies and similar technologies used on the Website, including their provider, purpose and duration where applicable, is available through our cookie consent mechanism.

7.4. Technical and server logs

Technical and server log information may be retained for periods reasonably necessary for Website operation, security, troubleshooting, fraud prevention and other legitimate technical purposes, subject to the retention practices of the relevant hosting or infrastructure provider.

When personal data is no longer required for the purposes for which it is retained, we will delete or anonymize it, or otherwise handle it in accordance with applicable data protection law.

8. YOUR DATA PROTECTION RIGHTS

Depending on your location and the data protection laws applicable to the processing of your personal data, you may have certain rights in relation to your personal data.

These rights may include:

8.1. Right of access

You may have the right to request confirmation as to whether we process personal data relating to you and, where applicable, to obtain access to such personal data and certain information regarding how it is processed.

8.2. Right to rectification

You may have the right to request that inaccurate personal data relating to you be corrected and that incomplete personal data be completed.

8.3. Right to erasure

You may have the right to request deletion of your personal data in certain circumstances, subject to applicable legal exceptions and our right or obligation to retain particular information where permitted or required by law.

8.4. Right to restriction of processing

You may have the right to request that we restrict the processing of your personal data in certain circumstances, including while the accuracy of the data or the lawfulness of the processing is being considered.

8.5. Right to object

Where we process personal data on the basis of legitimate interests, you may have the right to object to such processing on grounds relating to your particular situation.

Where your personal data is processed for direct marketing purposes, you may object to such processing at any time. If you object to direct marketing, we will stop processing your personal data for that purpose as required by applicable law.

8.6. Right to data portability

Where applicable, you may have the right to receive certain personal data that you have provided to us in a structured, commonly used and machine-readable format and to request that such data be transmitted to another controller where technically feasible and where the applicable legal requirements are met.

8.7. Right to withdraw consent

Where we rely on your consent as the legal basis for processing, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You may withdraw or modify your consent to non-essential cookies and similar technologies through the Website's cookie consent mechanism, where available. Where marketing communications are based on your consent, you may also withdraw that consent at any time using any available unsubscribe or opt-out mechanism or by contacting us.

8.8. Right to lodge a complaint

Depending on your location and applicable law, you may have the right to lodge a complaint with the competent data protection or supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

If you are located in the EEA or the United Kingdom, you may generally lodge a complaint with the competent supervisory authority in the country in which you live or work or where the alleged infringement occurred.

8.9. Exercising your rights

You may submit a request to exercise your applicable data protection rights by contacting us using the contact details provided in the “Contact us” section of this Privacy Policy.

We may request information reasonably necessary to verify your identity and confirm that the request relates to personal data concerning you before responding to the request.

We will respond to valid requests within the period required by applicable law. Certain rights may be subject to limitations, exceptions or conditions under applicable law, and we may decline or limit a request where legally permitted or required to do so.

9. DATA SECURITY

We take reasonable and appropriate technical and organizational measures designed to protect personal data against unauthorized or unlawful access, use, disclosure, alteration, loss, destruction or other unauthorized processing.

Such measures are implemented taking into account the nature and scope of the processing, the categories of personal data involved and the risks associated with the relevant processing activities.

We take reasonable measures designed to limit access to personal data submitted through the Website to persons who require such access for legitimate business purposes.

Where we engage service providers to process personal data on our behalf, we take reasonable steps, where required by applicable law, to ensure that appropriate data protection and security requirements apply to such processing.

However, no method of transmission over the Internet, electronic communication or method of electronic storage can be guaranteed to be completely secure. Accordingly, while we take reasonable measures designed to protect personal data, we cannot guarantee absolute security.

10. THIRD-PARTY WEBSITES AND SERVICES

The Website may contain links to, integrate with or otherwise enable interaction with third-party websites, platforms or services that are not operated or controlled by us.

This may include, for example, third-party communication platforms such as Telegram or WhatsApp, as well as other external websites or services that may be accessible through links or functionality available on the Website.

Where you choose to interact with a third-party platform or service, including by selecting Telegram or WhatsApp as your preferred communication method, the relevant third party may independently collect or process personal data in accordance with its own privacy policy, terms and data processing practices.

We do not control and are not responsible for the privacy practices, security or data processing activities of third-party websites, platforms or services acting independently from us. We encourage you to review the applicable privacy information of any third-party service you choose to use.

This Section does not affect our responsibility for personal data that we process in accordance with this Privacy Policy or any obligations that apply to service providers processing personal data on our behalf.

11. CHILDREN'S PRIVACY

The Website is intended for business and professional users and is not directed to children.

We do not knowingly collect personal data from children through the Website. If we become aware that personal data of a child has been submitted to us in circumstances where its processing is not permitted under applicable law, we will take reasonable steps to delete such information as appropriate.

If you believe that a child has provided personal data to us through the Website, please contact us using the details provided in the “Contact us” section below.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, the Website, the technologies or service providers we use, applicable legal or regulatory requirements, or other relevant circumstances.

When we update this Privacy Policy, we will publish the revised version on the Website and update the “Last updated” date at the top of this Privacy Policy.

Where required by applicable law, we may provide additional notice of material changes or obtain your consent before applying changes to processing activities for which consent is required.

We encourage you to review this Privacy Policy periodically to remain informed about how we process personal data.

13. CONTACT US

If you have any questions about this Privacy Policy, our processing of your personal data or wish to exercise any rights available to you under applicable data protection law, you may contact us at:

3-102-084697 S.R.L. Registration number: 3-102-084697. Registered address: Suite 408, 4th Floor, Condominio Distrito Cuatro, Guachipelín, San Rafael, Escazú, San José, Costa Rica. Email: legal@cryptostorybank.com.

When contacting us regarding a privacy or data protection matter, you may include “Privacy request” in the subject line to help us identify and process your request.

When contacting us regarding your personal data or a data protection request, please provide sufficient information to allow us to understand and appropriately respond to your request. We may request additional information where reasonably necessary to verify your identity or the scope of your request.