Legal
Last updated: October 1, 2026
This Privacy Policy explains how Nexo Card, operated at nexocard.net, collects, uses, and shares information when you browse the website, connect a digital asset wallet, or request a virtual or physical card. Like any regulated card, Nexo Card is required to verify your identity before a card is issued and activated. We collect the identity and contact details described below for that purpose, and we never ask for your recovery phrase or private key.
To receive a card you must be at least 18 years old and complete a short identity verification. A delivery address is required for physical card orders only, because the card has to be posted to you. Virtual card orders do not require a delivery address.
This policy applies to the website and the card-request experience it provides. It describes what information is processed, why, who it is shared with, how long it is kept, and the choices and rights you have. It does not describe the policies of third-party wallets, card networks, or the card provider, each of which has its own terms.
Identity and verification information. To issue and activate a card we collect the details needed to confirm who you are, typically your full name, date of birth, country of residence, and a government-issued identification document (passport, national ID, or driver's licence). Depending on the checks applied, we may also collect a facial image or a short live video used to match you to your document. This is the identity verification (often called KYC) required of regulated card issuers.
Contact and order information. We collect an email address and, for physical card orders, a delivery address and any details required by the postal or courier service. If you email us for support, your message and email address are necessarily received.
Financial and wallet information. When you connect a wallet, the public wallet address you approve is made available to the website. We read which network you are on and which coins you hold so you do not have to look them up. Public blockchain transaction details linked to that address on the network you connect to may also be viewed or verified. We never collect your recovery phrase or private key.
Information collected automatically. Standard technical data such as device type, browser, IP address, approximate location derived from your connection, and your cookie preferences are collected when you use the website.
Information from third parties. We may receive information from identity-verification, anti-money-laundering, fraud, and card-issuing partners, and from public sources such as blockchains, where lawfully available. If you allow analytics or marketing cookies, the relevant partner may receive the information described in Section VIII.
We process the information above to: verify your identity and assess your eligibility for a card; establish the wallet connection you request; display your connected public address; read your network and coins; verify an authorised payment made in a supported token on one of our 14 supported networks; issue, produce, and deliver a card where ordered; detect and prevent fraud, money laundering, and other financial crime; respond to support requests; operate and secure the website; and comply with binding legal obligations and enforce the Terms of Use.
The legal basis depends on the activity: performance of the card request you initiate; compliance with legal obligations (including identity-verification and anti-money-laundering requirements); our legitimate interest in operating, securing, and improving the service, balanced against your rights; and your consent for optional analytics and marketing cookies.
We do not use solely automated decisions that produce a legal effect or similarly significantly affect you. Where you opt in to marketing cookies, advertising partners may use limited profiling to make advertisements more relevant. This does not determine whether a card is issued to you.
We share your information only where it is needed to provide the service or required by law. This includes: identity-verification, anti-money-laundering, sanctions-screening, and fraud-prevention providers; the card issuer and card network that produce and process your card; the card producer and shipping provider for physical card orders; and, where required, regulators, courts, and law-enforcement authorities. If you allow analytics or marketing cookies, the relevant partner receives the information described above under its own privacy policy. Information may also be disclosed when required by valid law, court order, or to protect users and the service from fraud or unlawful activity.
Where a processor or provider is located outside your country, your information may be transferred internationally. Transfers rely on appropriate safeguards available under applicable law, such as standard contractual clauses or an adequacy decision, together with the security measures described in Section IX.
We do not send marketing communications unless you have agreed to receive them. If you allow marketing cookies, advertising partners may show you Nexo Card advertisements on other websites and platforms under their own privacy policies. You can stop optional marketing processing at any time by rejecting marketing cookies or clearing your browser data.
We use reasonable technical and organisational measures aimed at protecting the information we process. No online system can guarantee absolute security. You are responsible for protecting your wallet and device. Nexo Card will never ask for your recovery phrase or private key. If anyone claims to represent Nexo Card and requests those secrets, do not provide them.
We retain your information only for as long as necessary for the purposes described in this policy, or to comply with legal, regulatory, or contractual obligations. Anti-money-laundering and other financial-crime laws may require us to keep identity and transaction records for a set period after your relationship with us ends, even after a card is closed. Once the applicable retention period has passed and no other legal basis applies, we securely delete or anonymise the data. Public blockchain data is maintained by the underlying networks and cannot be deleted by Nexo Card.
You may browse without connecting a wallet, choose which network to use, reject a wallet connection, disconnect through your wallet, clear local browser data, and choose not to send a transaction. You may choose a virtual card if you prefer not to provide a delivery address. You may accept, reject, or selectively allow cookies through the cookie preferences banner and change your choice at any time by clearing your browser data.
Depending on applicable law, you may have rights concerning access, rectification, erasure, restriction, data portability, and objection for information controlled by Nexo Card. Some requests cannot apply to public blockchain records. To exercise a right, contact us using the details in Section XII.
Questions about this Privacy Policy can be sent to support@nexocard.net. Do not include wallet secrets or full card credentials in an email.
The service is not intended for anyone under 18 or below the age of legal majority in their location. This policy may be updated to reflect operational, legal, or service changes; the updated date is shown at the top of this page, and material changes are posted before they take effect where required by law.
