Effective Date: March 4, 2026 Entity: CoinForensics (A division of ComplyChain Solutions, LLC)

1. Data Collection: We collect Personal Identifiable Information (PII) during the KYC/KYB process, including government IDs, biometric data, and corporate registry details. We also collect “On-Chain Data” (public wallet addresses) to perform risk scoring.

2. Purpose of Processing: Data is processed strictly for:

• Fulfilling Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) obligations.
• Fraud prevention and identity verification.
• Generating forensic reports for client-authorized investigations. 3. Data Security: All data is stored using AES-256 encryption at rest. In compliance with Wyoming privacy leanings and global standards (GDPR), we utilize “Privacy by Design,” ensuring that sensitive KYC data is siloed from general analytics. 4. Data Sharing & Disclosure: We do not sell, rent, or trade user data. Data is only disclosed to:
• Third-party identity verification processors (under strict NDA).
• Law enforcement agencies upon receipt of a valid judicial warrant or subpoena issued by a court of competent jurisdiction. 5. Your Rights: Depending on your jurisdiction, you may have the right to access, correct, or request the deletion of your personal data, subject to mandatory regulatory data retention periods (typically 5–7 years for AML records).