Privacy Policy & Biometric Data Framework

1.1 We adhere to strict zero knowledge data minimization principles. We only collect information strictly necessary to maintain ledger accounting integrity, fulfill regulatory AML obligations, and secure client sessions.

1.2 Personal data is segregated from transaction ledger records and stored in AES 256 encrypted hardware enclaves with strict role based access control.

2.1 Level 2 and Level 3 institutional identity verifications utilize zero knowledge biometric hashing to verify passports and national IDs without retaining raw biometric imagery on centralized public servers.

2.2 Biometric hashes are stored in cryptographically sealed vaults and are discarded upon completion of AML verification cycles in accordance with statutory retention schedules.

3.1 All sessions are guarded by Content Security Policy (CSP) Level 3 with dynamic 128 bit cryptographic nonces generated at the edge, preventing cross site scripting (XSS) and unauthorized script injection.

3.2 We do not use third party tracking pixels, advertising beacons, or data broker cookies. Essential HTTP only, Secure, SameSite=Strict cookies are utilized exclusively for session authentication.

4.1 You have the right to request access to, rectification of, or erasure of your personal data, subject to mandatory anti money laundering statutory retention periods (typically 5 to 10 years as required by FINMA and FCA guidelines).

4.2 Data privacy requests may be submitted directly to our Data Protection Officer at dpo@bluebullcorp.com.