Privacy Policy

Jade Institutional (“Jade”, “we”, “us”) operates a digital-asset investment platform through which clients open accounts, fund them with supported cryptocurrencies or fiat, participate in managed allocation programs, and receive yield distributions and payouts. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices and rights you have.

This policy applies to visitors of jadeinstitutional.com and to registered clients using the dashboard, deposit, and affiliated services. By creating an account or using the platform, you agree to the practices described here.

Account information. When you register, we collect your email address and password. If you choose to sign in with Google, we receive your Google account name and email address (and profile picture, if you have set one) through Google’s authentication service. We do not receive your Google password, and we do not access any other Google services on your behalf.

Profile and mandate information. You may provide a display name for your account or trust entity, and an investment profile describing your allocation preferences.

Transaction information. We record deposits, allocations, accruals, fees, withdrawals, and payouts on your account, together with the blockchain transaction hashes, wallet addresses, and payment-processor references needed to reconcile and evidence each movement of funds.

Payout wallet information. When you designate a cryptocurrency wallet to receive withdrawals and distributions, we store the wallet address and the network/asset you selected.

Verification information. Where identity verification is required for compliance (including fiat on-ramps operated by our payment partners), we collect the identity documents and related information you submit, or such verification is performed directly by our regulated partners under their own privacy policies.

Communications. We keep records of correspondence you send us, including support email and affiliate or administrative communications.

Technical information. Like most web services, our hosting and authentication providers process IP address, device and browser characteristics, and session logs to deliver and secure the service.

We use personal information to: create and administer your account and authenticate you (including via Google Sign-In); process deposits, allocations, accruals, withdrawals, and payouts, and maintain the ledger evidencing them; operate recurring-allocation and yield programs you enroll in; communicate with you about your account, transactions, and service updates; detect, prevent, and investigate fraud, abuse, and unauthorized access; comply with legal, regulatory, and tax obligations, including sanctions and anti-money-laundering requirements; and improve the safety, stability, and usability of the platform.

We do not sell your personal information. We do not use your personal information for third-party advertising, and we do not use it to train artificial-intelligence or machine-learning models.

When you use “Continue with Google”, authentication is handled by Google’s OAuth service through our authentication provider (Supabase). We receive only your Google account identifier, name, and email address, solely to create or sign you in to your Jade account and to identify you within the platform.

We use this data only to provide the service: we do not transfer it to third parties except the service providers listed in section 6, we do not use it for advertising, and we do not sell it. You can revoke Jade’s access at any time through your Google account security settings, and you can disconnect Google sign-in by contacting us.

We share personal information only with: service providers that help us operate the platform under contract — hosting (Vercel), authentication and database services (Supabase, including managed cloud infrastructure), transaction processing for deposits and fiat conversion (NOWPayments and its regulated on-ramp partners), and email delivery (Resend); professional advisers, auditors, and regulators where required; and law enforcement or other third parties where we believe in good faith that disclosure is necessary to comply with law, protect the rights or property of Jade or our clients, or respond to an emergency.

Where our payment or verification partners process your information directly (for example, identity checks performed by a fiat on-ramp partner), their handling of that information is governed by their own privacy policies, which we encourage you to review.

We use only the cookies and local storage required to operate the service: an authentication session (a secure, HTTP-only token issued by our authentication provider) and minimal preference storage. We do not use advertising or cross-site tracking cookies. You can clear or block these in your browser settings, though doing so will sign you out of the platform.

We retain account, transaction, and ledger records for as long as your account is active, and thereafter as required for financial-record-keeping, tax, and anti-fraud purposes — typically a minimum of five years after account closure. Verification records are retained for the period required by applicable anti-money-laundering rules. You may request deletion of personal data that we are not legally required to keep, and we will honour such requests for the remaining data.

We protect personal information with transport encryption (TLS) on every connection, encrypted storage managed by our infrastructure providers, row-level access controls so that client data is isolated per account, and administrative controls limiting staff access. No method of transmission or storage is perfectly secure, but we review and update these measures continuously and will notify you of any qualifying data breach as required by law.

You may access and update your account information at any time in the dashboard. You may also request a copy of your personal data, ask us to correct inaccurate data, ask us to delete data we are not required to retain, withdraw consent to optional processing, or close your account — by contacting us using the details below. We respond to verified requests within the timeframes required by applicable law.

If you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with your local data-protection authority. If you are a California resident, you have the right to know what personal information we collect and to request its deletion, and we do not sell or share personal information as those terms are defined under California law.

The platform is not directed to anyone under 18, and we do not knowingly collect personal information from minors.

Your information may be processed in countries other than your own, including the jurisdictions where our providers operate. Where required, we rely on appropriate safeguards for such transfers.

We may update this policy to reflect changes in the service or law. Material changes will be announced on the platform or by email, and the effective date below will be updated.