Privacy Policy
Last updated: 19 October 2026
1. Who we are
Norvera Asset is operated by Norvera Pte. Ltd., a company registered in Singapore (UEN 202534983M), with its registered office at 14 Penjuru Road, Singapore 609125. Norvera Pte. Ltd. is the controller of the personal data described in this policy.
Questions about this policy or your data can be sent to support@norveraasset.com or raised in the Support section of the app.
2. Data we collect
Information you give us, information created when you use Norvera, and information we receive from others:
- Account details: email address, display name, phone number if provided, language and notification preferences.
- Identity verification: photo ID, selfie or liveness images, date of birth, nationality, residential address and the result of the review.
- Financial profile: source of funds and wealth, occupation, expected activity and questionnaire answers.
- Transactions: deposits, withdrawals, swaps, staking, balances, deposit addresses, destination addresses and blockchain transaction IDs.
- Device and usage data: IP address, browser and device type, sign-in times, security events and error logs.
- Support: chat messages, attachments, and video calls or screen sharing you choose to join.
- From third parties: identity verification results, sanctions and fraud screening results, and public blockchain data.
3. How we use your data and why
- To provide your account and carry out your instructions (performance of our contract with you).
- To verify identity and meet anti-money-laundering, counter-terrorist-financing, sanctions and tax obligations (legal obligation).
- To keep accounts secure, detect fraud and investigate misuse (legitimate interest).
- To answer support requests and improve the service (legitimate interest).
- To send optional updates where you have agreed to receive them (consent, which you can withdraw at any time).
We do not sell personal data, and we do not use it for third-party advertising.
4. Identity checks and screening
Before you can deposit, swap or withdraw, we verify your identity. We may screen you and your transactions against sanctions lists, politically exposed person lists and blockchain risk data, and we may ask for more documents. Decisions are reviewed by a person; you can ask for a decision to be explained and reviewed again.
5. Blockchain transparency
Transactions sent to or from a blockchain are public and permanent. We cannot delete or change information recorded on a public blockchain. We do not publish your name with your addresses.
7. International transfers
Our providers may process data outside Singapore and outside your country. When that happens we use contractual safeguards, such as standard data protection clauses, so your data keeps an equivalent level of protection.
8. How long we keep data
We keep data only as long as we need it. Identity and transaction records are kept for at least five years after the account closes, or longer where the law requires. Marketing preferences are deleted when you withdraw consent. Support recordings are kept only as long as needed to resolve the matter.
9. Security and data breaches
Data is encrypted in transit and at rest. Staff access is limited by role and recorded in an audit log. Sign-in uses one-time email links or approved providers instead of reusable passwords.
If a breach is likely to put you at risk, we will tell you and the relevant authority without undue delay, explain what happened and what you can do.
10. Your rights
Depending on where you live (including under Singapore's PDPA and the EU and UK GDPR), you can:
- Get a copy of your data, and receive it in a portable format.
- Correct inaccurate data.
- Ask us to delete data we no longer have to keep.
- Object to, or ask us to limit, some uses of your data.
- Withdraw consent at any time.
- Complain to your data protection authority, such as Singapore's PDPC or the authority in your EU or UK country.
We reply within 30 days. We may need to confirm your identity first. Some records must be kept by law even after you ask for deletion.
12. Children
Norvera is for people aged 18 and over. We do not knowingly collect data from children, and we close accounts opened by minors.
13. Account closure, death and representatives
- Closing your account: withdraw your balance, then ask Support. We stop using your data except for records we must keep.
- Death of an account holder: an executor or legal heir can contact Support with the death certificate and proof of authority. After checks, we release the account's assets according to law.
- Someone acting for you: we accept requests from a person with valid legal authority, such as a power of attorney, once verified.
- Frozen accounts: if we must restrict an account by law, we tell you why where we are allowed to.
14. Insolvency and business wind-down
Every client has their own 12-word seed phrase for the wallet that holds their assets. If Norvera Pte. Ltd. becomes insolvent or stops operating:
- We will notify you in advance by email and in the app, and give you time to withdraw your funds.
- Each client's own 12-word seed phrase will be sent to that client in encrypted form, so that only the client can open it and take control of their wallet.
- Delivery is made only to the verified account holder (or their legal representative), using the contact details on the account. Please keep them up to date.
- Your personal data will only be passed to an administrator or successor to the extent needed to return your assets, and it remains protected under this policy.
Norvera is not a licensed bank, and balances are not covered by any deposit insurance or government guarantee scheme.
15. Changes and contact
If we make a material change to this policy, we will tell you by email or in the app before it takes effect. For questions or to use your rights, contact support@norveraasset.com or open a ticket in Support.
This policy is provided for transparency and should be reviewed by qualified legal counsel for your jurisdiction.