Privacy Policy
How Silvarstain Financial collects, uses, and protects your data when you use RF1_ tax refund, MT1_ email transfers, USDC rails, and virtual cards.
📑 Quick Navigation — Click to Jump
1 Information We Collect
We collect information to provide RF1_ tax refund processing, MT1_ email transfers, USDC settlement, and virtual card services. We minimize data collection to what is necessary for compliance and functionality.
A. Personal Information You Provide:
- Identity: Full name, date of birth, government ID (driver's license/passport), SSN/ITIN for tax filing, selfie for liveness check
- Tax Documents: W-2, 1099, prior tax returns, income information — only for RF1_ refund processing via Form 8821
- Contact: Email, phone number, mailing address
- Financial: Bank account for MT1_ withdrawal, USDC wallet address, transaction history, RF1_ RF1_XXXXXX and MT1_ MT1_XXXXXX codes
- Account: Username, password (encrypted), 2FA codes, support messages
B. Automatically Collected:
- IP address, device type, browser, OS, login timestamps, pages visited, MT1_/RF1_ tracking events
- USDC transaction hashes, virtual card usage metadata (merchant type, not full card number)
2 How We Use Your Information
- To Provide Services: Process RF1_ tax refunds (prepare, file, track, auto-credit), generate MT1_ codes with verifiable hash, settle USDC, issue virtual cards
- Compliance: KYC/AML verification, fraud prevention, FinCEN compliance, IRS Form 8821 authorization
- Communication: Send RF1_ status updates (Filed → Accepted → Approved → Credited), MT1_ claim emails, security alerts, support replies — response under 2 hours
- Improvement: Analyze usage to improve settlement speed (benchmark < 60 seconds), fix bugs, develop new rails
- Legal: Respond to lawful requests, enforce Terms of Service, prevent fraud
3 RF1_ Tax Refund Data — Special Protection
When you use our tax refund service, you upload sensitive documents. We apply extra protection:
- Uploads encrypted with 256-bit SSL in transit and AES-256 at rest
- Stored in isolated encrypted bucket, access logged, only licensed CPA partners + authorized system can access
- Form 8821 e-signature authorizes us as your designee only for tax information — not unlimited power of attorney
- After IRS approval and auto-credit of RF1_ RF1_4K2Z91, tax docs retained per IRS record-keeping (3 years) then securely deleted
- We are not the IRS. Refund amount depends on IRS approval. Fee disclosed upfront before authorization
4 MT1_ Transfer & USDC Data
- MT1_ Codes: MT1_XXXXXX is unique, non-guessable. We store sender email, recipient email, amount, timestamp, hash for audit trail. Recipient can claim with email verification only
- USDC: Wallet addresses and transaction hashes are stored. USDC is stable: 1 USDC = $1.00. We do not hold private keys for your self-custody wallet if you withdraw on-chain — you control it
- Virtual Cards: We store last 4 digits, expiry, merchant type, amount. Full card number tokenized with PCI-compliant issuer partner — we never store full PAN
5 Sharing & Disclosure
We share data only when necessary to provide services or comply with law:
- Licensed Tax Partners: CPA firm for RF1_ filing (bound by confidentiality, only data needed to file)
- Partner Banks & Issuers: For MT1_ bank withdrawal and virtual card issuance (bank account, amount, KYC status only)
- Blockchain: USDC transaction hashes are public on-chain by nature — amount + addresses visible on explorer, but not your name
- Service Providers: KYC verification (ID verification provider), email delivery (for MT1_ claim emails), cloud hosting (encrypted)
- Legal: If required by subpoena, court order, FinCEN, IRS, or to prevent fraud/money laundering
6 Cookies & Tracking
- Essential Cookies: Login session, 2FA, RF1_/MT1_ dashboard tracking — required for service
- Analytics: Anonymous usage (pages visited, settlement time) via privacy-focused analytics — no personal ID
- No Ad Tracking: We do not use third-party ad trackers that sell your data
- You can disable non-essential cookies in browser — essential cookies required for login and MT1_ claim links
🔒 7. Data Security — How We Protect You
- Encryption: 256-bit TLS in transit, AES-256 at rest, encrypted database
- 2FA: Mandatory for withdrawals over $500 and for changing email/password
- Cold Storage: 95% of USDC funds in multi-sig offline cold wallets — hot wallet only for instant operations
- Access Control: Role-based access, audit logs for every access to RF1_ tax docs, employee background checks
- Monitoring: 24/7 fraud monitoring, transaction velocity checks for MT1_ transfers
No system is 100% secure. We follow industry best practices but cannot guarantee absolute security. Notify us immediately at support@silvarstain.com if you suspect unauthorized access.
8 Your Rights
- Access: Request copy of data we hold about you (ID, transactions, RF1_/MT1_ codes)
- Correction: Update inaccurate info in dashboard or via support
- Deletion: Request deletion of account — subject to IRS 3-year record retention for tax filings and FinCEN 5-year AML retention. USDC transaction hashes on blockchain cannot be deleted (public by nature)
- Opt-Out: Unsubscribe from non-essential emails (MT1_ claim and RF1_ status emails are essential, cannot opt-out while using service)
- Data Portability: Request export of your transaction history in CSV
- To exercise rights, email support@silvarstain.com with subject "Privacy Request — [Your Request]" + include your registered email and RF1_/MT1_ code if applicable for verification
9 Data Retention
- Tax Docs (RF1_): 3 years per IRS record-keeping requirement, then secure deletion
- KYC/AML: 5 years per FinCEN guidance after account closure
- Transactions (MT1_/USDC): 5 years for audit trail, then anonymized
- Support Messages: 2 years, then deleted
- After retention period, data is securely erased or anonymized
10 Children Privacy
Silvarstain Financial is not intended for individuals under 18 years old. We do not knowingly collect data from children under 18. If we learn we have collected such data, we will delete it. Tax refund service requires you to be 18+ to sign Form 8821.
11 International Data Transfers
We are a US company. Data is stored in US data centers. If you use our service from outside US (we support 100+ countries for MT1_), your data will be transferred to and processed in the US under US laws. We apply same 256-bit encryption and security standards globally. USDC transactions are global by nature — hashes visible on blockchain explorers worldwide.
12 Contact Us & Changes
If you have questions about this Privacy Policy or want to exercise rights:
Subject Line: Privacy Request — [Access / Deletion / Question]
Include: Registered email + RF1_ or MT1_ code for fast verification
Response: Under 2 hours average, 24/7 dashboard chat available
We may update this Privacy Policy to reflect new products (e.g., new MT1_ features) or legal requirements. We will notify you via email and dashboard banner with effective date. Continued use after update means you accept new policy.
This Privacy Policy does not apply to third-party sites you access via virtual card (e.g., Amazon, Netflix). Their privacy policies apply to purchases made with virtual cards.