Privacy Policy

Last updated: January 1, 2026

At Petal XBT, we respect your privacy. This Privacy Policy explains what information we collect when you use our crypto off-ramp service, how we use it, and the choices you have.

1) Information We Collect

  • Order details: crypto amount, token type, selected network, wallet address used for payment, and transaction-related details.
  • Contact information you provide: full name, M-Pesa/mobile number, and email address (if provided).

2) How We Use Your Information

  • To process and complete your crypto-to-M-Pesa orders.
  • To send order confirmations and operational updates related to your transaction.
  • To improve our service quality, support experience, and response times.
  • To comply with applicable legal, regulatory, or law enforcement requirements.

3) How Information Is Shared

We do not sell your personal information. We may share data only when necessary to run the service, including:

  • Service providers that help us operate key features (for example, messaging and email delivery tools).
  • Blockchain and payment-related systems required to complete transactions.
  • Authorities or regulators when disclosure is legally required.

4) Data Retention

We keep personal and transaction information only for as long as needed to provide the service, resolve disputes, maintain security, and meet legal or regulatory obligations.

5) Data Security

We use reasonable administrative, technical, and operational safeguards to protect your information. No internet transmission or storage system is guaranteed to be 100% secure, but we continuously work to reduce risk and improve protection.

6) International and Third-Party Processing

Some service providers we use may process data outside Kenya. Where this happens, we take reasonable steps to ensure your information is handled with appropriate protections.

7) Your Rights and Choices

You may request access, correction, or deletion of personal data we hold about you, subject to legal and operational limitations. You can also contact us with any privacy-related concern.

8) Children's Privacy

Our service is not intended for individuals under 18. We do not knowingly collect personal information from children.

9) Policy Updates

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

10) Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact our support team:

You can also review our Terms of Service for details on our terms of use.