Legal

Privacy Policy

Last updated: September 12, 2026

AIHUB Cards ("AIHUB", "we", "us") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the rights you have over it. It applies to the AIHUB Cards platform — including the Telegram TWA, the B2B web portal, the REST API, and our marketing surfaces.

1. What We Collect

Information you provide directly

  • Telegram account identifier — when you launch the AIHUB TWA from Telegram, we receive your Telegram user ID so we can attribute card issuance and balance to the right account. We do NOT receive your phone number or full name unless you explicitly share them via the bot.
  • Stablecoin top-up addresses — the on-chain addresses you fund from are recorded for compliance with anti-money-laundering screening (e.g. OFAC sanctions checks).
  • Support correspondence — messages you send to our support channel, including any contact details you choose to share.

Information we collect automatically

  • Card transaction metadata — merchant name, category, amount, currency, timestamp. We do NOT store the full Primary Account Number (PAN) of your virtual card; that is held only by our card-issuing partner under PCI-DSS controls.
  • Technical telemetry — IP address, browser / Telegram client version, device type, and timestamps of API calls or page views. This is used for fraud detection, rate-limiting, and product analytics.
  • Cookies and similar technologies — see our Cookie Policy for the full list.

Optional advertising measurement on the landing page

If you allow marketing cookies, we use the OpenAI Ads Pixel to measure home and documentation page views and clicks to our web wallet and Telegram bot. OpenAI receives these event signals, event identifiers, an available ad click reference, and technical connection information such as IP address and browser information. These clicks are not reported as registrations or card purchases. Our integration does not manually send card details, wallet balances, wallet addresses or contact details to this pixel. Each event opts out of use for future advertising personalisation. See our Cookie Policy and OpenAI's Privacy Policy.

Information we do NOT collect

AIHUB is designed around an anonymous-by-default principle. We do NOT routinely collect government identification, full legal name, residential address, date of birth, or any other Know-Your-Customer (KYC) data. Where law or our banking partners require us to escalate to KYC for a specific transaction or account, we will request that information directly and explicitly, and you may decline (in which case that specific transaction may be reversed or that account may be closed).

2. How We Use Information

We use the information we collect to:

  • Provision and operate the Service — issue cards, process top-ups, settle merchant transactions;
  • Comply with applicable law, including anti-money-laundering and sanctions screening;
  • Detect and prevent fraud, abuse, and security incidents;
  • Provide customer support and respond to your inquiries;
  • With your consent, measure whether our advertising leads to landing-page visits and wallet or bot clicks;
  • Analyse Service usage to improve product experience and performance (this analysis is performed on aggregated data wherever possible).

3. Sharing & Disclosure

We share your information only in these scenarios:

  • Banking and card-issuing partners — to provision the underlying card product and process card transactions. These partners are contractually bound to treat your data as confidential and to use it only for the agreed purposes.
  • Service providers — we use a small number of third-party vendors for infrastructure (cloud hosting, error monitoring), each subject to a written data-processing agreement.
  • Compliance and legal — where compelled by valid legal process (court order, subpoena) or where disclosure is necessary to comply with sanctions, AML, or other regulatory obligations.
  • Advertising measurement — with your marketing consent, we share the landing-page measurement signals described above with OpenAI.
  • Corporate transactions — in the event of a merger, acquisition, or sale of substantially all assets, your information may be transferred to the acquiring entity, subject to the protections of this Policy.

We do not sell your personal information for money. Optional advertising measurement involves sharing the signals described above with OpenAI. You can disable it through "Cookie preferences" in the footer.

4. Data Retention

We retain transaction records for the period required by applicable financial-services regulation (typically 5–7 years after account closure). Other information is retained only as long as needed for the purpose for which it was collected. Telegram identifiers and support correspondence are deleted 90 days after account closure unless retention is required for an active legal claim.

5. Security

We protect your information using a combination of encryption in transit (TLS 1.3) and at rest, principle-of-least-privilege access controls, and continuous monitoring of our infrastructure for security anomalies. Card PAN data is held only by our PCI-DSS-certified issuing partner; AIHUB never stores raw card numbers on its own systems.

No security control is perfect. In the event of a confirmed data breach affecting your information, we will notify you via the in-product channel and applicable regulators within the timelines required by law (typically 72 hours for GDPR).

6. Your Rights

Depending on where you reside, you may have rights to access, rectify, delete, or port your personal information; to object to or restrict its processing; or to withdraw consent where we rely on consent as the legal basis for processing. You can exercise these rights by contacting us via the AIHUB support channel. We will respond within 30 days.

EU / UK residents (GDPR): the legal bases on which we process your information are (a) performance of a contract (operating the Service), (b) compliance with a legal obligation (sanctions screening, AML), and (c) our legitimate interest in fraud prevention and product improvement, and (d) your consent for optional advertising measurement. You may withdraw that consent at any time through "Cookie preferences" without affecting earlier processing. You have the right to lodge a complaint with your local data-protection authority.

California residents (CCPA / CPRA): you have the right to know what personal information we collect, to delete it, to correct inaccuracies, and to opt out of any sale or sharing. To disable optional advertising measurement, turn off marketing in "Cookie preferences". This landing page also respects Global Privacy Control by disabling its OpenAI pixel.

7. International Data Transfers

AIHUB operates globally, which means your information may be transferred to and processed in countries other than your own. Where such transfers occur, we rely on Standard Contractual Clauses approved by the European Commission, or on equivalent safeguards in other jurisdictions.

8. Children's Privacy

The Service is not directed at, and we do not knowingly collect information from, individuals under 18 years of age. If we learn that we have collected information from a person under 18, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the in-product channel at least 14 days before they take effect. The "Last updated" date at the top of this page indicates when the current version was published.

10. Contact

Questions about this Privacy Policy or how we handle your information? Reach us via the AIHUB support channel or by email at [email protected].