Privacy Policy
Effective 10 September 2026; website section added 3 October 2026. Applies to the Red Envelope wallet app, the AB2U Locate app and the AB2BC web portals (“the Apps”) operated by AB2BC LLC (“we”, “us”).
1. What we collect
- Sign-in identity. When you sign in with Google, Apple, Microsoft, Facebook, LINE, Kakao, X or WeChat, the provider sends us a signed identity token containing your provider user ID, and, where you permit it, your name, email address and profile picture. We use the token once to derive your wallet address (zkLogin) and to create or find your member profile. We do not receive or store your provider password.
- Account and wallet data. Your wallet address, display name, chosen language, notification preferences and the settings you save in the Apps.
- Transaction data. Transfers, payments and other on-chain actions you sign are recorded on the public AB2BC networks. Blockchain records are public and permanent by design.
- Technical data. Device type, app version, coarse network information and error diagnostics needed to keep the Apps working.
- Location and positioning data (AB2U Locate only). Position fixes from anchors or tags at sites you or your organisation operate. This data belongs to the site operator and is processed on their behalf.
2. How we use it
To sign you in, operate your wallet and member account, deliver the services you request, secure the Apps against fraud and abuse, comply with law, and improve reliability. We do not sell personal data and we do not use it for third-party advertising.
3. Facebook and other sign-in providers
Facebook Login is used only to authenticate you. We request the public_profile and email permissions. We do not post to your timeline, read your friends list or access any other Facebook data. You can remove the Apps from your Facebook account at any time under Settings & privacy → Apps and websites; doing so stops further sign-ins with Facebook but does not by itself delete your AB2BC account (see the data deletion instructions).
4. Sharing
We share data only with service providers that host or operate the Apps under contract, with the site operator for AB2U Locate data, when required by law, or with your consent. On-chain transaction data is visible to anyone by the nature of a public blockchain.
5. Retention
Account and profile data is kept while your account exists and for up to 90 days after deletion for backup rotation and abuse prevention. Diagnostic logs are kept for up to 30 days. On-chain records cannot be deleted.
6. Your rights
You can access, correct, export or delete your personal data from within the Apps or by contacting us. Residents of the EU/EEA, the UK, California and other jurisdictions with data-protection laws have additional rights under those laws, including the right to lodge a complaint with a supervisory authority. Follow the data deletion instructions to delete your data.
7. Children
The Apps are not directed to children under 13 (or the higher age required by local law) and we do not knowingly collect data from them.
8. Security
Sign-in tokens are verified cryptographically and never stored in plain form; wallet keys live only on your device. We use encryption in transit and at rest for the data we hold.
This website (ab2bc.com)
When you browse ab2bc.com we receive the technical data any web server receives (IP address, browser type, pages requested), which our hosting and network providers use to deliver the site and protect it from abuse. The site sets only the cookies it needs to work, such as the shopping-cart and sign-in cookies of the site software; it does not use advertising cookies. If you write to us through the contact form, we use your name, email address and message only to answer you. We keep those messages for up to 24 months unless you ask us to delete them sooner (privacy@ab2bc.com).
9. Changes and contact
We will post changes to this policy here with a new effective date. Questions and requests: privacy@ab2bc.com. AB2BC LLC, United States.