Bolt Financial privacy & data

this Website Privacy Policy applies only to Personal Information that is Processed by Bolt in our capacity as a “business” or similar term under applicable data protection laws

account information (such as your name, phone number, email address, login credentials, and linked payment methods)

verification information (such as government-issued identification, date of birth, and Social Security Number or ITIN)

device identifiers (IMEI, MAC address), advertising identifiers (IDFA/GAID), operating system version, carrier, and crash diagnostics

If you enable location services, we may collect precise geolocation data.

information about your interactions with the App, including session duration, features used, screens visited, and push notification tokens

when you initiate a transfer through the App, Bolt processes your financial account information

We also collect communications data when you contact customer support by chat, email, or phone.

Bolt uses your Personal Information to facilitate transactions, process payments, manage wallets, determine eligibility for certain features or services, and link accounts.

to verify your identity, conduct “Know Your Customer” checks, screen against OFAC and other sanctions lists, and detect fraudulent or suspicious activity.

we may use your Personal Information to notify you of promotions, personalize in-App offers, engage in targeted advertising, and measure interest in Bolt’s products.

Bolt processes your Personal Information to comply with BSA/AML, OFAC, FinCEN, CFPB, and state Money Transmitter License requirements.

We use information to improve the App, conduct analytics, develop new financial products, and generate de-identified or aggregated information that we will not re-identify.

Financial records are generally maintained for 5–7 years as required under BSA/AML and state MTL laws.

Diagnostic and device data collected through the App is typically retained for 12–24 months.

Unless required by law, the provider will retain your biometric data for no more than 3 years.

Where Bolt transfers data outside the EEA, Switzerland, and UK, we rely on Standard Contractual Clauses, adequacy decisions, or equivalent safeguards.

Once retention periods expire, Bolt securely deletes or anonymizes the data.

access, correct, or delete that information

request portability

object to processing

or withdraw consent