Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy explains how Nexus Networks, Inc., a Delaware corporation, operating as “Alta” (“Alta,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information in connection with our website at alta.finance and the related products, documentation, and services we make available (together, the “Services”). References to “Alta” include its affiliate Metalntwx Pty Ltd (Australia) where relevant. This policy is global in scope and applies wherever we offer the Services.

Alta provides payment and settlement infrastructure and software to businesses and licensed payment service providers. The Services are intended for businesses and their personnel, not consumers. Alta does not hold or custody customer funds or digital assets and does not collect end-customers’ consumer financial account information; regulated activities are performed by licensed counterparties.

At launch, the Services are developer tools for the Alta test network (“testnet”): (1) Testnet RPC-as-a-Service, which provides authenticated RPC endpoints to developers; (2) the Testnet Blockchain Explorer, a viewer for testnet transactions and wallet addresses; and (3) Developer Documentation, with guides, tutorials, and reference material for developers and partner integrators. These are testnet tools and do not involve real funds, mainnet digital assets, or custody.

This policy applies to personal information we handle as a controller in operating the Services, for example, information about website visitors, prospective and current business customers and their personnel, and people who contact us. It does not cover personal information we process on behalf of a business customer under a contract (where that customer is the controller and its own privacy notice applies), or third-party sites and services that have their own policies.

If you have questions, contact us using the details in “How to contact us” below.

2. Information we collect

Information you provide. We collect information you give us directly. When you register for Testnet RPC-as-a-Service, we collect your email address to create and authenticate your developer account and issue your RPC credentials. We also collect information you provide when you join a waitlist, make a contact or demo request, subscribe to updates, or communicate with us, which may include your name, business email, company, and the contents of your messages.

Usage and technical information. For Testnet RPC-as-a-Service, we keep records of the RPC calls made through your account, such as the endpoints called, request volumes, and timestamps, to operate the service, enforce usage limits, provide support, and maintain security. Our Developer Documentation is hosted by Mintlify; where you use the documentation’s AI assistant, your queries are processed by Mintlify as our subprocessor. The Testnet Blockchain Explorer does not track its users; it displays publicly available testnet blockchain data, which is not information we collect about you. We also use PostHog to collect standard technical and usage information about the website such as pages viewed, approximate location, referring URLs, and device and browser type through cookies and similar technologies (see “Cookies and similar technologies”).

Information from third parties. We may receive limited information from our service providers and any analytics or security providers and from sources that help us verify business users and meet sanctions-screening obligations.

What we do not collect. The Services are testnet developer tools, not a consumer wallet or custody product. Alta does not hold or custody funds or digital assets, does not collect or store your private keys, and does not collect end-customers’ consumer payment-card or bank-account credentials. Testnet activity does not involve real funds or mainnet assets.

3. Cookies and similar technologies

We use cookies and similar technologies to operate the website, remember your preferences, understand how the site is used, and improve it. These fall broadly into strictly necessary (required for the site to function), functional (preferences), and analytics/performance cookies. We use PostHog for analytics and performance measurement. We do not use advertising cookies.

You can control cookies through your browser settings and through our cookie banner or preference tool. Blocking some cookies may affect how the site works. Because we offer the Services to visitors in the EEA and the United Kingdom, we obtain consent for non-essential cookies (including PostHog) from visitors in those regions before those cookies are set, through our consent banner.

4. How we use information

We use personal information to:

provide, operate, maintain, and improve the website and the Services;
respond to your enquiries, manage waitlist and account registrations, and provide support;
send you administrative, security, and, where you have opted in or as permitted by law, marketing communications (you can opt out of marketing at any time);
understand and analyse how the Services are used, and develop new features;
protect the security and integrity of the Services, detect and prevent fraud and abuse, and carry out sanctions screening and related compliance checks;
comply with legal obligations and enforce our terms; and
with your consent, for any other purpose we describe at the time of collection.

We do not use the personal information we collect through the Services to make decisions that produce legal or similarly significant effects about individuals through solely automated means.

5. Legal bases for processing (EEA/UK)

This section applies to our processing of the personal data of individuals in the European Economic Area and the United Kingdom. Although our initial users are in the United States and Australia, this policy is global in scope, and we apply these legal bases wherever the GDPR or UK GDPR governs our processing.

Where it applies, we rely on the following legal basis under the GDPR / UK GDPR:

Contract: to provide the Services you or your organisation has requested;
Legitimate interests: to operate, secure, analyse, and improve the Services, and for direct business communications, balanced against your rights;
Legal obligation: to meet compliance, sanctions, tax, and record-keeping duties; and
Consent: where we rely on it (for example, certain cookies or marketing), which you may withdraw at any time.

We share personal information only as described here:

Service providers/processors who perform services for us: for example, hosting, analytics, email and CRM, security, and identity/sanctions screening under contracts that limit their use of the information to providing those services. Current providers include Mintlify (which hosts our Developer Documentation and processes documentation AI-assistant queries) and PostHog.
Affiliates, including Nexus Networks, Inc. and Metalntwx Pty Ltd, for the purposes described in this policy.
Professional advisers such as our lawyers, auditors, and accountants, where needed.
Corporate transactions in connection with a financing, merger, acquisition, or sale of assets, information may be disclosed to the parties and advisers involved, subject to confidentiality.
Legal and compliance where we believe disclosure is required to comply with law, regulation, legal process, or a government request, to enforce our terms, or to protect the rights, safety, and security of Alta, our users, or others.
With your consent or at your direction.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under US state privacy laws.

7. Third-party services and links

The Services may rely on third-party tools and may contain links to third-party websites and services that we do not control. Those third parties handle your information under their own privacy policies and terms, and we are not responsible for their practices. We encourage you to review the privacy policies of any third-party service you use or visit through the Services.

8. International data transfers

Alta operates in the United States and Australia, and our service providers may process information in those and other countries. Where we transfer personal information across borders, we do so in accordance with applicable law. If you are located outside these countries, your information may be transferred to, stored, and processed in a country whose data-protection laws differ from those of your own.

Where we transfer personal data from the EEA or the United Kingdom to a country that has not been recognised as providing an adequate level of protection, we rely on an appropriate safeguard, such as the European Commission’s Standard Contractual Clauses together with the UK International Data Transfer Addendum, and you may contact us for a copy.

9. Data retention

We keep personal information only for as long as necessary for the purposes described in this policy, and then for any additional period required to meet our legal, tax, accounting, and record-keeping obligations or to establish, exercise, or defend legal claims. When information is no longer needed, we securely delete or de-identify it.

Retention periods are governed by Alta’s Retention & Secure Disposal policy and the records-retention obligations recorded in the Legal Obligations Register.

10. Security

We maintain reasonable technical and organisational measures designed to protect personal information against loss, misuse, and unauthorised access, disclosure, alteration, and destruction. These measures are part of our information-security program, which is aligned with SOC 2 / ISO 27001 (in progress).

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a personal-data breach, we will respond in accordance with our incident-response and breach-notification procedures and applicable law.

11. Your privacy rights and choices

Everyone. You can opt out of marketing emails at any time using the unsubscribe link or by contacting us, and you can ask us to access, correct, or delete your personal information. We will honour requests to the extent required by applicable law.

United States (state privacy laws). Where a US state privacy law applies to you, you may have rights to know/access, correct, and delete your personal information, to opt out of its sale or sharing for cross-context behavioral advertising and certain profiling, and not to be discriminated against for exercising these rights. As noted above, Alta does not sell personal information or share it for cross-context behavioral advertising. To exercise a right, contact us using the details below. We will verify your request as the law requires, and you may use an authorized agent where permitted.

Australia (Privacy Act / APPs). Where the Australian Privacy Principles apply, you may request access to and correction of the personal information we hold about you, and you may complain about how we handle your personal information. We will respond as required by the APPs. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

EEA/UK. Where the GDPR or UK GDPR applies to you, you have the rights to access, rectification, erasure, restriction, data portability, and objection (including to processing based on legitimate interests and to direct marketing), the right to withdraw consent where we rely on it, and the right to lodge a complaint with your supervisory authority or the UK Information Commissioner’s Office.

To make any request, contact us using the details in “How to contact us.”

12. Children’s privacy

The Services are directed to businesses and their personnel, not to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

13. Changes to this policy

We may update this policy from time to time. When we do, we will post the revised policy here and update the “effective date” at the top. If the changes are material, we will provide additional notice as required by law, for example by email or a notice on the website. Your continued use of the Services after the effective date means you acknowledge the updated policy.

14. How to contact us

If you have questions, requests, or complaints about this policy or how we handle your personal information, contact us at: [email protected].

We will respond within the timeframes required by applicable law. If you are in Australia and are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (oaic.gov.au); if the GDPR/UK GDPR applies to you, you may contact your local supervisory authority.