01Légal

La paperasse, sans le brouillard.

Conditions, confidentialité et divulgations réglementaires. Écrites dans la même voix que notre produit.

Conditions

Dernière mise à jour · 2026-07-01

1. Who we are

xobank.cash ("xobank", "we", "us") is a financial technology company. xobank is not a bank. Banking services for fiat currency are provided by regulated partner institutions: FDIC-eligible partner banks in the United States, EMI-licensed institutions in the European Union and the United Kingdom, and a Sociedade de Crédito Direto in Brazil. Digital-asset custody is provided by qualified custodians using multi-party computation (MPC). The identity of the partner holding your funds is disclosed in the app at account opening and in each account statement.

2. The service

xobank provides a single interface to hold multi-currency balances, move value across payment networks (including PIX, SPEI, SEPA Instant, ACH, Fedwire, SWIFT, and stablecoin transfers on Base, Solana, Tron and Ethereum), issue and manage Visa cards, and — for developers — operate agent payments through the BAPARA protocol.

When you initiate a transfer, our Rail Router selects an execution path and displays the total fee and expected settlement time before you authorize. The displayed fee is the complete price; we do not add spread to exchange rates. Quoted settlement times are estimates based on current network conditions and are not guaranteed.

3. Eligibility and account security

You must be at least 18 years old and complete identity verification to open an account. You are responsible for safeguarding your credentials, device PIN and recovery factors. High-value transfers require on-device PIN confirmation signed with a device key; you agree that transfers authorized with your credentials are attributable to you. Notify security@xobank.cash immediately of any suspected unauthorized access.

4. Digital assets

Stablecoin balances (USDC, USDT, PYUSD) are held 1:1 by their issuers and are subject to the issuer's own terms. Digital assets are not legal tender, are not FDIC or similarly insured, and may be affected by network congestion, protocol changes or issuer events outside our control. Onchain transactions are irreversible once settled; verify recipient addresses before signing.

5. Agent payments (BAPARA)

If you provision a wallet for an AI agent, you remain the account owner and principal. Budget envelopes you sign define the maximum the agent can spend; you are responsible for payments the agent makes within those limits. Signed receipts returned by the facilitator constitute the record of settlement.

6. Prohibited use, termination and liability

You may not use xobank for unlawful activity, sanctioned transactions, or abuse of the networks we connect to. We may suspend or close accounts that violate these terms or that we are required to restrict by law, and we will return eligible balances per applicable regulation. To the maximum extent permitted by law, our aggregate liability for any claim is limited to the fees you paid us in the twelve months preceding the event giving rise to the claim.

These terms are a pre-launch draft published for transparency and will be replaced by executed terms at general availability. Questions: legal@xobank.cash.

Confidentialité

Dernière mise à jour · 2026-07-01

1. What we collect

Identity data (name, date of birth, government ID, address) collected during verification, as required by anti-money-laundering law. Transaction data (amounts, counterparties, rails, timestamps) generated by your use of the service. Device data (device model, OS, attestation signals, IP-derived region) used for security and fraud prevention. Optional data you connect, such as creator platform accounts in xo Studio.

2. What we do with it

We process data to provide the service, meet legal obligations (KYC/AML, sanctions screening, tax reporting), prevent fraud, and improve the product. We do not sell personal data. We do not use the content of your transactions for advertising. Aggregated, de-identified metrics (like the counters on our homepage) never contain personal data.

3. Who we share it with

Partner banks and custodians, to hold and move your funds; card networks and processors, to operate your cards; identity-verification and sanctions-screening vendors; and authorities where the law requires it. Each processor is bound by contract to use data only to provide its service to us.

4. Where it lives and how long

EU/UK customer data is stored in EU data centers with GDPR safeguards; Brazilian data is processed per LGPD; California residents have CCPA rights. Financial records are retained for the period required by financial regulation (typically five to ten years after account closure), after which they are deleted or irreversibly anonymized.

5. Your rights

You can access, export, correct, or — where the law allows — delete your personal data from the app or by writing to privacy@xobank.cash. You can object to or restrict certain processing and lodge a complaint with your supervisory authority. We answer verified requests within 30 days.

Divulgations

Dernière mise à jour · 2026-07-01

1. Regulatory status

xobank.cash is a financial technology company, not a bank, broker-dealer or investment adviser. Fiat deposit services are provided by partner institutions identified in-app. Pass-through deposit insurance (e.g., FDIC in the US) applies only to eligible fiat balances at partner banks, subject to the insurer's rules, and never to digital assets.

2. Risk disclosures

Digital assets involve risk of loss. Stablecoins depend on their issuer's reserves and redemption mechanics. Yield displayed on treasury balances is variable, generated by onchain instruments, and not a deposit product. Payment networks can experience delays or outages beyond our control; card cashback rates and creator cashback tiers can change with 30 days' notice.

3. Attestations and reporting

We publish quarterly trust reports covering proof-of-reserves attestations for digital-asset balances, SOC 2 Type II audit status, penetration-test summaries and uptime. Marketing metrics on this site (user counts, volume, corridors) are illustrative pre-launch figures and are labeled as such in the trust report. Complaints: complaints@xobank.cash. Security disclosures: security@xobank.cash (PGP key published, 24/7 monitored).