Privacy Policy

1. Introduction

Mecca Gateway ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform for institutional-grade OTC escrow services for gold and critical minerals.

2. Information We Collect

We collect information necessary to provide our services and comply with regulatory requirements:

• Identity Information: Full name, date of birth, nationality, government-issued identification documents, and photographs for KYC/AML verification.
• Contact Information: Email address, phone number, and business address.
• Financial Information: Bank account details, wallet addresses, transaction history, and investment preferences.
• Business Information: Company registration documents, beneficial ownership information, and corporate structure details for institutional users.
• Technical Information: IP address, browser type, device information, and usage data collected automatically when you access our platform.

3. How We Use Your Information

We use the collected information for:

• Providing and managing our OTC escrow and deal facilitation services.
• Conducting KYC/AML verification and ongoing compliance monitoring.
• Processing transactions and maintaining accurate records.
• Communicating with you about your account, transactions, and platform updates.
• Improving our platform, services, and user experience.
• Complying with legal obligations and regulatory requirements.
• Detecting, preventing, and investigating fraud or security incidents.

4. Information Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist with KYC verification, payment processing, cloud hosting, and other operational services.
• Counterparties: Other verified users involved in transactions, limited to information necessary for deal execution.
• Regulatory Authorities: Government agencies, regulators, and law enforcement when required by law or to protect our legal rights.
• Professional Advisors: Lawyers, auditors, and consultants bound by confidentiality obligations.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS) and at rest (AES-256).
• Role-based access control and multi-factor authentication.
• Regular security audits and penetration testing.
• Secure cloud infrastructure hosted on AWS with SOC 2 compliance.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Financial and transaction records are retained for a minimum of seven (7) years in accordance with anti-money laundering regulations and financial record-keeping requirements.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information (subject to legal retention requirements).
• Object to or restrict certain processing activities.
• Data portability for information you provided to us.

To exercise these rights, please contact us at privacy@meccagateway.com.

8. International Data Transfers

Our operations involve data transfers between Sierra Leone, the United States, and other jurisdictions. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and compliance with applicable data protection laws.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze platform usage, and maintain security. You can manage cookie preferences through your browser settings, though some features may not function properly if cookies are disabled.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes via email or through the platform. Your continued use of our services after such notification constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: