COINworKs Inc. — Privacy Policy

Last Updated: August 19, 2026
Website: coinworks.info
Email: support@coinworks.info
FinCEN Registration: 31000320937750
NMLS ID: 2328973

1. Purpose

The purpose of this privacy policy (this "Privacy Policy") is to inform users of our Site of the following:

The personal data we will collect;
Use of collected data;
Who has access to the data collected;
The rights of Site users; and
The Site's cookie policy.

This Privacy Policy applies in addition to the terms and conditions of our Site.

Who We Are

COINworKs Inc. is the business responsible for the personal data described in this Privacy Policy. "The Bitcoin Store" is a registered fictitious business name (DBA) of COINworKs Inc., not a separate company, and both operate under the same FinCEN Money Services Business registration, number 31000320937750.

This Privacy Policy covers coinworks.info and the COINworKs Bitcoin ATM kiosk network. Our staffed retail stores in San Jose and Stockton, California operate under the same company at thebitcoinstore.com, which publishes its own privacy policy. Personal data you provide at either site or at any of our locations is held by COINworKs Inc. and handled under the same compliance program.

2. Consent

By using our Site users agree that they consent to:

The conditions set out in this Privacy Policy; and
The collection, use, and retention of the data listed in this Privacy Policy.

3. Personal Data We Collect

We only collect data that helps us achieve the purposes set out in this Privacy Policy, or that we are required to collect and retain by law.

Data You Provide Through the Site

When you submit a form or contact us through the Site, we may collect:

First and last name;
Email address; and
Phone number.

Data We Collect to Meet Our Compliance Obligations

COINworKs Inc. is a Money Services Business registered with the Financial Crimes Enforcement Network ("FinCEN"). To transact with us, and as described in Section 3 of ourTerms of Service, we are required to collect and verify:

Your first and last name;
SMS phone verification;
A copy of your driver's license or other government-issued identification card;
Where required, your Social Security Number or Taxpayer Identification Number;
Records of your transactions with us, including amounts, dates and wallet addresses you provide.

We use this information to verify your identity, to perform OFAC and other watchlist screening, and to meet our recordkeeping and reporting obligations under the Bank Secrecy Act, including filing Currency Transaction Reports where required. We do not use identity verification documents for marketing.

Data Collected Automatically

When you visit the Site, our hosting provider automatically records standard server log data, including IP address, browser and device type, the pages requested and the referring URL. We use this data to operate the Site, to keep it secure and to diagnose faults. We do not run third-party analytics or advertising tags on this Site. See Section 12 for details.

4. How We Use Personal Data

Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy.

The data we collect may be used for the following purposes:

To provide the Services and complete the transactions you request;
To verify your identity and to keep the customer identification records we are required to maintain as a FinCEN-registered Money Services Business;
To screen you against the Office of Foreign Assets Control ("OFAC") sanctions lists and other government watchlists;
To detect, investigate and prevent fraud, scams, money laundering and other unlawful activity, and to protect our customers and our business;
To meet our recordkeeping and reporting obligations under the Bank Secrecy Act and other applicable law, including filing Currency Transaction Reports and Suspicious Activity Reports where required, and to respond to lawful requests from regulators and law enforcement;
To operate, secure and troubleshoot the Site;
To contact and communicate with customers and prospective customers, including about a transaction or a support request; and
To periodically send marketing materials, where you have not opted out.

The compliance purposes above are legal obligations. We cannot provide the Services without them, and you cannot opt out of them while continuing to transact with us. We do not use identity verification documents or compliance records for marketing.

5. Who We Share Personal Data With

Employees

We may disclose user data to any member of our organization who reasonably needs access to user data to achieve the purposes set out in this Privacy Policy.

Third Parties

We may share user data with the following third parties:

Service providers that support our operations, including our hosting, email and kiosk software providers;
Regulators, law enforcement and financial institutions, where we are required to report or disclose information under the Bank Secrecy Act or other applicable law.

We do not currently run advertising or analytics tracking on this Site. If that changes, we will update this Privacy Policy and the cookie disclosures in Section 12 before doing so.

Third parties will not be able to access user data beyond what is reasonably necessary to achieve the given purpose, and we do not share your data with advertising networks or data brokers.

Other Disclosures

We will not sell or share your data with other third parties, except in the following cases:

If the law requires it;
If it is required for any legal proceeding;
To prove or protect our legal rights; and
To buyers or potential buyers of this company in the event that we seek to sell the company.

If you follow hyperlinks from our Site to another Site, please note that we are not responsible for and have no control over their privacy policies and practices.

6. How Long We Store Personal Data

We retain personal data only for as long as we need it for the purpose it was collected, or for as long as the law requires us to keep it. Our retention periods are:

Transaction and identity verification records — five (5) years following the date of the transaction or the closure of your relationship with us, whichever is later. This period is set by the recordkeeping requirements that apply to us as a FinCEN-registered Money Services Business under the Bank Secrecy Act, and we cannot delete these records earlier on request.
Website contact form and enquiry data — twenty-four (24) months from your last interaction with us, unless it forms part of a transaction record.
Marketing and email list data — until you unsubscribe or ask us to remove you, and then no more than twelve (12) months in a suppression record so that we do not contact you again.

When a retention period ends, we delete or de-identify the data. If you ask us to delete your data, we will do so except where we are legally required to retain it, and we will tell you if that is the case.

7. How We Protect Your Personal Data

In order to protect your security, we use the strongest available browser encryption and store all of our data on servers in secure facilities. All data is only accessible to our employees. Our employees are bound by strict confidentiality agreements and a breach of this agreement would result in the employee's termination.

While we take all reasonable precautions to ensure that user data is secure and that users are protected, there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.

8. Children

We do not knowingly collect or use personal data from children under 13 years of age. If we learn that we have collected personal data from a child under 13 years of age, the personal data will be deleted as soon as possible. If a child under 13 years of age has provided us with personal data their parent or guardian may contact our privacy officer at support@coinworks.info.

9. How to Access, Modify, Delete, or Challenge the Data Collected

If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to who we disclosed your personal data, or if you would like your data to be deleted or modified in any way, please contact our privacy officer at support@coinworks.info.

10. Do Not Track and Opt-Out Preference Signals

Do Not Track ("DNT") is a privacy preference that you can set in certain web browsers. There is no common industry standard for how DNT signals should be interpreted, and our Site does not respond to browser-initiated DNT signals.

We do not currently track users of our Site over time or across third-party websites, and we do not run advertising or analytics tracking on this Site. If that changes, we will update this Privacy Policy before doing so.

We honor the Global Privacy Control ("GPC") opt-out preference signal. If you visit our Site with GPC enabled, we treat it as a request to opt out of the sale or sharing of your personal information from that browser. You may also opt out using the methods in Section 15. We are not responsible for and cannot guarantee how any third parties who interact with our Site and your data will respond to DNT or GPC signals.

11. How to Opt-Out of Data Collection, Use or Disclosure

In addition to the method(s) described in the How to Access, Modify, Delete, or Challenge the Data Collected section, we provide the following specific opt-out methods for the forms of collection, use, or disclosure of your personal data specified below:

Any data submitted on website forms or email lists. You can opt-out by contacting us at support@coinworks.info to remove or edit data. To opt-out of our email list you may use the unsubscribe link on our website, or email us at support@coinworks.info.

12. Cookie Policy

A cookie is a small file, stored on a user's hard drive by a website. Its purpose is to collect data relating to the user's browsing habits. You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your internet browser, but this may decrease the quality of your user experience.

Cookies We Use

We use only strictly necessary cookies — the cookies required to serve the Site securely and to remember choices you make, such as submitting a form. These cookies do not track you across other websites and are not used to build an advertising profile.

Cookies We Do Not Use

We do not use analytics cookies, targeting or advertising cookies, or third-party tracking cookies on this Site, and we do not embed third-party analytics or advertising tags. If we introduce any of these in the future, we will update this Section 12 and Section 10 before doing so.

13. Modifications

This Privacy Policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this Privacy Policy we will update the "Effective Date" at the top of this Privacy Policy. We recommend that our users periodically review our Privacy Policy to ensure that they are notified of any updates. If necessary, we may notify users by email of changes to this Privacy Policy.

14. Contact Information

If you have any questions, concerns or complaints, you can contact our privacy officer at: support@coinworks.info.

15. Your California Privacy Rights

This section applies to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"). It supplements the rest of this Privacy Policy.

Notice at Collection

The categories of personal information we collect, the purposes for which we use them, and how long we keep them are described in Sections 3, 4 and 6. In summary, we collect identifiers (name, email, phone, IP address), government identification numbers and documents, financial and transaction information, and internet activity information. We collect this information to provide our services, to verify your identity and meet our legal obligations as a Money Services Business, and to communicate with you.

Sale and Sharing of Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not sell or share the personal information of consumers we know to be under 16 years of age. We do not sell or share your identity verification documents or transaction records.

Sensitive Personal Information

We collect government identification numbers, including driver's license and, where required, Social Security or Taxpayer Identification Numbers, which California law treats as sensitive personal information. We use this information solely to verify your identity and to meet our legal and compliance obligations. We do not use or disclose it to infer characteristics about you, and we do not use it for advertising.

Your Rights

Subject to verification and to the legal exceptions described below, you have the right to:

Know what personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to;
Access a copy of the personal information we hold about you;
Delete the personal information we have collected from you;
Correct inaccurate personal information we hold about you;
Opt out of the sale or sharing of your personal information;
Limit our use of your sensitive personal information;
Non-discrimination — we will not deny you services, charge you a different price, or provide you a different level of service because you exercised any of these rights.

How to Exercise Your Rights

Email support@coinworks.info or call (888) 811-2646. We will confirm receipt of your request within 10 business days and respond within 45 calendar days, and we will tell you if we need a further 45 days. To protect your information, we will need to verify your identity before acting on a request to know, access, delete or correct. An authorized agent may submit a request on your behalf with written permission that we can verify.

Limits on Deletion

We cannot delete transaction and identity verification records before the end of the five-year retention period described in Section 6, because federal recordkeeping requirements that apply to us as a FinCEN-registered Money Services Business override a deletion request. If we deny a request on this basis, we will tell you why.

16. Governing Law

This Privacy Policy, and any dispute arising out of or relating to it or to our handling of your personal information, is governed by and construed in accordance with the laws of the State of California, without regard to its conflict of law rules. Nothing in this Privacy Policy waives any right or remedy available to you under the California Consumer Privacy Act or any other California law that cannot be waived.

Where this Privacy Policy and our Terms of Service conflict on the handling of your personal information, this Privacy Policy governs.