Mosavi Data Protection Policy

Effective Date: December 10, 2025

Entity Controller: Mosavi Co., Ltd., a company registered under the laws of Japan

Contact: support@mosavi.io

1. Notice Regarding Acceptance

This Data Protection Policy forms an integral part of the Mosavi Terms of Use. By clicking “I Agree” or by accessing or using the Service, you acknowledge that you have read, understood, and accepted this Policy, and you consent to the processing and protection of your personal data in accordance with this Policy.

2. Purpose of This Policy

The purpose of this Policy is to explain how Mosavi ensures the secure, lawful, and transparent processing of users’ personal data, and how we comply with global data protection obligations, including but not limited to the principles of data minimization, purpose limitation, storage limitation, integrity, and confidentiality.

3. Scope of Policy

This Policy applies to all personal data processed by Mosavi in connection with your use of the Service, regardless of your jurisdiction or location. It supplements the Mosavi Privacy Policy and Terms of Use.

4. Data Protection Principles

Mosavi processes personal data in accordance with the following core principles:

- Lawfulness, Fairness, and Transparency

- Purpose Limitation

- Data Minimization

- Accuracy

- Storage Limitation

- Integrity and Confidentiality

5. Lawful Basis for Processing

We only process your personal data when one of the following lawful bases applies:

- Your explicit consent

- Contractual necessity (e.g., to provide you the Service)

- Legal obligations

- Legitimate interests (e.g., fraud prevention, security monitoring)

6. Data Subject Rights

You have the following rights with respect to your personal data:

- Right to access

- Right to correction or rectification

- Right to erasure (“right to be forgotten”)

- Right to restriction of processing

- Right to object to processing

- Right to data portability

- Right to withdraw consent (where applicable)

7. Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

- End-to-end encryption of communications

- Secure storage on encrypted infrastructure

- Role-based access control

- Periodic data protection reviews and audits

- Staff confidentiality obligations and training

8. Data Sharing and Processors

Personal data may be shared with:

- Our Custody Partner (solely for financial features)

- Infrastructure providers under binding data processing agreements

- Regulatory or law enforcement authorities where legally required

- Legal successors in the event of corporate restructuring

We ensure that all third-party processors are subject to confidentiality and data protection obligations equivalent to those of Mosavi.

9. Cross-Border Data Transfers

Where personal data is transferred outside your country of residence, we implement appropriate safeguards, such as contractual clauses or compliance certifications, to ensure protection equivalent to the jurisdiction of origin.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights or freedoms, we will notify affected users and relevant authorities as required by applicable law, without undue delay.

11. Retention & Deletion

We retain personal data only for as long as necessary to fulfill the stated processing purpose or to meet legal obligations. Upon account deletion or expiration of retention periods, personal data is securely erased or anonymized.

12. Contact & Complaints

If you have questions, concerns, or complaints regarding this Policy or your data, please contact:

Email: support@mosavi.io

Address: Japan.

You may also have the right to lodge a complaint with a supervisory authority in your jurisdiction.