§ 01Who We Are
Planet B 21, LLC is a Wyoming limited liability company. In this Privacy Policy, we refer to ourselves as "Planet B 21," "we," "our," or "us." We are the data controller for personal information we collect about you, including personal information collected through cashtoha.sh (a consumer product brand of Planet B 21, LLC and not a separate company).
Our contact details are at the end of this Policy.
§ 02Scope of this Policy
This Policy applies to personal information we collect when you:
- Visit planetb21.com or cashtoha.sh.
- Create a Planet B 21 or Cash to Hash account.
- Complete identity verification (KYC) or business verification (KYB).
- Purchase compute capacity from us or communicate with our support team.
- Interact with us in any other context governed by our Terms of Service.
It does not apply to information collected by third-party services you may interact with separately, even if we link to them. Those services have their own privacy practices, which we do not control.
§ 03Information We Collect
The categories of personal information we collect depend on how you interact with us. They include:
3.1 Account information
- Identifiers: your name, email address, password (stored in hashed form), and any username or account handle.
- Contact details: phone number, mailing or billing address.
3.2 Identity verification (KYC) and business verification (KYB) information
Because we apply a risk-based compliance program (even though we are not a money transmitter), we collect information necessary to verify your identity or, for businesses, the identity of the entity and its beneficial owners. This includes:
- Government-issued identification documents (passport, driver's license, national ID) and the information shown on them (full name, date of birth, document number, expiration, jurisdiction of issuance).
- A selfie or live image used to match against your identification document.
- Proof of address (utility bill, bank statement, or similar).
- For business customers: entity formation documents, tax identifiers, beneficial ownership information, and associated personal information of directors or owners.
- Screening results against sanctions lists (OFAC SDN list and similar), politically exposed persons (PEP) lists, and adverse media sources.
3.3 Transaction and service information
- The compute capacity amount, duration, price, and date of each purchase.
- The Bitcoin mining pool account identifier you supply so that mining rewards can be routed to you. (This is not a wallet we control, and we do not custody your mining rewards — see our Terms of Service.)
- Payment information: card details or bank information used for payment are handled by our payment processors; we receive only limited details (last four digits, card brand, transaction identifier) for reconciliation and dispute handling.
3.4 Communications
Records of your messages to our support team, fraud or compliance reviews, and any notices we send you.
3.5 Technical information
- Device information (operating system, browser type, device identifiers).
- Log information (IP address, access times, pages viewed, referring URLs).
- Cookies and similar technologies — see Section 10.
3.6 Information from third parties
We receive information from KYC and identity verification vendors, from sanctions screening providers, from payment processors (Stripe, Strike, BTCPay), and from upstream capacity providers to the extent necessary to deliver the service. We may also receive fraud prevention signals from processors or fraud prevention networks.
§ 04How We Use Your Information
We use your personal information for the following purposes:
- Providing the services: creating your account, processing purchases, delivering compute capacity, communicating with you about your account, and responding to support requests.
- Identity verification and compliance: verifying your identity, screening against sanctions and watchlists, meeting our anti-money-laundering obligations and the expectations of our payment processors and upstream providers, and meeting record-retention requirements.
- Fraud prevention and security: detecting, investigating, and preventing fraudulent transactions, account takeover, unauthorized access, and other abuse of the services.
- Payment processing and dispute resolution: facilitating payments and refunds where applicable, and representing our position in the event of chargebacks or payment disputes.
- Legal compliance: responding to lawful requests from authorities and complying with applicable law.
- Product improvement: analyzing usage patterns in aggregated or de-identified form to improve our services.
- Marketing communications: sending you product news and updates, where permitted by law. You may opt out of marketing communications at any time.
4.1 Legal bases (for individuals in the EEA, UK, and similar jurisdictions)
Where GDPR or similar legislation applies, we rely on the following legal bases:
- Performance of a contract (delivering services you purchase).
- Legal obligation (sanctions screening, record retention, tax and financial compliance).
- Legitimate interests (fraud prevention, dispute resolution, product improvement, direct marketing to our customers — balanced against your rights and interests).
- Consent (where required, for example, for non-essential cookies or marketing communications).
§ 05How We Share Information
We do not sell your personal information, and we do not share it with third parties for their own direct marketing. We share personal information only in the following circumstances:
5.1 Service providers (processors)
We share information with carefully selected service providers who process it on our behalf under written agreements. Categories of service providers and the purposes of sharing include:
———————– ———————– ———————– Category Purpose
Payment processing - Card and ACH payment processing
Bitcoin/Lightning - Cryptocurrency payment, payments acceptance
Identity verification - ID document verification, biometric match
Sanctions & PEP - OFAC and watchlist screening
Upstream capacity - Routing of purchased capacity
Cloud hosting & email - transactional email
———————– ———————– ———————–
5.2 Legal and safety disclosures
We may disclose information when we believe in good faith that disclosure is necessary to comply with a legal obligation, respond to a valid legal process (including a subpoena, court order, or government request), enforce our Terms of Service, protect the rights, property, or safety of Planet B 21, our users, or others, or investigate and prevent fraud or abuse.
5.3 Business transfers
If Planet B 21 is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will notify you and require the successor to honor this Policy or provide equivalent protection.
5.4 With your consent
We may share personal information with third parties for purposes not described above when you direct us to do so or give separate consent.
§ 06International Data Transfers
Planet B 21 is based in the United States and operates infrastructure primarily in the United States. If you access the services from outside the United States, your information will be transferred to, stored, and processed in the United States. Where personal information is transferred from the EEA, UK, or Switzerland to the United States or other jurisdictions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.
§ 07How Long We Retain Information
We retain personal information for as long as needed to provide the services and meet the purposes described in this Policy. Specifically:
———————————– ———————————– Category Retention period
Account and contact information - Duration of the account plus 5 years after closure
KYC documents and verification - 5 years after account closure records
Transaction records - 5 years after the transaction
Sanctions and fraud screening - 5 years after account closure records
Support communications - 3 years from last interaction
Technical logs - Up to 24 months
Marketing preferences / unsubscribe - Indefinitely, to honor opt-outs records ———————————– ———————————–
We may retain information longer when required to comply with a legal obligation, respond to lawful requests, resolve disputes, or enforce our agreements.
§ 08Security
We use commercially reasonable technical, organizational, and administrative measures to protect personal information, including:
- Encryption of data in transit using TLS and encryption of sensitive data at rest.
- Role-based access controls, with least-privilege access to KYC and payment records.
- Multi-factor authentication for employee access to production systems.
- Logging, monitoring, and periodic review of access to sensitive data.
- Vendor security reviews for service providers who process personal information.
No method of transmission or storage is entirely secure. We cannot guarantee absolute security, but we work diligently to protect your information.
§ 09Your Rights and Choices
9.1 All users
- Access and update most of your account information from within the product dashboard.
- Contact us to request access to, correction of, or deletion of your personal information.
- Opt out of marketing emails by using the unsubscribe link or contacting us.
9.2 Users in the EEA, UK, and similar jurisdictions
If the GDPR or UK GDPR applies to you, you have the right to:
- Access your personal information.
- Request correction of inaccurate or incomplete information.
- Request deletion of your information (subject to legal retention obligations).
- Restrict or object to certain processing.
- Data portability where applicable.
- Withdraw consent where we rely on consent.
- Lodge a complaint with your local data protection authority.
9.3 California residents
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you specific rights regarding your personal information, including the right to know what we collect and how we use it, the right to delete, the right to correct, the right to opt out of sale or sharing for cross-context behavioral advertising (we do not engage in either), and the right to non-discrimination for exercising any of these rights. To exercise these rights, contact us using the details in Section 13.
9.4 Identity verification for requests
We may ask you to verify your identity before acting on a request concerning your personal information. This is to protect your information from unauthorized access.
9.5 Limits on deletion
Note that certain records — notably KYC records, transaction records, and sanctions screening records — must be retained for five (5) years or longer to meet our compliance obligations. Requests to delete information subject to a retention obligation will be honored after the retention period ends.
§ 10Cookies and Similar Technologies
We and our service providers use cookies, local storage, and similar technologies to operate the services, remember your preferences, understand how the services are used, and detect fraud. You can control cookies through your browser settings; disabling essential cookies may prevent the services from working correctly. Where required by law, we will obtain your consent before placing non-essential cookies.
§ 11Children's Privacy
The services are not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information to us, please contact us and we will delete it.
§ 12Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this Policy indicates when it was most recently revised. Material changes will be communicated by email or in-product notice. We encourage you to review this Policy periodically.
§ 13Contact Us
If you have questions about this Policy or our privacy practices, or if you want to exercise any of your rights, contact us at:
Planet B 21, LLC
7345 w sand lake rd ste 210 office 4928
Wyoming, United States
Privacy: privacy@planetb21.com
General support: support@planetb21.com
— END OF PRIVACY POLICY —