UGLYCASH — Legal & Security
UGLYCASH — Legal & Security

UGLYCASH — Legal & Security

UGLYCASH is a financial services platform operating globally from our base in San Francisco, California. While we are not a bank, the nature of our operations necessitates adherence to a comprehensive set of regulatory requirements. To deliver inclusive financial services worldwide, we maintain a strict compliance program in accordance with U.S. federal, state, and international regulations. This program encompasses various elements including registrations, licenses, processes, policies, and agreements. Additionally, we implement bank-grade Know Your Customer (KYC) and Anti-Money Laundering (AML) standards, along with robust information security protocols. These measures are essential to ensure the integrity, security, and legality of our operations as we strive to provide accessible financial services on a global scale.

User Agreements

These documents are designed to provide clear and comprehensive information about your rights and obligations when using UGLYCASH, as well as our commitments to you. We encourage you to review these agreements thoroughly to understand how we protect your interests and ensure compliance with legal requirements.

User Agreement
User Agreement
Privacy Policies
Privacy Policies
Other policies
Other policies
Partnership Terms
Partnership Terms

Regulatory Registrations

The UGLYCASH app operates under a robust framework of regulatory registration and licenses, including regulatory approvals that enable us to provide secure and compliant financial services across various jurisdictions. Our commitment to legal compliance is reflected in the diverse range of licenses we have obtained, allowing us to offer our services in the regions we serve.

Entity
Regulatory Registration
Agency
BFF Prime, LLC
Registered in FinCEN as a Money Services Business (MSB) under the identifier 31000301748756. Money transmission services for applicable services provided to US residents are provided by Bridge Building Inc NMLS # 2450917.
Financial Crimes Enforcement Network (FinCEN) - U.S. Department of the Treasury. For US state licensing information related to Bridge, please see: https://www.nmlsconsumeraccess.org/EntityDetails.aspx/COMPANY/2450917.
BFF United, LLC
Registered in FinCEN as a Money Services Business (MSB) under the identifier 31000301748765. Money transmission services for applicable services provided to US residents are provided by Bridge Building Inc NMLS # 2450917.
Financial Crimes Enforcement Network (FinCEN) - U.S. Department of the Treasury. For US state licensing information related to Bridge, please see: https://www.nmlsconsumeraccess.org/EntityDetails.aspx/COMPANY/2450917.
BFF Cards, LLC
Ruling Letter by OCIF (Puerto Rico) which authorizes conducting business activities related to card issuance.
Oficina del Comisionado de Instituciones Financieras - 1492 Ave. Ponce De León Suite 600, Edif. Centro Europa, San Juan, Puerto Rico 00907.
Rpay México SAPI de CV
Registered entity with the activity of “TRANSACTIONS WITH VIRTUAL ASSETS”.
Unidad de Inteligencia Financiera - Avenida Constituyentes 1001 Belén de Las Flores. Ciudad de México. Sistema de Administración Tributaria - Av. Hidalgo 77, Col. Guerrero, C.P. 06300, Ciudad de México. Marca SAT 5562722728
BFF El Salvador, SA de CV
Bitcoin Service Provider (651358ee79e50005ac4733d7) and Digital Asset Service Provider (PSAD-0015).
Banco Central de Reserva de El Salvador - Alameda Juan Pablo II, entre 15 y 17 Av. Norte. Apartado Postal (106), San Salvador, El Salvador. Comisión Nacional de Activos Digitales - Ave. Las Magnolias. Edificio Insigne, nivel 7, local 710. Col. San Benito. San Salvador, El Salvador. Unidad de Investigación Financiera - Urbanización Madre Selva IV Etapa, prolongación Calzada El Amate, N.° 4, Antiguo Cuscatlán, La Libertad, El Salvador, C.A.
BFF Classic, LLC
Registered in FinCEN as a Money Service Number (MSB) under the identifier 31000250489488.
Financial Crimes Enforcement Network (FinCEN) - U.S. Department of the Treasury..

Information Security

Protecting customer data is fundamental to us. We prioritize privacy and security in every aspect of our platform and its supporting infrastructure, and consistently seek opportunities to enhance and strengthen UGLYCASH's security as we innovate and develop the product. Our Information Security Management System (ISMS) guarantees the protection of our users' data through the following guiding elements:, which are continuously monitored by the personnel in charge of this purpose.

icon
image
icon
Security Infrastructure Management

UGLYCASH's infrastructure is meticulously designed with multiple layers of protection to ensure your data remains secure during transmission, storage, and processing. These protections include, but are not limited to, robust encryption, strict logical access controls, and secure software development lifecycle.

icon
image
icon
Secure Onboarding Process

To ensure the utmost security of your personal information during onboarding, we partner with Sumsub, a robust KYC provider. Sumsub is certified under SOC 3 and ISO/IEC 27001, guaranteeing that your data and documents are managed with the highest security standards.

icon
image
icon
Certified under ISO 27001

UGLYCASH has achieved ISO 27001 certification, the international standard for Information Security Management Systems (ISMS). This certification demonstrates that UGLYCASH has implemented rigorous security controls and continuous risk management processes to protect customer and organizational data at the highest level.

icon
image
icon
Cloud Security (via AWS)

UGLYCASH utilizes Amazon Web Services (AWS) as its cloud service provider, taking full advantage of AWS's security and compliance controls for data center physical security and cloud infrastructure. Information about these security measures can be found on the AWS Security Cloud website.

icon
image
icon
Audited Under SOC 2 Type 2 Scope

UGLYCASH successfully passed a rigorous SOC 2 Type 2 audit, assuring our customers and stakeholders that we have established robust measures to protect their data. This certification underscores our commitment to maintaining the highest security, availability, and confidentiality standards.

icon
image
icon
PCI-SAQ

UGLYCASH maintains a Payment Card Industry Self-Assessment Questionnaire (PCI-SAQ*). This framework ensures that our systems, procedures and and processes for handling payment card information meet the necessary security requirements for the financial card industry.

Privacy

We prioritize your privacy and are committed to being transparent about how we collect, use, and protect your personal information. We gather data only to enhance our services and ensure a secure user experience. This includes information you provide during account creation, transaction details, and data from your interactions with our platform.

Agreements

At UGLYCASH we strive to keep all of our agreements up to date with the latest regulations and industry standards, including CCPA. Our Privacy Policies describe in detail UGLYCASH’s data privacy standards and compliance with data protection legislations.

Privacy PoliciesPrivacy Policies

UGLYCASH’s List of Subprocessors

To deliver our services, UGLYCASH partners with the subprocessors listed in the tables on the page provided below. A subprocessor is a third party engaged by UGLYCASH and its affiliates to process customer personal data.

UGLYCASH Subprocessors list

Contact details

Best Friend Finance, Inc. San Francisco, CA United States [email protected]

Logo

Best Friend Finance, LLC

TiktokXInstagram