BestRemit
Privacy & SecurityLast Updated: August 15, 2026

Privacy Policy

Learn how BestRemit protects your privacy. We operate on strict data minimization principles: zero personal accounts, zero PII storage, and no access to your personal financial credentials.

✓Zero PII RequiredNo accounts or login needed
ℹIndicative EstimatesVerify final rates on provider site
⚖Not a BankPure informational comparison

BestRemit Privacy Policy

Effective Date: August 15, 2026
Last Updated: August 15, 2026

BestRemit ("we," "us," or "our") is an independent international money transfer comparison and exchange rate discovery platform operated by Normadit LLC ("Company"). BestRemit is available via our web properties (bestremit.app), responsive embeddable widgets, and our Model Context Protocol (MCP) application and plugin for ChatGPT and AI agent platforms.

We are committed to respecting your privacy and adhering to strict data minimization practices. BestRemit is purposely designed so that you can discover, compare, and rank global money transfer options without creating an account or disclosing any personal financial credentials.

1. Summary of Key Principles

  • Zero Personally Identifiable Information (PII) Required: You do not need to register, log in, or provide your name, email address, physical address, or telephone number to compare remittance quotes.
  • No Financial Account Access: BestRemit never requests, accesses, collects, or stores bank account numbers, debit/credit card details, government identification numbers (such as Social Security Numbers), passwords, or transaction PINs.
  • Ephemeral Query Processing: Remittance comparison parameters (such as source currency, destination currency, and transfer amount) are processed in real time to calculate indicative quotes and are not stored in an identifiable user registry.
  • No Tracking Cookies in Widget Sandbox: The BestRemit widget rendered within ChatGPT or other MCP host environments runs in a sandboxed iframe with strict Content Security Policies (CSP). We do not set persistent advertising or tracking cookies inside the widget.
  • Independent Third-Party Transfers: All money transfer executions, payments, identity verifications (KYC), and customer service take place exclusively on the external, licensed platforms of the respective remittance providers (such as Wise, Remitly, Panda Remit, Western Union, OFX, and Instarem).

2. Information We Collect

A. Non-Personal Search Parameters

When you query BestRemit to compare transfer rates, you provide non-personal parameters, including:

  • Currency Pair: Source (send) currency code (e.g., USD, EUR, GBP, CAD, AUD) and destination (receive) currency code (e.g., CNY, INR, PHP, MXN, JPY).
  • Transfer Amount: The numerical value you wish to send (e.g., 1,000 USD).
  • Optional Search Preferences: Filter selections such as transfer speed, preferred payment method (e.g., bank deposit, mobile wallet, debit card), or specific provider exclusions.

These parameters are purely numerical and categorical. They cannot be used by BestRemit to identify any individual person.

B. Technical and Infrastructure Logs

When your browser or AI client connects to BestRemit servers (hosted on cloud infrastructure such as Vercel), standard, non-identifying technical metadata is automatically logged:

  • Internet Protocol (IP) address (used for geographic rate routing, rate limiting, and DDoS defense)
  • Browser type, device operating system, and user-agent string
  • HTTP request method, timestamps, and server response codes
  • System performance and latency diagnostics

These server logs are maintained temporarily for system security, infrastructure stability, and operational troubleshooting, and are automatically deleted or aggregated.

C. ChatGPT and MCP Host Data Flow

When you interact with BestRemit through ChatGPT or other MCP-compatible hosts:

  • The AI host invokes BestRemit's MCP tools (compare_remittance_quotes and get_fx_rate) using structured arguments derived from your prompt.
  • BestRemit receives only the input parameters necessary to compute the transfer comparison and returns structured quote data back to the host.
  • BestRemit does not access, read, or store your private chat transcripts, conversation history, or OpenAI account profile.

3. How We Use Information

We use the limited, non-personal information described above solely to:

  1. Generate Real-Time Comparisons: Query upstream exchange rate feeds and remittance provider APIs to calculate estimated exchange rates, transfer fees, recipient received amounts, and delivery estimates.
  2. Deliver Responsive UI Widgets: Render the interactive comparison table and mobile card views via the MCP Apps bridge within ChatGPT or web preview surfaces.
  3. Protect System Security: Detect and mitigate automated scraping, denial-of-service (DDoS) attacks, brute-force attempts, and unauthorized API exploitation.
  4. Comply with Legal Obligations: Ensure compliance with applicable laws, regulations, and platform submission policies.

We do not sell, rent, monetize, or trade user data to third-party data brokers or targeted advertising networks.

4. Third-Party Services and External Links

A. Remittance Providers

BestRemit provides links and call-to-action buttons (e.g., "Transfer with Wise," "Send with Remitly") that direct you to the official websites or mobile applications of licensed third-party money transfer providers.

When you click an external link:

  • You leave BestRemit and navigate to an independent third party.
  • Any information you subsequently provide (such as your name, ID, bank account details, and payment information) is subject to that provider's own privacy policy and terms of service.
  • We strongly encourage you to review the privacy policies of any third-party provider before initiating a transaction.

B. Affiliate Tracking and Referral Links

BestRemit participates in affiliate marketing programs. Outbound links displayed in the comparison widget or website route through dedicated redirect paths (e.g., https://bestremit.app/go/{provider} or direct partner referral URLs).

  • When you click an outbound affiliate link, the destination provider or affiliate network may place a standard attribution cookie or tracking tag on your browser to record that you were referred by BestRemit.
  • This attribution allows BestRemit to earn a referral commission at no additional cost to you.
  • BestRemit does not control or have access to cookies placed by external provider domains once you leave our service.

5. Content Security Policy (CSP) & Sandbox Isolation

The BestRemit ChatGPT widget runs in a sandboxed <iframe> governed by strict Content Security Policies (CSP):

  • Connect Domains: Restricted (connectDomains: []) — the widget does not make unauthorized direct frontend network calls. All data retrieval is securely mediated through host MCP tools.
  • Resource Domains: Restricted exclusively to verified BestRemit origin (https://bestremit.app) serving proxied static assets.
  • Redirect Domains: Outbound navigation is restricted to verified BestRemit redirect endpoints (https://bestremit.app).

6. Data Retention and Storage

  • No Persistent User Accounts: Because BestRemit operates without user accounts, we do not maintain personal profiles or historical transaction registries.
  • Ephemeral Processing: Transfer calculation requests are processed in memory and immediately returned.
  • Server Logs: Standard server logs are retained only for a limited period (typically 30 days or less) for security and operational monitoring, after which they are permanently deleted or aggregated.

7. Data Security

We employ industry-standard administrative, technical, and physical safeguards to protect information:

  • Encryption in Transit: All communications between your browser/AI host and BestRemit servers use modern Transport Layer Security (TLS/HTTPS).
  • Zero Financial Data Storage: By never collecting sensitive payment data or credentials, we eliminate the risk of financial data breaches on our platform.
  • Strict Boundary Validation: All incoming MCP tool arguments and parameters are validated and sanitized before processing.

8. Children's Privacy

BestRemit is an informational financial comparison tool intended for adult individuals capable of entering into legally binding contracts. We do not knowingly solicit, collect, or maintain information from children under 13 years of age (or under 16 where applicable by regional law). If we learn that we have inadvertently collected information from a child, we will take prompt steps to delete such information.

9. International Users & Privacy Rights (GDPR / CCPA)

Although BestRemit does not collect or retain personal profiles, users in jurisdictions such as the European Economic Area (EEA), United Kingdom (UK), and California (CCPA/CPRA) maintain specific data privacy rights:

  • Right to Know / Access: You may request details on whether any personal data is held by us.
  • Right to Deletion: You may request the deletion of any server log entries that could be associated with your IP address.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a privacy inquiry or exercise your statutory rights, please contact our Data Protection team at privacy@bestremit.app.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect enhancements to our service, changes in legal requirements, or platform updates. When changes occur, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically to stay informed about our privacy practices.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us: