Privacy Policy

Data we collect

We collect the information needed to operate a regulated financial service:

• Account data: email, password hash, and security settings.
• KYC data: legal name, date of birth, nationality, address, and identity-document details.
• Transaction data: deposits, returns, commissions and withdrawals recorded on the ledger.
• Technical data: IP address and device/user-agent, used for security and rate limiting.

How we use it

We use your data to verify your identity, operate your account, process transactions, meet legal and anti-money-laundering obligations, secure the platform, and communicate with you about your account.

Encryption & retention

Sensitive fields — KYC personal data, two-factor secrets and withdrawal destinations — are encrypted at rest with AES-256-GCM; we store ciphertext, never plaintext. Records required for regulatory or ledger-integrity purposes are retained for as long as the law requires.

Sharing

We do not sell your personal data. We share it only with service providers acting on our behalf (such as identity verification, email and payments) and where required by law or to prevent fraud.

Your rights

Subject to legal limits, you may request access to, correction of, or deletion of your personal data, and you may object to certain processing. Contact us through your account to exercise these rights.

Cookies

We use strictly necessary cookies to keep you signed in (an httpOnly, SameSite session cookie) and to protect against cross-site request forgery. We do not use them to track you across other sites.