1. Data we collect
Account data you give us: name, email address, country, date of birth and, where verification is required, identity documents and address. Data we generate: balances, transactions, investment positions, support messages and audit records. Technical data: IP address, device and browser information, session and security events, and the request logs needed to operate the service securely.
2. Why we use it
To operate your account and settle transactions; to meet legal obligations including identity verification, sanctions screening and record keeping; to detect and prevent fraud and abuse; to secure the platform; to support you when you ask; and, only with your consent, to send product news you can withdraw from at any time.
3. Legal bases
Performance of our contract with you, compliance with legal obligations, our legitimate interest in operating a secure platform, and your consent where we rely on it. Where consent is the basis you can withdraw it without affecting anything done before you did.
4. Who we share it with
Service providers acting on our instructions — identity verification, email delivery, blockchain data and hosting — under contract and only for the purposes described here. Regulators, tax authorities and law enforcement where we are legally required to. We do not sell personal data and we do not share it for advertising.
5. International transfers
Where data leaves your region we rely on adequacy decisions or standard contractual clauses, and we require the same level of protection from every processor.
6. Retention
Account and transaction records are kept for the period financial regulation requires after the account closes — commonly five to seven years. Security and audit logs are kept for a shorter defined period. Anything not subject to a retention obligation is deleted when it is no longer needed.
7. Your rights
Depending on where you live you may request access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interest. Write to us and we will answer within the statutory period. You can also complain to your local data protection authority.
8. Security
Data is encrypted in transit and sensitive fields — two-factor secrets, verification documents — are encrypted at rest. Access by staff is permission-controlled and every access to customer data through the admin interface is recorded.
9. Cookies
We set a session cookie required to keep you signed in, a locale cookie remembering your language, and a theme preference. These are strictly necessary or preference cookies; the platform sets no advertising or cross-site tracking cookies.
10. Contact
Questions about this policy, or a request about your data, can be sent to the support address on the contact page.