Version 1 — effective on publication.
What we collect
Account data (name, email, country, phone), identity verification data and documents, payment method details, device and session information (IP address, browser), transaction history, and support correspondence.
Why we process it
To operate your account and process transactions; to meet know-your-customer, anti-money-laundering and sanctions obligations; to prevent fraud and secure accounts; to send service and security notices; and, only with your consent, marketing messages.
Who we share it with
Identity verification, payment, custody and trading providers strictly to the extent needed to deliver the service; regulators and law enforcement where required; professional advisers under confidentiality. We do not sell personal data.
Retention
Identity and transaction records are kept for the period required by financial regulation (typically five to seven years after the relationship ends), then deleted or anonymised. Security logs are kept for a shorter period.
Your rights
Depending on your jurisdiction you may access, correct, export or ask us to delete your data, object to certain processing and complain to a supervisory authority. Some requests are limited by our legal retention duties. Contact the support address in the app.
Security
Data in transit is encrypted, sensitive fields are encrypted at rest, access is role-based and every staff action on your account is recorded in a tamper-evident audit log.
Cookies
We use strictly necessary cookies for sign-in sessions. Marketing cookies are used only with your consent.