Privacy Policy
Last updated: [EFFECTIVE DATE]
1. Introduction
This Privacy Policy explains how [LEGAL COMPANY NAME] ("we," "us," or "our") collects, uses, and protects information when you use the website and application located at [WEBSITE DOMAIN] (the "Platform").
2. Information We Collect
- Account information: name, email address, and password (stored in hashed form) when you register.
- Verification data: a one-time verification code and its expiry, used to confirm your email address.
- Deposit and withdrawal request data: the asset type, amount, and destination or source details you submit, along with any proof-of-payment file (image or PDF) you upload.
- Asset inquiry data: the asset, requested amount, and message you submit when expressing interest in an asset.
- Usage data: information such as your watchlist selections and in-app notifications.
- Support data: information you provide when contacting support or submitting a ticket.
- Session data: authentication session tokens used to keep you signed in.
We do not collect government identification, payment card numbers, or bank credentials directly through the Platform beyond what you voluntarily include in a proof-of-payment upload or a bank transfer reference you choose to provide.
3. How We Use Your Information
- To create and secure your account, and to verify your email address.
- To process and manually review deposit, withdrawal, and asset inquiry requests.
- To send you transactional notifications (for example, updates on a request you submitted).
- To respond to support requests.
- To maintain security and audit logs of account and administrative activity.
- To comply with legal obligations, where applicable.
4. How We Store and Protect Your Information
Account and request data is stored in our database. Proof-of-payment files are stored in a private storage bucket that is not publicly accessible; access requires authentication and is limited to the submitting user and administrators, via temporary, time-limited access links generated on request. We take reasonable technical measures to protect your information, but no system can be guaranteed fully secure.
5. Third-Party Service Providers
We use the following categories of third-party services to operate the Platform:
- Email delivery — to send verification codes and notifications to your email address.
- Database and file storage — to store account data and proof-of-payment uploads.
- Market data providers — to display cryptocurrency and stock price information. These providers do not receive your personal account information through this integration.
These providers process data on our behalf and are not authorized to use it for their own independent purposes.
6. Data Retention
We retain account and request data for as long as your account is active, or as needed to comply with legal obligations, resolve disputes, and enforce our agreements. [ADD SPECIFIC RETENTION PERIODS IF DEFINED].
7. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or request deletion of your personal information. To make a request, contact us at [SUPPORT EMAIL].
8. Children's Privacy
The Platform is not directed to individuals under 18. We do not knowingly collect personal information from children.
9. International Data Transfers
[DESCRIBE WHERE DATA IS STORED/PROCESSED AND ANY CROSS-BORDER TRANSFER SAFEGUARDS, IF APPLICABLE].
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above.
11. Contact Us
Questions about this Privacy Policy can be sent to [SUPPORT EMAIL].
See also our Terms of Use.