Privacy Policy

This is a starting template supplied with the platform. Replace it with text reviewed for your business and the jurisdictions you operate in, then remove this notice from Admin → Content.

What this policy covers

This policy explains what personal data this service collects, why, and what happens to it.

What we collect

Account details. Your name, email address, mobile number and country, given when you register.

Transaction details. For each exchange: the amounts, the payment methods, the receiving account you supply, the payment reference you submit, and the payout reference we record. For service orders: what you asked for and what you told us about it.

Verification documents. Where an exchange requires identity verification, the documents you upload and the details on them.

Technical data. Your IP address and browser user agent at the point an order is placed, retained for fraud review and dispute resolution.

Support correspondence. Messages you send us through support tickets.

Why we collect it

To carry out the exchange or service you asked for. Without the receiving account and the payment reference, an order cannot be completed.
To verify payments and detect fraud.
To meet record-keeping obligations that apply to the operator of this service.
To answer your support questions.

Who sees it

Staff who need it for their role. Access is limited by role: support agents can see orders and tickets, but not verification documents; only staff with the compliance role can review identity documents.

Uploaded documents are stored privately and are never publicly reachable by URL. Every access to them goes through an authorisation check.

Sharing

We share personal data with payment providers and banks only to the extent needed to send or receive a payment, and with professional advisers or authorities where we are required to.

We do not sell personal data and we do not share it for advertising.

Retention

Transaction records and the verification documents attached to them are retained for as long as the operator's record-keeping obligations require, and then deleted.

Support tickets are retained while they are useful for handling repeat questions, and then deleted.

Your rights

Depending on where you live, you may have the right to ask for a copy of your data, to have it corrected, to have it deleted where we are not required to keep it, and to object to certain processing. Contact us using the address on the site.

Note that we cannot delete records we are required to retain, and we cannot delete a transaction record while the transaction is in progress.

Security

Passwords are stored hashed, never in plain text. Session cookies are HTTP-only. Uploaded documents are stored outside the public web root. Privileged actions are recorded in an audit log that cannot be edited after the fact.

Cookies

This site sets a session cookie when you sign in, and remembers your language and theme choice. It does not use advertising or cross-site tracking cookies.

Contact

Privacy questions should go to the contact address published on the site.