Data we process
Account data (email, password hash, session metadata), wallet addresses and ownership signatures, compliance metadata (verification status, risk level, country of residence, screening outcomes, provider reference identifiers), transaction references (hashes, amounts, timestamps), referral relationships and commission records, support conversations, and technical logs (IP address, user agent, request identifiers).
Identity verification details you submit for review (legal name, date of birth, nationality, residential address, identity document type, number, issuing country and expiry, optional phone number, source of funds and your declarations) are encrypted at rest and can be revealed only by authorised compliance staff, with every access recorded. We do not ask for or store identity document images; our compliance team may contact you to verify a document through a secure channel. If we appoint an identity verification provider, documents and biometric checks will be processed by that provider under its own privacy terms.
Why we process it
To operate your account and the sale; to meet anti-money-laundering, sanctions and securities-law obligations; to detect fraud and abuse; to reconcile on-chain activity; to communicate transactional information; and to defend legal claims.
Retention
Ordinary profile data is deleted or anonymised when no longer needed. Financial and audit records, including compliance decisions and transaction references, are retained for the period required by applicable law.
Sharing
Identity verification, email delivery and blockchain infrastructure providers process data on our behalf. Public blockchain data is by nature visible to anyone. We disclose data to authorities where legally required.
Your rights
Depending on your jurisdiction you may request access, correction, deletion, restriction or portability of your data, or object to processing. Contact support from the investor portal to exercise these rights.