Privacy Policy

Account details (email, phone), identity information and documents required for verification, transaction records, payment method details, device and session information, and support correspondence.

To operate your account and process your orders, to meet legal obligations including identity verification and transaction monitoring, to detect and prevent fraud, and to provide support.

Passwords are stored using Argon2id and are never recoverable. Identity documents are stored privately and are accessible only to authorised reviewers, through short-lived links. Sensitive payment details are encrypted at rest and shown to you only in masked form.

Financial and verification records are retained for the period required by applicable regulation, which is typically several years after an account closes. Financial history is append-only and cannot be deleted on request where retention is legally required.

Depending on your jurisdiction you may have rights to access, correct, or request deletion of your personal data, and to object to certain processing. Contact us to exercise them.

This is a template. Have it reviewed against the data-protection law that applies to your operation.