Privacy Policy

Account information. Name, email address, password (stored only as a cryptographic hash), phone number and country when you create an account.

Identity verification (KYC). To meet legal obligations we collect and verify identity documents such as a government-issued ID, passport or driver's licence, a selfie or likeness check, proof of address, and — where applicable — national identifiers such as a tax ID or the last digits of a social security number. This data is required by anti-money-laundering and know-your-customer law.

Financial information. Deposit and withdrawal records, transaction history, linked account details, card orders and balances.

Technical information. IP address, browser type and version, device identifiers, timezone, and logs of how you use the service. Much of this is collected automatically when you visit.

Communications. Messages you send to support and records of the service emails we send you (confirmations, security notices).

We use your information to:

• Create, secure and operate your account;
• Verify your identity and comply with KYC, AML and sanctions obligations;
• Process deposits, withdrawals, trades, card orders and payouts;
• Detect and prevent fraud, abuse and unauthorised access;
• Send service and security emails you need;
• Answer your support requests and resolve disputes;
• Meet accounting, tax and regulatory record-keeping duties.

If you are in the EU or UK, we rely on: performance of our contract with you (running your account); compliance with legal obligations (KYC/AML); our legitimate interests (security, fraud prevention, improving the service); and your consent where you have given it (for example optional marketing). You can withdraw consent at any time.

We do not sell your personal information. We share it only with:

• Service providers that power the platform — database and file hosting, email delivery, and payment partners — strictly to perform their function for us;
• Regulators and authorities when required by law, court order, or to comply with KYC/AML and sanctions obligations;
• Professional advisers such as auditors and legal counsel under confidentiality;
• A buyer in a merger or sale of our business, under this policy's protections.

Your information may be processed in countries other than your own. When we transfer personal data internationally we use appropriate safeguards such as standard contractual clauses or equivalent legal mechanisms.

We keep your information for as long as your account is active. Identity-verification records and transaction records are retained for the longer period required by financial regulations after account closure. Anything held only for operational purposes (like technical logs) is deleted on routine schedules.

We protect your information with encryption in transit (HTTPS/TLS), hashed passwords, strict access controls, and database-level row-level security so accounts can only read their own records. No system is perfectly secure, but we design ours so a breach of one account cannot expose another.

We use a small number of essential cookies and browser local-storage entries to keep you signed in, remember your preferences and secure the service against abuse. We do not use advertising cookies. You can clear or block cookies in your browser, though doing so may sign you out or break parts of the service.

Depending on where you live, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your data, subject to the legal retention duties described above;
• Export your data in a portable format;
• Object to or restrict certain processing, and withdraw consent at any time;
• Opt out of the "sale" or "sharing" of personal information (we do not sell it to begin with);
• Complain to your local data-protection authority.

To exercise any of these rights, contact us using the details below. We will respond within the timeframe your local law requires.

The service is not directed at minors. You must be at least 18 years old (or the age of majority in your jurisdiction) to open an account. We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

We may update this policy as the service evolves. The "Effective" date at the top always shows the current version. For material changes we will notify you in the app or by email before the change takes effect.

Questions about this policy or your personal data? Reach our data protection team:

ASSET NEST Holdings Ltd. — Data Protection Division.

Written requests can also be submitted directly through our corporate contact desk.