Privacy Policy

This is a template. Replace every [SQUARE BRACKET] with
your own details and have it reviewed before you rely on it. It describes
the data this platform collects by default; it cannot know your legal
entity, your jurisdiction, your retention periods or your regulator.

Last updated: [DATE]. This policy explains how [YOUR LEGAL ENTITY NAME]
("we") collects, uses and protects your personal information when you use
our website and mobile application.

Information we collect

• Account information — your name, email address and,
  if you provide one, your phone number. Required to create and operate
  your account.


• Identity verification (KYC) — where verification is
  required, we collect identity document images (for example a passport,
  driver's licence, national identity card or residence permit), a
  photograph of you holding that document, and the identity details on it.
  This is collected to meet anti-money-laundering obligations.


• Financial information — your balances, deposits,
  withdrawals, orders and transaction history, and the destination
  addresses or bank details you supply for withdrawals.


• Content you create — support tickets and messages,
  peer-to-peer trade chat, dispute evidence you upload, and reports you
  submit about other users' content.


• Technical information — your IP address, device and
  browser information, and a device token if you enable push
  notifications.

We do not use advertising, analytics or crash-reporting services in our
mobile application, and we do not track you across other companies' apps or
websites.

How we use it

To operate your account and provide the service; to verify your identity
and meet our legal and regulatory obligations; to detect and prevent fraud
and abuse; to answer your support requests; and to send you service
messages about your account and transactions.

Who we share it with

• Payment processors. If you pay by card, your card
  details are entered into the payment provider's own interface and go
  directly to them — we never receive or store your card number.


• Other users. In peer-to-peer trading, the payment
  details you publish on an offer and the messages you send in a trade are
  visible to your counterparty.


• Authorities and regulators, where we are legally
  required to disclose.


• Service providers acting on our instructions —
  [LIST YOUR HOSTING, EMAIL, SMS AND OTHER PROCESSORS].

We do not sell your personal information.

Deleting your account

You can delete your account from the app or the website, or by
contacting us at [YOUR PRIVACY CONTACT EMAIL]. Deletion anonymises your
record immediately: your email address is replaced with a placeholder and
released, and your password, phone number, username, avatar, wallet address
and profile details are removed.

Some records are kept. Transaction and order history,
identity-verification documents and the details taken from them, and
support tickets and their messages are retained after deletion, because
financial and anti-money-laundering rules require us to keep them for
[YOUR RETENTION PERIOD]. We keep them for that purpose only.

Security

Data is encrypted in transit. Identity documents are stored privately
and are not published at a publicly reachable address. Access to them is
limited to staff who need it for verification or dispute handling.

Your rights

Depending on where you live you may have the right to access, correct,
export or delete your personal information, to object to or restrict
certain processing, and to complain to a supervisory authority. To exercise
any of these, contact [YOUR PRIVACY CONTACT EMAIL].

Children

This service is not directed at anyone under [MINIMUM AGE], and we do
not knowingly collect their information.

Changes

We will post any changes to this policy on this page and update the date
above. Material changes will be notified to you directly.

Contact

[YOUR LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Privacy enquiries:
[YOUR PRIVACY CONTACT EMAIL].