Introduction
CryptoExchange Pro is committed to protecting your privacy. We understand that your personal and financial data is sensitive, and we take our responsibility seriously. This Privacy Policy applies to all users of our Platform, regardless of location, and explains:
- What information we collect and why.
- How we use your information.
- Who we share your information with.
- How we protect and store your data.
- What rights you have over your information.
By accessing or using CryptoExchange Pro, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Platform.
Data We Collect
We collect several types of information to provide and improve our services. The data we collect can be grouped into the following categories:
Identity Data
Name, username, date of birth, government ID, selfie, and country of residence for KYC compliance.
Contact Data
Email address, phone number, city, and full address for communication and verification.
Financial Data
Transaction history, balances, deposit/withdrawal records, and trading activity.
Technical Data
IP address, browser type, device information, operating system, and login timestamps.
We may also collect information through cookies and similar tracking technologies, as described in Section 05. For P2P Agents, we additionally collect identity documents, proof of address, and bank statements to verify eligibility.
How We Use Your Data
We use the information we collect for the following purposes:
- To provide our services: Processing trades, deposits, withdrawals, and P2P transactions.
- To verify identity: Complying with KYC (Know Your Customer) and AML (Anti-Money Laundering) regulations.
- To secure your account: Detecting and preventing fraud, unauthorized access, and suspicious activity.
- To improve our Platform: Analyzing usage patterns to enhance features and user experience.
- To communicate with you: Sending transactional emails, security alerts, and support responses.
- To comply with the law: Meeting legal obligations and responding to lawful requests from authorities.
Sharing Your Information
We may share your information with the following categories of third parties, strictly for the purposes outlined in this policy:
| Recipient | Purpose | Data Shared |
|---|---|---|
| Payment Providers | Processing deposits and withdrawals | Name, phone, transaction amount |
| KYC/AML Partners | Identity verification | ID documents, selfie, address |
| Law Enforcement | Legal compliance | Account data upon lawful request |
| P2P Agents | Facilitating withdrawals | Phone number, amount, payment method |
| Cloud Providers | Data storage & hosting | Encrypted data at rest |
All third parties are contractually bound to protect your data and may only use it for the specific purposes we specify. We do not authorize any third party to use your personal information for their own marketing purposes.
Cookies & Tracking Technologies
We use cookies and similar technologies to enhance your experience on our Platform. Cookies are small text files stored on your device that help us:
- Keep you signed in: Essential session cookies allow you to stay logged in.
- Remember preferences: Storing your language, currency, and display settings.
- Analyze usage: Understanding how users interact with the Platform to improve it.
- Ensure security: Detecting suspicious activity and preventing fraud.
You can manage cookie preferences in your browser settings. Note that disabling essential cookies may prevent you from using certain features of the Platform.
Data Security
We take the security of your data very seriously. CryptoExchange Pro implements industry-leading security measures to protect your personal information:
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
- Two-Factor Authentication (2FA): Strongly encouraged for all accounts and required for withdrawals.
- Cold Storage: The majority of crypto funds are stored in offline, multi-signature cold wallets.
- Access Controls: Strict internal access policies ensure only authorized personnel can view sensitive data.
- Regular Audits: Independent security audits and penetration tests conducted by third parties.
- Monitoring: 24/7 monitoring for suspicious activity and unauthorized access attempts.
Data Retention
We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, and to comply with legal and regulatory requirements. Specifically:
- Account data: Retained while your account is active, plus 5 years after closure (regulatory requirement).
- Transaction records: Retained for 7 years as required by financial regulations.
- KYC documents: Retained for 5 years after the end of our business relationship.
- Marketing data: Retained until you opt out or withdraw consent.
- Technical logs: Retained for 12 months for security purposes.
After the applicable retention period, your data is securely deleted or anonymized so that it can no longer be associated with you.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Correct any inaccurate or incomplete information.
Right to Erasure
Request deletion of your data (subject to legal retention).
Right to Object
Object to certain processing of your data.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Withdraw Consent
Withdraw consent for data processing at any time.
To exercise any of these rights, please contact us at privacy@cryptoprox.com. We will respond to your request within 30 days.
International Data Transfers
CryptoExchange Pro operates globally, and your data may be transferred to, stored, and processed in countries outside your country of residence. This includes the United States, where our servers are located, and other jurisdictions where our service providers operate.
When we transfer your data internationally, we ensure that appropriate safeguards are in place to protect your information, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Data Processing Agreements (DPAs) with all third-party service providers.
- Compliance with applicable data protection laws such as GDPR and CCPA.
Children's Privacy
CryptoExchange Pro is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18 without verified parental consent, we will take steps to delete that information as quickly as possible.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@cryptoprox.com so we can take appropriate action.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
- Post the updated policy on this page.
- Update the "Last updated" date at the top.
- Notify you via email or in-app notification at least 14 days before the changes take effect.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:
| Privacy Team | privacy@cryptoprox.com |
| Data Protection Officer | dpo@cryptoprox.com |
| Support | support@cryptoprox.com |
| Phone | +1 (828) 555-1234 |
| Address | 75 Haywood St, Asheville, NC 28801, USA |
For more information about your rights or to file a complaint, you can also visit our Help Center or read our Terms of Service.