Privacy Policy

1. Introduction

VoltexDeFi ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, trading platform, mobile applications, and APIs (collectively, the "Platform").

2. Information we collect

2.1 Personal information

We collect personal information you provide directly, including:

• Identity information: Full name, date of birth, nationality, and government-issued identification (for KYC verification)
• Contact information: Email address, phone number, mailing address
• Financial information: Bank or payment details used for fiat deposits and withdrawals, and source-of-funds information where required
• Trading and wallet information: Transaction history, order activity, and the blockchain wallet addresses you use to deposit or withdraw Digital Assets
• Verification documents: Passport, national ID, proof of address, and selfie/liveness checks used for identity verification

2.2 Automatically collected information

When you use the Platform, we automatically collect:

• IP address and approximate geographic location
• Browser and device information, including operating system
• Pages visited, features used, and session duration
• API request logs and authentication events
• Cookies and similar tracking technologies (see Section 6)

2.3 Information from third parties

We may receive information about you from:

• Identity verification and KYC service providers
• Sanctions and watch-list screening providers
• Payment processors and banking partners
• Public blockchain data associated with wallet addresses you use with us
• Regulatory and law-enforcement databases, where legally permitted

3. How we use your information

3.1 Providing the service

• Operating your trading account and processing orders
• Processing fiat and Digital Asset deposits and withdrawals
• Providing customer support and responding to inquiries
• Generating account statements and portfolio reporting

3.2 Legal and regulatory compliance

• Identity verification (KYC) and ongoing due diligence
• Anti-money-laundering (AML) and sanctions screening
• Transaction monitoring for suspicious activity
• Regulatory and tax reporting where required

3.3 Security and platform integrity

• Fraud detection and account-takeover prevention
• Monitoring for market abuse and manipulation
• Maintaining the security and availability of the Platform

3.4 Product and communications

• Improving the Platform through analytics and testing
• Sending account, security, and transaction notices
• Sending product or promotional communications, where you've consented

4. Information sharing and disclosure

We do not sell your personal information. We may share it in the following circumstances:

4.1 Service providers

• Identity verification and KYC/AML vendors
• Custody and wallet infrastructure providers
• Payment processors and banking partners
• Cloud hosting, analytics, and customer-support tooling providers

4.2 Legal requirements

We may disclose your information where required by law, to comply with a valid legal process, to enforce these Terms, or to protect the rights, property, or safety of VoltexDeFi, our users, or others — including in connection with AML, sanctions, and Travel Rule obligations for qualifying transfers.

4.3 Business transfers

If VoltexDeFi is involved in a merger, acquisition, or asset sale, your information may be transferred to the acquiring entity, subject to equivalent privacy protections.

4.4 With your consent

We may share information with your explicit consent or at your direction — for example, when you connect a third-party service to your account.

5. Data security

5.1 Technical safeguards

• TLS encryption for data in transit and encryption at rest for sensitive data
• Multi-party computation and hardware security modules for private key protection
• Mandatory multi-factor authentication for account access
• Independent penetration testing and continuous security monitoring

5.2 Administrative and physical safeguards

• Least-privilege access controls and employee background checks
• Security awareness training and incident-response procedures
• Physically secured data centers and access logging

6. Cookies and tracking technologies

We use essential cookies required for the Platform to function, along with performance and functional cookies that help us understand usage and remember your preferences. Where required by law, marketing cookies are used only with your consent. You can control cookies through your browser settings, though disabling essential cookies may affect Platform functionality.

7. Your rights and choices

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your information, subject to our regulatory record-keeping obligations
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent for optional processing, such as marketing communications

You can exercise most of these rights directly from your account settings, or by contacting us using the details in Section 13.

8. Data retention

• Active accounts: For as long as your account remains open and active
• Closed accounts and transaction records: Retained for a minimum period (commonly 5–7 years) as required by AML and financial recordkeeping regulations
• Marketing preferences: Until you opt out or request deletion
• Legal proceedings: Until resolution, including any applicable appeal period

We may retain certain information longer where required by law or for legitimate purposes such as fraud prevention.

9. International data transfers

Because VoltexDeFi operates globally, your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses, adequacy decisions, or your explicit consent for the specific transfer.

10. Children's privacy

The Platform is not intended for individuals under 18 years of age, and we do not knowingly collect personal information from anyone under 18. If we learn we have inadvertently done so, we will delete that information promptly. Parents or guardians who believe a minor has provided us with personal information should contact us immediately.

11. Regional privacy rights

If you are located in the European Economic Area, United Kingdom, or a jurisdiction with similar data protection law, you may have additional rights under applicable regulation (such as the GDPR), including the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to non-discrimination for exercising these rights. We do not sell personal information.

12. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. We will post the updated policy, update the "Last updated" date, and notify you of material changes. We encourage you to review this policy periodically.

13. Contact information

We will respond to privacy requests within 30 days of receipt.