Privacy Policy

1. Who We Are

The Platform is operated by:

For privacy-related questions, requests, or complaints, you may contact us at:

2. Data Controller

For the purposes of applicable data protection laws, EtheraFX Digital Exchange & AI LLC is the controller of personal data processed in connection with your use of the Platform, unless we expressly state otherwise.

In some cases, third-party service providers, banks, payment processors, custodians, identity verification providers, analytics providers, liquidity providers, or regulatory bodies may process your personal data as independent controllers or processors according to their own legal obligations and privacy policies.

3. Personal Data We Collect

We may collect and process the following categories of personal data.

3.1 Account and Identification Data

This may include:

• full name;
• date of birth;
• nationality;
• country of residence;
• residential address;
• email address;
• phone number;
• username or account ID;
• password hash and authentication data;
• language preference;
• account status;
• account type;
• client classification;
• registration date and account history.

3.2 KYC, AML, and Verification Data

To comply with Know Your Customer ("KYC"), Anti-Money Laundering ("AML"), sanctions screening, fraud prevention, and regulatory obligations, we may collect:

• identity document details;
• passport, ID card, residence permit, or driving license images;
• proof of address documents;
• selfie, liveness check, or biometric verification data where permitted by law;
• source of funds information;
• source of wealth information;
• employment or business information;
• tax residency information;
• politically exposed person ("PEP") status;
• sanctions, adverse media, and watchlist screening results;
• enhanced due diligence information;
• risk classification records.

3.3 Financial, Trading, and Transaction Data

This may include:

• deposit and withdrawal records;
• bank account details where applicable;
• payment method information;
• card or payment processor references;
• wallet addresses;
• blockchain transaction hashes;
• fiat and crypto balances;
• trading orders;
• order history;
• open and closed positions;
• margin and collateral information;
• profit and loss records;
• fees, commissions, spreads, and charges;
• account statements;
• transaction confirmations;
• internal ledger records;
• referral, rebate, reward, or promotional records.

3.4 Technical, Device, and Security Data

When you use the Platform, we may collect:

• IP address;
• device type;
• browser type and version;
• operating system;
• screen resolution;
• language settings;
• login timestamps;
• session identifiers;
• cookie identifiers;
• device identifiers;
• approximate location derived from IP address;
• security logs;
• authentication events;
• failed login attempts;
• API keys and API usage logs;
• fraud prevention signals;
• crash logs and diagnostic data.

3.5 Communication and Support Data

When you contact us or interact with our support systems, we may process:

• support tickets;
• chat messages;
• email correspondence;
• call records or call notes where applicable;
• complaints;
• feedback;
• documents or screenshots you submit;
• internal notes required to resolve your request.

3.6 Marketing and Preference Data

Where permitted by law, we may process:

• marketing preferences;
• newsletter subscription status;
• campaign engagement;
• referral campaign participation;
• cookie preferences;
• notification preferences;
• consent records;
• opt-in and opt-out history.

3.7 Public Blockchain Data

Where digital asset services are used, blockchain transactions may involve public wallet addresses, transaction hashes, timestamps, token amounts, network fees, and other information recorded on public blockchains.

Public blockchain data may be permanent, transparent, and outside EtheraFX's exclusive control.

4. How We Collect Personal Data

We may collect personal data from:

• you directly when you register, verify your identity, trade, deposit, withdraw, or contact support;
• your use of the Platform, including cookies, logs, and technical systems;
• payment processors, banks, custodians, wallet providers, or blockchain networks;
• identity verification and KYC/AML providers;
• sanctions, PEP, adverse media, and fraud prevention databases;
• liquidity providers, market venues, or trading infrastructure providers;
• public sources where legally permitted;
• regulators, courts, law enforcement, tax authorities, or dispute bodies;
• affiliates, service providers, and business partners.

5. Why We Use Your Personal Data

We process personal data for the following purposes.

5.1 Account Opening and Platform Access

We use personal data to:

• create and manage your account;
• authenticate you;
• provide dashboard access;
• maintain your profile;
• enable language and theme preferences;
• manage account security;
• communicate account-related notices.

5.2 KYC, AML, Sanctions, and Compliance

We use personal data to:

• verify your identity;
• conduct KYC and AML checks;
• screen sanctions, PEP, and adverse media databases;
• assess risk level;
• comply with financial crime laws;
• monitor transactions;
• detect suspicious activity;
• respond to regulators and competent authorities;
• maintain records required by law.

5.3 Deposits, Withdrawals, Wallets, and Custody

We use personal data to:

• process deposits and withdrawals;
• verify payment methods;
• manage fiat and digital asset balances;
• identify wallet ownership where required;
• perform blockchain transaction checks;
• apply withdrawal limits;
• prevent fraud and unauthorized transfers;
• reconcile internal and third-party records.

5.4 Trading and Market Services

We use personal data to:

• process orders;
• record trades;
• calculate fees and balances;
• monitor margin, collateral, and liquidation risk;
• maintain trading history;
• provide account statements;
• manage risk controls;
• comply with regulatory reporting obligations.

5.5 Security and Fraud Prevention

We use personal data to:

• detect unauthorized access;
• prevent account takeover;
• investigate suspicious logins;
• monitor abuse, bots, scraping, and malicious activity;
• enforce rate limits and security controls;
• protect users, EtheraFX, and third parties.

5.6 Customer Support and Complaints

We use personal data to:

• respond to support requests;
• investigate complaints;
• verify account ownership;
• resolve technical issues;
• provide notices and updates;
• maintain complaint records.

5.7 Legal Claims and Risk Management

We may process personal data to:

• enforce our Terms and Conditions;
• investigate disputes;
• protect legal rights;
• respond to legal requests;
• defend or bring legal claims;
• audit platform activity;
• manage operational, regulatory, and reputational risk.

5.8 Marketing and Service Updates

Where permitted by law, we may use personal data to:

• send service updates;
• send product announcements;
• send educational or promotional content;
• measure campaign performance;
• personalize non-sensitive platform messages;
• manage opt-in and opt-out preferences.

You may opt out of marketing communications at any time. Important service, security, legal, or transaction-related messages may still be sent even if you opt out of marketing.

5.9 Analytics and Platform Improvement

We may use personal data and aggregated data to:

• understand platform usage;
• improve user experience;
• test features;
• fix bugs;
• monitor performance;
• improve security;
• develop new tools and services.

6. Legal Bases for Processing

Where GDPR, UK GDPR, or similar data protection laws apply, we rely on one or more of the following legal bases:

6.1 Performance of a Contract

We process data where necessary to provide the Platform, open and maintain your account, process transactions, provide trading services, manage wallets, and perform our Terms and Conditions.

6.2 Legal Obligation

We process data where necessary to comply with laws and regulations, including KYC, AML, sanctions, tax, accounting, regulatory reporting, fraud prevention, and record-keeping obligations.

6.3 Legitimate Interests

We process data where necessary for our legitimate interests, including security, fraud prevention, platform improvement, dispute handling, risk management, business continuity, service analytics, and protection of legal rights, provided those interests are not overridden by your rights and freedoms.

6.4 Consent

We may rely on consent for certain cookies, marketing communications, optional analytics, biometric verification where required by law, or other processing activities where consent is legally required.

You may withdraw consent at any time, but withdrawal does not affect processing carried out before withdrawal.

6.5 Legal Claims and Public Interest

Where applicable, we may process data where necessary for legal claims, regulatory obligations, substantial public interest, prevention of financial crime, or cooperation with competent authorities.

7. Cookies and Similar Technologies

We use cookies, local storage, pixels, tags, and similar technologies to operate and improve the Platform.

These technologies may be used for:

• essential login and security functions;
• session management;
• fraud prevention;
• language and theme preferences;
• analytics and performance measurement;
• marketing attribution where permitted;
• remembering cookie choices.

Some cookies are essential and cannot be disabled without affecting Platform functionality. Non-essential cookies may require your consent depending on applicable law.

You can manage cookies through your browser settings or any cookie preference tool made available on the Platform.

For more details, please review our Cookie Policy.

8. Who We Share Personal Data With

We may share personal data with the following categories of recipients where necessary and legally permitted:

• banks and payment processors;
• card processors and payment gateways;
• digital asset custodians and wallet infrastructure providers;
• blockchain analytics providers;
• KYC, AML, sanctions, and identity verification providers;
• liquidity providers, exchanges, brokers, and market infrastructure providers;
• cloud hosting, storage, and cybersecurity providers;
• analytics and monitoring providers;
• customer support and communication tools;
• auditors, accountants, legal advisers, and consultants;
• regulators, courts, tax authorities, law enforcement, dispute bodies, and government agencies;
• affiliates, group companies, successors, or business transfer parties;
• third parties where you request or authorize sharing.

We do not sell your personal data.

9. International Transfers

Because EtheraFX operates a digital financial platform, your personal data may be processed in countries other than your country of residence.

Where personal data is transferred internationally, we will use safeguards required by applicable law, which may include:

• adequacy decisions;
• standard contractual clauses;
• data processing agreements;
• security controls;
• transfer risk assessments;
• regulatory or legal transfer mechanisms.

You acknowledge that banks, payment processors, custodians, blockchain networks, market infrastructure providers, cloud providers, and compliance vendors may process data in multiple jurisdictions.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, regulatory, tax, accounting, AML, dispute, security, and operational requirements.

Retention periods may vary depending on:

• account status;
• type of data;
• regulatory obligations;
• AML/KYC record-keeping requirements;
• transaction history;
• open disputes or investigations;
• legal claims;
• security requirements.

After retention periods expire, we will delete, anonymize, or securely archive personal data unless continued retention is legally required or permitted.

Due to financial services, AML, tax, fraud prevention, and regulatory obligations, some account, identity, verification, transaction, and compliance records may need to be retained after account closure.

11. Security of Personal Data

We use technical, organizational, and administrative measures designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include:

• encryption where appropriate;
• access controls;
• password hashing;
• two-factor authentication where available;
• network monitoring;
• audit logs;
• fraud detection;
• vulnerability management;
• secure storage procedures;
• staff access restrictions;
• incident response processes.

No system can be guaranteed to be completely secure. You are responsible for keeping your login credentials, devices, email account, and authentication tools secure.

12. Your Data Protection Rights

Depending on your location and applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability;
• withdraw consent where processing is based on consent;
• object to direct marketing;
• lodge a complaint with a data protection authority.

These rights may be limited where we must retain or process data for legal, regulatory, AML, sanctions, fraud prevention, tax, accounting, security, dispute, or legal claim purposes.

To exercise your rights, contact:

We may need to verify your identity before responding to a request.

13. Automated Decision-Making and Risk Systems

We may use automated or semi-automated systems to support:

• identity verification;
• sanctions and watchlist screening;
• fraud detection;
• risk scoring;
• account security;
• transaction monitoring;
• market abuse detection;
• withdrawal risk checks;
• suspicious activity alerts.

These systems may help us decide whether to approve, reject, delay, restrict, or manually review certain account actions.

Where legally required, you may request human review of significant decisions that affect you.

14. Marketing Choices

We may send marketing communications only where permitted by law.

You can opt out of marketing emails by using the unsubscribe link in the email or by contacting us.

Even if you opt out of marketing, we may still send:

• security alerts;
• account notices;
• transaction confirmations;
• legal notices;
• service updates;
• regulatory notices;
• support responses.

15. Children and Minors

The Platform is not intended for children.

You must be at least 18 years old or the age of legal majority in your jurisdiction to use EtheraFX.

We do not knowingly collect personal data from children. If we become aware that a child has provided personal data, we may delete the data and close the account.

16. Blockchain and Digital Asset Data

Digital asset transactions may be recorded on public blockchains. Public blockchain records may include wallet addresses, transaction hashes, timestamps, token amounts, and network information.

Blockchain records are generally public, permanent, and difficult or impossible to delete or alter.

EtheraFX does not control public blockchain networks and cannot guarantee deletion or modification of blockchain data once a transaction is broadcast or confirmed.

17. Third-Party Links and Services

The Platform may contain links to third-party websites, tools, payment providers, wallet services, exchanges, analytics providers, or other external services.

This Privacy Policy does not apply to third-party websites or services.

You should review the privacy policies of any third-party services you use.

18. Regulatory, Legal, and Law Enforcement Requests

We may disclose personal data to regulators, courts, law enforcement, tax authorities, dispute resolution bodies, or other competent authorities where required or permitted by law.

We may also preserve, restrict, or disclose information where necessary to:

• comply with legal obligations;
• respond to lawful requests;
• prevent financial crime;
• protect users and third parties;
• enforce our Terms and Conditions;
• investigate fraud, security incidents, or market abuse;
• protect our rights, property, and operations.

19. Business Transfers

If EtheraFX is involved in a merger, acquisition, restructuring, sale of assets, financing, insolvency procedure, regulatory transfer, or business reorganization, personal data may be transferred as part of that transaction, subject to applicable law and confidentiality protections.

20. Accuracy of Your Information

You must ensure that the personal data you provide is accurate, complete, and up to date.

You must promptly update your information if your name, address, phone number, email, tax residency, source of funds, payment method, wallet details, or other relevant information changes.

Providing false, misleading, outdated, incomplete, or unauthorized information may result in account restriction, transaction delays, account closure, or regulatory reporting.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be posted on the Platform with a revised "Last updated" date. Where required by law, we may provide additional notice.

Your continued use of the Platform after the updated Privacy Policy becomes effective means you acknowledge the updated policy.

22. Contact Us

For questions, requests, or complaints about this Privacy Policy or the processing of personal data, contact: