Privacy Policy
At xintrestwave, we value your trust and are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information.
1. Definitions
Personal Data: Information that identifies you, such as name, email, government ID.
Usage Data: Information about how you interact with our platform, including device information and transaction logs.
Service Providers: Third parties who perform services on our behalf (e.g., KYC/AML vendors, analytics providers).
2. Information We Collect
Account Information: Name, email, phone number, address, government-issued ID, and date of birth collected during signup and verification.
Wallet & Transaction Data: Public wallet addresses, transaction history, and on-chain data to manage and track your portfolio.
Usage & Technical Data: IP address, browser type/version, device identifiers, pages visited, referral URLs, and session duration.
Communications Data: Correspondence between you and our support or marketing teams, survey responses, and feedback.
3. Legal Basis for Processing We process your data under the following legal bases:
Consent: When you agree to receive marketing communications or opt into features.
Contractual Necessity: To provide our services, manage accounts, and process transactions.
Legal Compliance: To comply with applicable laws, including AML/KYC and tax regulations.
Legitimate Interests: To improve platform security, analyze usage trends, and enhance user experience.
4. How We Use Your Information
Service Delivery: Account creation, identity verification, transaction processing, portfolio management, and real-time analytics.
Security & Risk Management: Fraud detection, account protection, compliance with legal obligations, and security audits.
Communications: Service notifications, billing statements, security alerts, and marketing messages (with opt-out).
Product Improvement: Research, analytics, A/B testing, and feature development based on aggregated usage data.
5. Information Sharing and Disclosure
With Service Providers: We share data with KYC/AML providers, custodial wallets, hosting, and analytics partners under strict confidentiality agreements.
Legal Authorities: When required by subpoena, court order, or to comply with applicable laws and regulations.
Business Transfers: In the event of a merger, acquisition, or sale, user data may be transferred to the acquiring entity under the same privacy commitments.
6. Data Retention We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal, accounting, or reporting requirements. Usage data is retained for up to 5 years, unless otherwise required by law.
7. Cookies and Tracking Technologies We use cookies, web beacons, and similar technologies to:
Enable essential site functionality.
Analyze website usage and enhance performance.
Personalize your experience and provide targeted content. You can manage or disable cookies via your browser settings, but this may affect platform functionality.
8. Your Rights and Choices Subject to applicable law, you may:
Access & Portability: Request a copy of your personal data in a structured format.
Correction: Rectify inaccuracies in your data via your account settings or by contacting us.
Deletion: Request erasure of personal data, except where retention is required by law.
Objection: Object to processing based on legitimate interests or marketing communications.
Restrict Processing: Request limitation of data use under certain conditions.
Withdraw Consent: At any time for marketing or optional data processing.
9. Data Security We implement industry-standard measures, including:
Encryption of data at rest and in transit (AES-256, TLS 1.2+).
Multi-factor authentication (MFA) for account access.
Regular security audits and penetration testing by certified third parties.
Role-based access controls and strict internal policies.
10. International Data Transfers If you are outside our primary operating regions, your information may be transferred to countries with different data protection laws. We ensure adequate safeguards through standard contractual clauses or equivalent measures.
11. Children’s Privacy Our services are intended for individuals aged 18 or older. We do not knowingly collect personal data from minors. If we become aware of such data, we will promptly delete it.
12. Changes to This Policy We may update this policy periodically. We will notify you of material changes via email or in-app notification, and the updated policy will indicate the date of revision.