Privacy Policy

1. Introduction

At FiatXPay, your privacy is of paramount importance to us. This Privacy Policy describes how we collect, use, process, and protect your personal information when you use our website, mobile interface, APIs, and trading Services.

2. Information We Collect

We collect information to provide, improve, and secure our Services. This includes:

• Account Registration Information: Your name, email address, phone number, and password when you register.
• Identity Verification Details (KYC): Government-issued identification documents, proof of address, tax identification numbers, and selfie verification photos required under our AML Policy.
• Transaction Information: Details of your buy/sell/swap orders, deposit wallet addresses, bank account numbers, routing codes, or mobile money registration details.
• Technical Data: IP address, device type, browser settings, operating system, and cookie data (refer to our Cookie Policy).

3. How We Use Your Information

We process personal data based on contractual performance, compliance with legal obligations, and our legitimate business interests, including:

• Executing and managing conversion/swap orders.
• Verifying user identities to prevent fraud, money laundering, or illegal usage.
• Communicating order status, safety warnings, and administrative notices.
• Diagnosing system problems, improving software design, and enhancing security.

4. Data Sharing and Disclosures

We do not sell your personal data to third parties. We may share information under the following limited conditions:

• Service Providers: With trusted identity-verification vendors (KYC providers), databases, or banking/payout networks solely to process your transaction or confirm your identity.
• Legal Compliance: When required by binding law, regulation, subpoena, or request from financial regulatory bodies or law enforcement agencies.
• Corporate Changes: In connection with any merger, sale of corporate assets, consolidation, or acquisition of all or a portion of our business.

5. Security of Your Personal Data

We implement industry-standard administrative, physical, and technical safeguards (including HTTPS encryption, access control layers, database salting/hashing, and regular system audits) to protect your information against unauthorized access, loss, alteration, or exposure.

Note: Despite these measures, no data transmission over the Internet can be guaranteed 100% secure. You are responsible for keeping your login credentials confidential.

6. Data Retention

We retain personal information for as long as is necessary to provide Services, resolve disputes, and comply with applicable anti-money laundering regulations. Under compliance legislation, transaction records and identification details must generally be retained for a minimum of 5 years following the closure of an account or final execution of a transaction.

7. Your Rights (including GDPR / CCPA)

Depending on your country of residence, you may have legal rights regarding your personal information, including:

• Access: The right to request copies of your personal data.
• Correction: The right to request correction of inaccurate or incomplete data.
• Erasure ("Right to be Forgotten"): The right to request data deletion, subject to overriding statutory record-keeping obligations (e.g. anti-money laundering records).
• Portability: The right to request data extraction in a machine-readable format.

To exercise any of these rights, please submit a request to our compliance team at [email protected].

8. Policy Updates

We may revise this Privacy Policy from time to time. Any changes will be posted on this page with the updated "Last Updated" date. We encourage you to review this policy periodically.