Legal
Privacy notice
What we collect, why we hold it, and how identity documents are stored.
What we collect
Account details (name, email), the information given during onboarding (contact details, employment, source of funds), the identity documents you upload, and a record of every transaction on your balance.
How documents are stored
Identity documents are written to a private disk outside the web root. They are never served as static files and are not reachable by URL guessing. The only path to them is an authenticated route restricted to compliance reviewers, and each file is replaced rather than duplicated when you resubmit.
Third parties
Market prices and headlines are fetched by our servers from public data providers. Those requests carry no information about you — your browser never contacts them directly, which is also why our API keys never reach the page.
Retention
Ledger entries are kept for as long as we are required to keep financial records. Identity documents are kept for the life of the account and for the retention period our obligations require after closure.
Your requests
You can ask for a copy of your data, a correction, or deletion where we are not required to retain it. Requests are handled from the account settings page or by contacting support.