Privacy Policy

Crypthax Financial Technologies, Inc. is the data controller for personal data processed through the Service. Contact us at support@crypthax.com.

Account data: first and last name, email address, hashed password, and any optional profile or social details you choose to provide.

Transaction data: orders, amounts, target currency, payout destination details, top-ups, fees and ledger movements.

Technical data: IP address, user agent, browser, operating system, device class, approximate country and timestamps recorded at signup and on each sign-in.

Support data: the content of messages you send us and any attachments.

To provide the Service and execute your orders; to meet legal obligations under anti-money-laundering and sanctions law; to detect and prevent fraud and abuse; to secure accounts; and to communicate service and status updates.

Where we rely on legitimate interests, we balance those interests against your rights and you may object at any time.

Paymento and other payment processors engaged to accept crypto and deliver fiat payouts; banking partners in the relevant corridor; identity verification and sanctions screening providers; cloud hosting and email delivery providers; and professional advisers.

We disclose data to authorities where we are legally required to do so. We never sell personal data.

Transaction and identity records are retained for five years after the end of the relationship, as required by anti-money-laundering rules. Account and technical data are kept while your account is open and for up to two years afterwards.

Support correspondence is retained for three years. Data no longer required is deleted or irreversibly anonymised.

You may request access, rectification, erasure, restriction, portability, or object to processing. You may also lodge a complaint with your local supervisory authority.

Some rights are limited by our record-keeping obligations; where we cannot comply we will explain why in writing.

We use TLS 1.3 in transit, encryption at rest for payout details, bcrypt password hashing, signed httpOnly sessions, access controls and append-only audit logging. See our Security page for the full description.

Where data leaves the European Economic Area we rely on adequacy decisions or Standard Contractual Clauses with supplementary technical measures.

We set a strictly necessary session cookie and a locale preference cookie. See our Cookie Policy for the full list and how to control them.