文件内容
- 01谁处理您的数据
- 02指导其余部分的原则：不收集
- 03目的和法律依据
- 04保留期限和接收方
- 05处理者和合作伙伴
- 06向欧盟以外的传输
- 07您的权利及其实际限制
- 08如何行使您的权利
- 09自动化决策
- 10数据安全
- 11Cookie和跟踪器
- 12未成年人
- 13本政策的变更
谁处理您的数据
转换平台离不开身份数据：反洗钱规则要求从兑换第一欧元起就必须提供。因此，诚实的问题不是“您是否收集数据”，而是收集哪些数据、为什么收集、收集多久，以及还有谁会看到这些数据。
The controlling entity is being incorporated. Its legal name, legal form and registered address will be published on the legal notice page as soon as they are verifiable. In the meantime, the contact address below is the single entry point for any request about your data, and it is already live.
截至目前，尚未任命数据保护官。将来会任命吗？会：在受监管的环境中大规模处理身份数据使得任命成为必要。在该任命生效之前，我们不会假装已经任命，请求将通过以下地址处理。
隐私联系点
使用此地址行使您的权利、询问处理活动或对自动决策提出异议。您最迟将在30天内收到答复。
[email protected]指导其余部分的原则：不收集
收集的每一条数据都是需要保护、保留、在适当时间删除并在请求时返还的数据。产品的构建旨在尽可能少地要求，尽可能晚地要求。
- 报价是公开的：您无需账户和电子邮件地址即可获得包含费用明细的净额。
- 身份验证在强制要求的层级才要求，而不是在注册时。
- 不设置广告跟踪器，不出售或共享浏览数据用于商业目的。
- 银行详细信息已加密并从应用程序日志中剥离：它们永远不会以明文形式出现在日志行中。
目的和法律依据
每项处理活动都基于明确的法律依据。这不仅仅是形式：依据决定了您拥有哪些权利。根据法律义务处理的数据在强制期限届满前不能应请求删除；根据我们的合法利益处理的数据可以基于合理理由提出异议。
| Purpose | Data involved | Legal basis |
|---|---|---|
| Compute a quote and display the fee breakdown | Chosen asset, amount, country and rail. No identifying data is required at this stage. | Legitimate interest — Article 6(1)(f) — Interest in showing a price before sign-up, which avoids collecting data from a visitor who will not go further. |
| Create and secure your account | Email address, phone number, password hash, second-factor keys, sign-in log and associated IP addresses. | Performance of the contract — Article 6(1)(b) — Without an authenticated account, no order can be tracked and no payout issued. |
| Verify your identity and meet due-diligence obligations | Names, date and place of birth, nationality, address, identity document image, liveness video capture, source-of-funds evidence, results of sanctions and politically exposed person screening. | Legal obligation — Article 6(1)(c) — Customer due-diligence obligations imposed on digital asset service providers. This data cannot be erased on request while the statutory period runs. |
| Execute the order and issue the payout | Assigned deposit address, transaction hashes, amounts, beneficiary details (IBAN, PIX key, mobile money number), status of each step. | Performance of the contract — Article 6(1)(b) — Beneficiary details are the material condition of payment: without them, the money has nowhere to go. |
| Monitor transactions and detect suspicious patterns | Order history, deposit address risk analytics, triggered alerts, analyst notes, reports filed. | Legal obligation — Article 6(1)(c) — Ongoing monitoring is a standalone obligation, separate from initial identity verification. |
| Answer your requests and handle your complaints | Message content, attachments, related order reference, exchange history. | Performance of the contract — Article 6(1)(b) — Handling a complaint is part of the service. The case is tracked to allow escalation. |
| Prevent fraud and technical abuse | IP address, device fingerprint, security events, rate limiting, failed authentication attempts. | Legitimate interest — Article 6(1)(f) — Interest in protecting customer accounts and funds from takeover and malicious automation. |
| Measure site audience | Page views, referrer, device type. No data is collected under this activity today: the category is declared but inactive. | Consent — Article 6(1)(a) — This processing will only start after explicit consent collected through the cookie panel, never before. |
保留期限和接收方
我们不会“默认”保留任何内容。每个类别都有期限、删除触发条件和到期自动清除。
| Purpose | Retention | Recipients | Transfer outside the EU |
|---|---|---|---|
| Compute a quote and display the fee breakdown | The quote is kept for 30 days in technical form to reconstruct a pricing dispute, then deleted. | Nobody outside the engineering team. | No |
| Create and secure your account | For the life of the account, then 12 months after closure to handle a late dispute. Sign-in logs are kept for 12 months. | Our hosting provider, our transactional email operator and our SMS operator. | No |
| Verify your identity and meet due-diligence obligations | Five years from the end of the business relationship, as required by anti-money-laundering rules. After that period, automatic deletion. | The identity verification provider, sanctions list vendors, and, upon formal request, the competent authorities. | Yes |
| Execute the order and issue the payout | Ten years, the accounting record retention period. Bank details are encrypted and stripped from application logs. | The payment institution executing the transfer on the chosen rail, and it alone. | Yes |
| Monitor transactions and detect suspicious patterns | Five years from the transaction or the closure of the alert. A suspicious activity report is never disclosed to you: the law forbids it. | The competent financial intelligence unit, strictly within the framework provided by law. | No |
| Answer your requests and handle your complaints | Three years after case closure, or five years where the complaint touches compliance. | Our support tool, hosted in the European Union. | No |
| Prevent fraud and technical abuse | Twelve months for security logs, six months for rate-limiting counters. | Our hosting provider and our network protection vendor. | No |
| Measure site audience | Thirteen months maximum from the collection of consent, with no automatic extension. | None to date, the category being inactive. | No |
处理者和合作伙伴
我们依赖处理者提供托管、事务性电子邮件和短信发送、身份验证、存款地址风险分析和支付执行。每个处理者都根据书面指示行事，并遵守符合GDPR第28条的合同。
在合同签署之前，不会公布这些处理者的名单。我们更倾向于提供准确的类别，而不是为了显得成熟而展示供应商名称：公布未签订任何合同的合作伙伴名称将是虚假陈述，而这正是本网站拒绝做的事情。
名单将在服务上线后立即在此处公布，逐名、逐角色，并注明处理地点。任何后续添加都将触发本文档的版本更新。
向欧盟以外的传输
两项活动在结构上涉及向欧盟以外的传输：身份验证（其供应商通常在英国或美国运营）以及在欧洲以外的本地通道上执行支付——巴西的PIX、肯尼亚的M-Pesa、尼日利亚的NIP。向肯尼亚汇款意味着将受益人的姓名和号码传递给肯尼亚机构：这是支付的物质条件。
这些传输的框架
- 欧盟委员会在相关国家存在时作出的充分性决定。
- 如果做不到这一点，则采用欧盟委员会的标准合同条款，并结合考虑当地政府访问法律的传输影响评估。
- 附加技术措施：最小化传输字段、传输和静态加密、按通道隔离。
- 不进行便利性传输：如果可以在联盟内部实现目的，就在联盟内部实现。
您可以请求获取适用于特定传输的保障措施副本。然后我们会提供所使用的机制和目的地国家，但不包括合同的商业条款。
您的权利及其实际限制
一份列出七项权利却不说明哪项权利在何处受限的隐私政策对任何人都没有帮助。以下是各项权利，以及在我们实际情境中适用的限制。
- Right of access
- Obtain confirmation that we process your data, receive a copy of it and the information on purposes, recipients and retention periods.
- Right to rectification
- Have inaccurate data corrected or incomplete data completed. An already verified identity is not corrected by mere declaration: the fix goes through a new document verification.
- Right to erasure
- Request deletion of your data when its retention is no longer justified. Anti-money-laundering and accounting records cannot be erased before the end of their statutory period. We then give you the exact date on which deletion will happen.
- Right to restriction
- Request that a processing activity be frozen while a dispute is resolved.
- Right to portability
- Receive the data you provided in a structured, machine-readable format, or have it transmitted directly to another controller.
- Right to object
- Object to processing based on our legitimate interest, on grounds relating to your particular situation. Objection does not apply to processing imposed by law, notably anti-money-laundering diligence.
- Automated decision-making
- Obtain human intervention, express your point of view and contest a decision taken without human involvement. An automated compliance refusal can always be re-examined by an analyst on request.
- Withdrawal of consent
- Withdraw consent at any time, without affecting the lawfulness of processing already carried out.
如何行使您的权利
- 使用与您账户关联的电子邮件地址或从您的账户区域，写信至隐私联系地址。
- 我们验证您的身份。如果存在合理怀疑，我们会要求提供一项额外的验证要素——如果我们已持有有效的身份证明文件，绝不会要求重新提供。
- 我们会在${RIGHTS_RESPONSE_DAYS}天内答复。如果请求复杂或涉及多项，该期限可延长${RIGHTS_EXTENSION_MONTHS}个月，我们会在初始截止日期前告知您并说明原因。
- 答复是免费的。明显无根据或重复的请求可能导致有理由的拒绝，但绝不会导致悄悄收费。
如果我们的答复未能令您满意，您可以向您居住国的监管机构提出投诉。该途径无条件开放，无需事先告知我们。
行使权利
请说明您援引的权利，并尽可能提供相关的订单参考号。这样可以避免来回确认，缩短处理时间。
[email protected]自动化决策
有三项检查是自动化的，可能对您产生直接影响：将您的姓名与制裁名单进行匹配、基于文件的身份验证以及存款地址风险分析。匹配或失败可能导致订单暂停，无需事先人工介入。
您始终可以要求人工审核。然后分析师会重新打开文件，您可以陈述您的情况，初始决定可以被推翻。唯一无法与您分享详细原因的情况是已报告的怀疑：法律禁止我们对此进行讨论。
数据安全
传输和静态加密、环境隔离、最小权限访问、对验证文件的每次访问进行日志记录、内部访问强制二次验证。技术措施在专门页面上有详细描述。
如果发生可能对您的权利造成风险的个人数据泄露，我们会在72小时内通知监管机构，并在风险较高时直接通知您。即使不需要单独通知，我们也会发布事后说明。
未成年人
本服务不面向未成年人，身份验证会检查出生日期。如果我们发现账户由未成年人开设，该账户将被关闭，相关数据将被删除，但须遵守法规要求我们保留的记录。
本政策的变更
任何实质性变更——新的目的、新的接收方、向联盟境外的新转移——都会获得新的版本号，在本页底部的历史记录中增加条目，并且如果您持有账户，我们会直接通知您。我们不会悄无声息地改变目的。
版本历史
| 版本 | 最后更新 | Nature of the change |
|---|---|---|
| 1.0.0 | 2 September 2026 | 文件首次发布。 |
稳定锚点：每个部分都带有不会更改的标识符。您可以通过直接链接引用条款。