Privacy Policy

Draft — pending legal review. Replace via /admin/content/legal/privacy.

What we collect

• Account data: email, hashed password, phone (if verified), KYC documents (if submitted).
• Trade data: crypto type, amount, deposit address, payout account, transaction status.
• Device data: IP address, user agent, approximate location from IP.
• Cookies: a session cookie for authentication. See our Cookie Policy.

Why we collect it

• Operating the Service (executing trades, sending payouts).
• Fraud and abuse prevention.
• Legal compliance (AML, sanctions, tax).

Who we share it with

• Payment processors (Paystack) to deliver your local-currency payout.
• Exchange partners (FixedFloat) when routing small trades.
• Regulators, when legally required.

We never sell your personal data.

Retention

• KYC records: retained for the period required by law (minimum 5 years in most jurisdictions).
• Trade records: retained indefinitely for audit.
• Anonymous sessions: deleted on session expiry.

Your rights

Depending on your jurisdiction you may have rights to access, correct, export, or delete your data. Contact privacy@smokoin.local.

International transfers

Infrastructure may be hosted outside your home country. By using the Service you consent to such transfers.