Privacy Policy

1. Data we collect

1.1. Account data: e-mail address, name (if provided), password (stored only as an irreversible hash), account settings, e-mail verification and two-factor authentication status.

1.2. Financial data within the Platform: Balance state, transaction history (deposits, withdrawals, package purchases, staking, copy trading, referral accruals), cryptocurrency wallet addresses used for deposits and withdrawals.

1.3. Referral structure data: the link between your account, the user who invited you and the users who registered via your link.

1.4. Technical data: IP address, device and browser type, language, date and time of requests, account activity logs (including logins), cookie data and similar technologies (see the Cookie Policy).

1.5. Communication data: the content of your correspondence with support (e-mail, Telegram, support widget) and reviews you publish on the Platform.

1.6. When you sign in with Google, we receive from Google your e-mail address and basic profile data (name, avatar) to the extent you allow on Google's side. We never receive your Google account password.

1.7. In the cases provided for by the AML/KYC Policy we may request identity documents, proof of address and proof of source of funds.

2. Purposes and legal bases

We process data for the following purposes:

• creating and maintaining the account, providing Platform features — performance of a contract (the Terms of Use);
• processing deposits, withdrawals and Product operations — performance of a contract;
• calculating and crediting referral rewards — performance of a contract;
• AML/KYC checks, fraud and multi-account prevention — compliance with legal obligations and the Company's legitimate interest;
• Platform security, logging and incident investigation — the Company's legitimate interest;
• responding to support requests — performance of a contract and legitimate interest;
• sending news and updates — your consent (the opt-in at registration), which you may withdraw at any time;
• analytics and improvement of the Platform — the Company's legitimate interest (in anonymised or aggregated form where possible).

3. Cookies and similar technologies

We use cookies and browser local storage for authentication, interface language and consent settings. The full list and storage periods are set out in the Cookie Policy.

4. Who we share data with

4.1. We do not sell personal data. Data may be shared only with:

• infrastructure providers (hosting, e-mail delivery) — to the extent necessary for the Platform to operate;
• authentication providers (Google — when you sign in with Google);
• competent public authorities — upon a lawful and binding request;
• the Company's legal and other advisers — where necessary to protect the Company's rights in disputes.

4.2. Please note: blockchain transactions are public by nature. Wallet addresses and transfer amounts are visible in public blockchain explorers regardless of the Company.

5. International data transfers

The Platform's infrastructure may be located in different countries. Where data is transferred outside your country of residence (including outside the EEA), we take reasonable steps to protect it, including contractual data protection safeguards where applicable.

6. Retention periods

• account data and transaction history — for the life of the account and up to 5 years after its closure (to comply with anti-money-laundering requirements, resolve disputes and protect rights);
• support correspondence — up to 3 years from the request;
• technical logs — as a rule, up to 12 months;
• newsletter data — until consent is withdrawn.

After these periods expire, data is deleted or anonymised.

7. Your rights

To the extent provided by applicable law (including the GDPR for EEA residents) you have the right to:

• access your data and obtain a copy of it;
• rectify inaccurate data;
• erase your data (the "right to be forgotten") — subject to mandatory retention periods established by law;
• restrict or object to processing;
• receive your data in a machine-readable format (portability);
• withdraw your newsletter consent at any time — this does not affect the lawfulness of processing before withdrawal;
• lodge a complaint with the data protection supervisory authority of your country.

To exercise your rights, send a request to [email protected] from the e-mail address linked to your account. We will respond within 30 days; we may request additional information to verify your identity.

8. Security

We apply technical and organisational safeguards: encrypted connections (HTTPS), passwords stored as irreversible hashes, authentication cookies inaccessible to scripts (httpOnly), restricted staff access to data and access logging. No system guarantees absolute security; in the event of an incident affecting your data we will notify you and the supervisory authorities in the cases and within the timeframes required by law.

9. Children's data

The Platform is intended only for persons over 18. We do not knowingly collect data of minors; if you become aware of such a registration, please inform us — the account will be closed and the data deleted.

10. Changes to this Policy

We may update this Policy. The new version is published on this page with the date of the update. In the event of material changes we will additionally notify you via the Platform or by e-mail.

11. Contact

Data controller: Quantora Capital. For all personal data matters: [email protected], Telegram @QuantoraSupport_Bot.