1. Introduction
Welcome to Cyphalet ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy applies to all information collected through our platform at app.cyphalet.xyz and any related services.
In plain language: We collect only what we need to run our service, we never sell your data, and we give you full control over what you share with us.
By using Cyphalet, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use our platform.
2. Data We Collect
We collect information you provide directly to us and information generated automatically when you use our platform.
Information you provide
- Account information: Name, email address, phone number, and password when you register.
- Identity verification (KYC): Government-issued ID, facial verification data, and other documents required for regulatory compliance.
- Financial information: Bank account details you provide to fund your wallets.
- Communications: Messages you send to our support team.
Information collected automatically
- Transaction data: Records of all deposits, conversions, and transfers you make.
- Device and usage data: IP address, browser type, operating system, and pages visited.
- Cookies and tracking: Session cookies and analytics data to improve our platform.
| Data Type | Purpose | Required? |
|---|
| Name & Email | Account creation and communication | Yes |
| Phone Number | Verification and security alerts | Yes |
| Government ID | KYC/AML regulatory compliance | Yes |
| Bank Details | Processing deposits | Yes (for deposits) |
| Device & IP Data | Security and fraud prevention | Automatic |
| Cookies | Session management and analytics | Optional |
3. How We Use Your Data
We use the information we collect for the following purposes:
- To create and manage your Cyphalet account.
- To process transactions, deposits, conversions, and transfers.
- To verify your identity and comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations.
- To detect and prevent fraud, unauthorised access, and security threats.
- To communicate with you about your account, transactions, and support requests.
- To send you important notices, security alerts, and platform updates.
- To improve the performance, features, and user experience of our platform.
- To comply with applicable laws, regulations, and legal obligations.
We do not use your data for advertising purposes, and we never sell your personal data to third parties.
4. Sharing Your Data
We do not sell, trade, or rent your personal information. We may share your data only in the following limited circumstances:
Partner banks and financial institutions
To process your deposits and transfers, we share necessary financial information with our regulated banking partners. These partners are bound by strict data protection agreements.
Regulatory and legal authorities
We may disclose information where required by law, court order, or regulatory authority — for example, to comply with AML/KYC regulations or respond to a government request.
Service providers
We work with trusted third-party service providers (such as identity verification services and cloud hosting) who process data on our behalf under strict confidentiality agreements.
Business transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, which will be bound by the same privacy commitments.
We will never sell your personal data, share it with advertisers, or disclose it without your consent except where required by law.
5. Cookies
Cyphalet uses cookies and similar tracking technologies to operate the platform and improve your experience.
- Essential cookies: Required for the platform to function, including keeping you logged in during a session.
- Analytics cookies: Help us understand how users interact with the platform so we can improve it. These are anonymised and never linked to your identity.
- Security cookies: Used to detect and prevent fraudulent activity.
You can control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the platform.
6. Data Retention
We retain your personal data for as long as your account is active or as required to provide our services. After account closure, we may retain certain records for up to 7 years to comply with financial regulations and legal obligations.
Transaction records are retained as required by applicable AML/KYC laws. Identity verification documents are retained for the minimum period required by law and then securely deleted.
7. Your Rights
Depending on your location and applicable data protection laws, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Deletion: Request deletion of your data, subject to legal retention requirements.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to certain processing activities where permitted by law.
- Withdrawal of consent: Where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us at privacy@cyphalet.xyz or through our Contact page. We will respond within 30 days.
8. Security
We take the security of your data seriously. Cyphalet implements industry-standard security measures including:
- End-to-end encryption for all data in transit and at rest.
- Secure, access-controlled server infrastructure.
- Regular security audits and penetration testing.
- 24/7 fraud monitoring and anomaly detection.
- Multi-factor authentication support for account access.
While we take every reasonable precaution, no system is completely immune to security risks. We encourage you to use a strong, unique password and enable two-factor authentication on your account.
9. Children's Privacy
Cyphalet is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has registered on our platform, please contact us immediately at privacy@cyphalet.xyz and we will take prompt action to remove the account and associated data.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email and/or display a prominent notice on the platform before the changes take effect.
The date at the top of this page always reflects when this policy was last revised. We encourage you to review this policy periodically.