Privacy Policy

1. What we collect

Depending on how you use Cryft, we may collect:

• Account details — your name, email, phone number, and country.
• Verification data — ID documents and a selfie, when you verify to sell crypto.
• Transaction data — trades, bill payments, transfers, balances, and references.
• Financial details — bank accounts and crypto addresses you add.
• Device and usage data — app version, device type, IP address, and how you use Cryft.
• Messages — anything you send our support team.

2. How we use it

We use your information to:

• Run the service — process trades, payments, transfers, and payouts.
• Verify who you are and keep your account secure.
• Detect and prevent fraud, abuse, and money laundering.
• Meet legal, tax, and regulatory obligations.
• Support you when you reach out, and improve how Cryft works.
• Send you service updates, and — only if you opt in — product news.

3. Why we're allowed to

We process your data to deliver the service you asked for, to meet legal obligations, to protect against fraud, and — where relevant — with your consent. You can withdraw consent for optional things, like marketing, at any time.

4. Who we share it with

We don't sell your data. We share it only with:

• Payment, banking, and bill-pay partners who help complete your transactions.
• Identity-verification and fraud-prevention providers.
• Cloud and infrastructure providers that host the service securely.
• Regulators, tax authorities, and law enforcement when the law requires it.

5. A note on the blockchain

Crypto transactions are recorded on public blockchains that we don't control. Anything settled on-chain — like a wallet address and amount — is public and permanent by design, and isn't something we can edit or erase.

6. How long we keep it

We keep your data for as long as your account is open, and afterward only as long as we need to — to meet legal and regulatory requirements (financial records often must be kept for several years) and to resolve disputes. After that, we delete or anonymize it.

7. How we protect it

We use encryption in transit and at rest, strict access controls, and a transaction PIN on every payout. No system is perfectly secure, but we work continuously to protect your data and we'll tell you if something goes wrong in a way that affects you.

8. Your rights

You can ask to see the data we hold about you, correct it, or have it deleted where the law allows. You can object to certain processing and opt out of marketing at any time. To make a request, email [email protected] — we may need to verify your identity first.

9. Cookies and analytics

Our website uses a small number of cookies and privacy-conscious analytics to keep things working and understand what's useful. You can control cookies through your browser settings.

10. Children

Cryft is for adults. We don't knowingly collect data from anyone under 18. If you believe a minor has used Cryft, contact us and we'll remove their data.

11. International transfers

Some of our providers operate in other countries. When your data moves across borders, we make sure it stays protected with appropriate safeguards.

12. Changes to this policy

We'll update this policy as Cryft evolves. If a change matters to you, we'll let you know in the app or by email before it takes effect.

13. Contact us

For anything privacy-related — questions, requests, or concerns — email [email protected] and we'll get back to you.