Privacy Policy
Last updated September 2026. Plain-language promises about your data on a crypto platform.
1. What we collect
Account data you provide (name, email, phone), identity-verification documents required by financial regulation, transaction records on the platform, and limited technical data (device type, approximate region) used for fraud prevention. We never collect private keys or recovery phrases — those never leave your device.
2. How we use it
To operate your account and settle trades, to meet anti-money-laundering and tax-reporting obligations, to prevent fraud and abuse, and — only with your consent — to send product news and market briefs. Marketing consent can be withdrawn in one click, forever honored within 24 hours.
3. How we protect it
Bank-grade TLS 1.3 in transit, AES-256 at rest, hardware security modules for signing infrastructure, segregated insured custody for client crypto, annual penetration tests and independent SOC 2 audits. Employee access follows least-privilege with full audit logging.
4. Sharing and retention
We share data only with regulated processors (KYC vendors, payment rails, cloud hosting) under strict contracts, and with authorities when the law requires. Verification documents are retained for five years after account closure as regulation demands; marketing data is deleted within 30 days of an unsubscribe or erasure request.
5. Your rights
Access, correct, export or delete your personal data at any time from account settings or by emailing support@coinharbor.example. Deletion requests are honored unless retention is legally required, in which case we explain exactly what and why.
6. Contact
Questions about this policy? Write to our data team at support@coinharbor.example or visit us at 2750 Quadra Street, Victoria, Canada.