Privacy Policy

Last updated: this document is a working draft and must be reviewed by an Australian legal adviser before the platform accepts money.

Scope

This policy explains how personal information is handled in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

• Identity and contact details you provide at registration: name, email address, phone number and country.
• Authentication and security data: sign-in events, device and session information, IP address.
• Platform activity: watchlists, alerts, support tickets and transaction records.
• Verification data collected by a regulated identity-verification provider. Identity documents are not stored in this platform's database; only the verification outcome and provider reference are retained.

Why we collect it

To create and secure your account, to meet anti-money-laundering and counter-terrorism-financing obligations where they apply, to provide support, and to detect and prevent fraud.

Disclosure

Personal information may be disclosed to service providers engaged to perform identity verification, payments, custody, email delivery and hosting, and to regulators or law-enforcement agencies where legally required. Providers are listed on the regulatory disclosures page as they are engaged.

Security

Access to personal information is restricted by role and protected by row-level database access controls, encrypted transport and encrypted storage. Administrative access to customer records is logged in a tamper-evident audit trail.

Retention

Records required by AML/CTF law are retained for the statutory period. Other data is deleted or de-identified when no longer required.

Access, correction and complaints

You can request access to or correction of your personal information, or complain about how it has been handled, using the contact details on the contact page. If you are unsatisfied with our response you can contact the Office of the Australian Information Commissioner.

Overseas disclosure

Some service providers may store data outside Australia. Where that occurs it will be identified on the regulatory disclosures page.