ZwitchX Privacy Policy
ZwitchX ("Websites," "ZwitchX," "we," "our," or "us") is committed to protecting and respecting the privacy of our users (referred to as “you”). This Privacy Policy governs the collection, processing, and use of your personal information (the “Platform Agreement”).
Applicability and Purpose
This Privacy Policy applies to all services we provide through https://zwitchx.com/ or any other websites, pages, features, or content we own or operate, including mobile applications, cryptocurrency exchange functions, or API interfaces (collectively, the “Services”).
By using our Services, you acknowledge and agree to this Privacy Policy. If you do not agree with the outlined practices, you should not access or use our Services.
Personal Data We Collect
ZwitchX collects personal data from users who browse our website, create accounts, engage in cryptocurrency transactions, or interact with our Services.
We may collect the following data:
-
Account Information
-
Login Data: Username, banner, wallet address, Discord login credentials, phone number, email address.
-
Cryptocurrency Wallet Data: Wallet addresses, transaction history, and token types.
-
Transaction Data
-
Exchange Activity: Transaction details related to swaps, staking, and payments, including transaction IDs, wallet addresses, token details, and amounts.
-
Payment Data: Cryptocurrency payment details, fiat payment details (if applicable), and billing information.
-
Technical and Usage Data
-
Device details (IP address, browser type, OS), timestamps, connection history, and site activity logs.
-
Marketing Data
-
Contact details for users opting into promotional offers and communication.
-
KYC and AML Data
-
To comply with legal requirements, we may collect:
-
Government-issued identification documents (e.g., passports, driver’s licenses).
-
Proof of address (e.g., utility bills, bank statements).
-
Verification data through third-party providers.
-
Additional Cryptocurrency Data
-
Metadata for off-chain activities, such as staking configurations, slashing penalties, governance votes, and delegations.
-
Data generated by decentralized finance (DeFi) activities, such as liquidity pool participation and farming.
Legal Basis and Purpose for Processing
ZwitchX processes personal data only when there is a valid legal basis. Below is a summary of purposes, data involved, legal bases, and retention periods:
Purpose |
Data |
Legal Basis |
Retention |
Account creation and login |
Login and wallet connect data |
Performance of Terms of Service |
Until account deletion or 3 years after last contact |
Cryptocurrency exchange services |
Wallet addresses, transaction IDs, token details, payment data |
Performance of Terms of Service/Legal Obligations |
5 years (minimum) to comply with regulatory requirements |
KYC/AML Compliance |
Identity documents, proof of address |
Legal Obligation |
5 years after account closure |
Account personalization |
Blockchain preferences, roles, tags |
Consent |
Until account deletion, consent withdrawal, or 3 years after last contact |
Improving Services |
Website activity logs, device details, and statistical data |
Legitimate Interest |
25 months |
Marketing |
Contact information, interaction history |
Legitimate Interest |
Duration of service use + 3 years |
We ensure your data is deleted after these retention periods unless required to comply with legal obligations.
Cryptocurrency-Specific Data Handling
When using cryptocurrency-related functionalities like swaps, staking, or payments, the following additional considerations apply:
Transaction Data
-
On-Chain Data: All blockchain transactions (e.g., wallet addresses, transaction IDs) are public and immutable. ZwitchX cannot control or delete blockchain data.
-
Off-Chain Data: Metadata, staking rewards, and swap preferences are securely stored on our servers.
Smart Contract Interactions
ZwitchX enables interactions with smart contracts. By initiating a transaction, you agree to the associated terms encoded within the contract. We are not responsible for vulnerabilities or losses resulting from smart contract interactions.
Token Listings and Trading Risks
Cryptocurrency prices and availability are subject to market fluctuations. ZwitchX does not guarantee the listing or continued support of specific tokens. Use trading and exchange services at your own risk.
Slashing Events and Validator Misconduct
If you delegate tokens to validators through staking, ZwitchX is not responsible for any losses due to slashing penalties or validator misconduct.
Fraud Prevention
To detect and prevent fraudulent activity, we monitor transaction patterns and compare them against risk models.
Payment Integrations
Payment data processed via fiat payment gateways (if applicable) is managed by third-party providers, which comply with applicable privacy and security standards.
AML Compliance
ZwitchX complies with Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) regulations. Any suspicious activity may be reported to relevant authorities, as required by law.
Sharing Your Data
We share your personal data only under the following circumstances:
-
Authorized ZwitchX Employees
Authorized employees access your personal data solely for operational purposes, such as maintaining the platform or providing support. -
Third-Party Providers
We share data with providers offering services like hosting, payment processing, identity verification (KYC/AML), and analytics. These providers include: -
Blockchain network providers for executing cryptocurrency transactions.
-
Payment processors for fiat or hybrid payment services.
-
Regulatory Authorities
To comply with legal obligations, we may share data with financial regulators, tax authorities, or law enforcement upon request. -
Community Administrators
When participating in a community, certain data (e.g., wallet addresses, leaderboard rankings) may be shared with community administrators to facilitate engagement and rewards.
Children's Privacy
ZwitchX is not intended for individuals under the age of 18. We do not knowingly collect personal information from individuals under 18 years old. If you believe that we have collected personal information from someone under 18, please contact us immediately at [email protected], and we will take prompt steps to delete such information from our records.
International Data Transfers
Your personal information may be transferred to, and processed in, countries other than your own, including countries that may not have the same data protection laws as your country of residence. By using ZwitchX, you consent to the transfer of your information to countries outside of your country of residence for the purposes described in this Privacy Policy.
We take steps to ensure that appropriate safeguards are in place to protect your information, such as using Standard Contractual Clauses approved by the European Commission for transfers outside the European Economic Area (EEA). If you have any concerns regarding these transfers, please contact us at [email protected].
Your Rights
As a user, you retain the following rights under applicable laws, including GDPR:
-
Access: Request details about your stored data.
-
Correction: Update inaccurate or incomplete information.
-
Erasure: Request deletion of data not required for regulatory purposes.
-
Restriction: Limit how your data is used under certain circumstances.
-
Objection: Object to data processing based on legitimate interests or marketing purposes.
-
Portability: Receive your personal data in a structured, machine-readable format.
-
Complaint: File a complaint with regulatory authorities if you believe your rights are violated.
To exercise these rights, email us at [email protected].
Security Measures
We use advanced security measures, including encryption, multi-factor authentication, and periodic audits, to protect your personal data and cryptocurrency-related transactions.
Changes to the Privacy Policy
ZwitchX reserves the right to update this Privacy Policy to reflect changes in practices, cryptocurrency services, or legal requirements. We will notify you of significant updates through the website or email.