Privacy Policy

Onyx Exchange ("ONYX", "we", "us") respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains what data we collect, why we collect it, how we use and share it, and the choices available to you.

This policy applies to visitors, registered users, and anyone who interacts with our website, dashboard, APIs, support channels, and marketing communications.

The information we collect depends on how you use ONYX. Some data is provided directly by you; other data is collected automatically when you interact with the Platform.

• Account data: name, email, phone number, username, password hash, and profile preferences.
• Identity & compliance: government ID, proof of address, selfies, source-of-funds documentation, and sanctions screening results.
• Financial activity: deposit and withdrawal records, wallet addresses, bank or payout details, trade history, balances, and fee payments.
• Technical data: IP address, device identifiers, browser type, session logs, cookies, and crash diagnostics.
• Communications: support tickets, chat transcripts, survey responses, and marketing opt-in status.

We use personal information to operate, secure, and improve the Platform and to meet legal obligations in the jurisdictions where we operate.

• Create and manage your account and authenticate sessions.
• Process deposits, withdrawals, trades, and portfolio reporting.
• Verify identity, prevent fraud, and comply with AML/KYC regulations.
• Provide customer support and send service-related notifications.
• Analyze usage to improve performance, UX, and product features.
• Send marketing communications where you have opted in (you may opt out anytime).

Where applicable under GDPR and similar laws, we rely on one or more of the following legal bases:

• Contract: processing necessary to provide services you request.
• Legal obligation: compliance with financial, tax, and anti-money-laundering laws.
• Legitimate interests: security monitoring, fraud prevention, and product improvement balanced against your rights.
• Consent: optional analytics, marketing emails, and non-essential cookies.

We share personal information only when necessary and with appropriate safeguards. We do not sell personal data.

• Infrastructure providers: cloud hosting, email delivery, and customer support tools under data processing agreements.
• Financial partners: payment processors, banking partners, and blockchain analytics for compliance screening.
• Professional advisers: auditors, lawyers, and insurers bound by confidentiality duties.
• Regulators & law enforcement: when required by valid legal process or to protect rights and safety.
• Corporate transactions: in connection with a merger, acquisition, or asset sale with notice where required.

ONYX may process and store information in countries other than your country of residence. Where required, we implement Standard Contractual Clauses, adequacy decisions, or other approved transfer mechanisms to protect your data.

We retain personal information for as long as your account is active and as needed to provide services, resolve disputes, and comply with legal retention requirements (typically five to seven years for financial records, unless a longer period is mandated).

When data is no longer required, we securely delete or anonymize it in accordance with our retention schedule.

We employ administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction.

• TLS 1.3 encryption in transit and AES-256 encryption at rest for sensitive fields.
• Role-based access controls, security logging, and regular penetration testing.
• Cold storage and multi-signature controls for custodied digital assets where applicable.
• Employee training and vendor security reviews.

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing or withdraw consent.

Submit requests to privacy@onyxmarkets.site. We may verify your identity before fulfilling a request. You may also lodge a complaint with your local data protection authority.

• Access & portability: receive a copy of data we hold about you.
• Correction: update inaccurate or incomplete information.
• Deletion: request erasure where no legal retention obligation applies.
• Marketing opt-out: unsubscribe links in emails or account notification settings.

We use essential cookies to maintain sessions and security. With your consent, we may use analytics cookies to understand usage patterns and improve the Platform.

You can manage cookie preferences through your browser settings or our in-product cookie banner where available. Disabling essential cookies may limit Platform functionality.

• Essential: authentication, fraud prevention, load balancing.
• Analytics: aggregated usage metrics (optional).
• Preference: theme, language, and UI settings.

The Platform is not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe a minor has provided us data, contact privacy@onyxmarkets.site and we will take steps to delete it.

We may update this Privacy Policy to reflect changes in law, technology, or our practices. The "Last updated" date at the top will change, and material revisions will be communicated through the Platform or email.

For privacy questions, data subject requests, or concerns about this policy, contact privacy@onyxmarkets.site or write to ONYX Privacy, Onyx Exchange, via the Help Center.