Privacy Policy

1. Introduction

We are committed to protecting your personal information and handling it responsibly. By using the Platform, you acknowledge the practices described in this policy. This policy should be read together with our Terms of Service.

2. Scope

This policy covers personal information about account holders, prospective customers, sellers on our secondary market, and visitors to our website. It does not cover third-party websites or services that we link to but do not control.

3. Information we collect

Information you provide

• Account information - such as your email address and password.
• Identity & verification (KYC) - such as your name, date of birth, address, and identity documents required by law.
• Financial information - such as payment details, funding sources, and, for sellers, evidence of share ownership.
• Communications - messages you send us through support, forms, or email.

Information we collect automatically

• Usage data - pages viewed, features used, and actions taken on the Platform.
• Device & technical data - IP address, browser type, device identifiers, and approximate location.
• Cookies & similar technologies - as described in section 7.

4. How we collect it

We collect information directly from you when you register, verify your identity, transact, or contact us; automatically as you use the Platform; and from trusted third parties such as identity-verification providers, payment processors, and fraud-prevention services.

5. How we use your information

• To create and operate your account and process your transactions;
• To verify your identity and meet KYC/AML and other legal obligations;
• To detect, prevent, and investigate fraud and security incidents;
• To provide customer support and send service and account notices;
• To operate, analyze, improve, and secure the Platform;
• To send marketing communications where you have not opted out;
• To comply with legal and regulatory requirements.

6. Legal bases for processing

Where applicable data-protection law requires it, we rely on the following legal bases: performance of a contract (to provide the Platform), legal obligation (to meet regulatory duties), legitimate interests (to secure and improve our services), and consent (for example, certain marketing). You may withdraw consent at any time.

7. Cookies & tracking

We use essential cookies to keep you signed in and the Platform functioning, and optional analytics cookies to understand and improve how the Platform is used. You can control non-essential cookies through your browser settings or our cookie controls where available.

8. How we share your information

We do not sell your personal information. We share it only as needed:

• Service providers - payment processors, custodians, identity-verification and cloud-hosting partners who process data on our behalf under contract;
• Counterparties - limited information necessary to complete a verified secondary-market transaction;
• Legal & regulatory - authorities, regulators, or courts where required by law or to protect our rights and users;
• Business transfers - in connection with a merger, acquisition, or sale of assets, subject to this policy.

9. International transfers

Your information may be processed in countries other than your own. Where we transfer personal data across borders, we put appropriate safeguards in place - such as standard contractual clauses - to protect it in line with applicable law.

10. Data retention

We retain personal information for as long as your account is active and afterwards only as long as necessary to meet legal, regulatory, tax, accounting, or reporting obligations, to resolve disputes, and to enforce our agreements. Retention periods for financial and KYC records are often set by law.

11. Security

We use encryption, access controls, monitoring, and other technical and organizational measures to protect your information. No method of transmission or storage is completely secure, but we work continuously to safeguard your data. Learn more on our security page.

12. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your information, subject to legal retention duties;
• Object to or restrict certain processing;
• Request portability of information you provided to us;
• Withdraw consent where processing is based on consent.

To exercise any right, contact us at privacy@xworldventures.com. You also have the right to complain to your local data-protection authority.

13. Marketing communications

You can opt out of marketing emails at any time using the unsubscribe link in those emails or by contacting us. We will still send essential service and account communications that are necessary to operate your account.

14. Children's privacy

The Platform is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a minor has provided us information, please contact us so we can remove it.

15. Third-party links

The Platform may contain links to third-party websites and services. We are not responsible for their privacy practices, and we encourage you to review their policies before providing any information.

16. Changes to this policy

We may update this policy from time to time. When we make material changes, we will post the updated policy here, revise the "Last updated" date, and, where appropriate, notify you.

17. Contact us

For any privacy question or request - or to reach our data-protection contact - email privacy@xworldventures.com or use our contact page.