1. Who we are
Prophex Ltd (“Prophex”, “we”, “us”) is the controller of your personal information for the purposes described in this policy. Contact: privacy@prophex.io. Our registered address is published on the Site.
2. What this policy covers
This policy explains what we collect, how we use it, who we share it with, how long we keep it, and your choices. It applies to our website, apps, smart contracts, and any tools we operate (the “Services”).
3. Information we collect
On-chain data: public blockchain data (e.g., wallet addresses and transactions) associated with your activity.
Usage data: device/browser type, operating system, time zone, pages and features used, performance metrics, diagnostics.
Account & communications: email or handle you provide, support messages, referral/affiliate identifiers if you use them.
Compliance data (if applicable): identity/KYC info and sanctions-screening results where required by law or our risk policy.
We do not store private keys.
4. How we use your information (and legal bases)
Provide and operate the Services (contract) — run the interface, markets, and customer support.
Safety, integrity, and compliance (legal obligation / legitimate interests) — detect/prevent fraud and abuse; perform sanctions/KYC checks where required; protect market integrity.
Analytics and improvement (legitimate interests) — measure usage and performance to improve features and reliability.
Marketing and updates (consent / legitimate interests) — send product news or surveys; you can opt out anytime.
5. Cookies & tracking
We use minimal cookies/local storage for preferences, analytics, and reliability. You can control cookies in your browser and via our Cookie Policy (linked on the Site), which lists cookie types, purposes, and durations.
6. How we share information
We do not sell your personal information. We may share limited data with:
Service providers (hosting, analytics, customer support) under confidentiality and data-processing terms;
Compliance providers (KYC/sanctions) when required by law or our risk policy;
Regulators or authorities where legally required.
We maintain a list of key subprocessors on the Site and may update it from time to time.
7. International transfers
We may transfer, store, and process information outside your country. Where required, we use Standard Contractual Clauses (and the UK Addendum, as applicable) or other lawful transfer mechanisms.
8. Retention
We keep information only as long as necessary for the purposes described:
Usage/analytics data: up to 24 months (then aggregated or deleted);
Support records: up to 24 months after the ticket closes;
KYC/AML records (where collected): 5–7 years to comply with legal obligations.
9. Your rights
Subject to law, you can request access, correction, erasure, restriction, objection, or portability of your personal information. To exercise rights, contact privacy@prophex.io.
If you are in the UK/EU, you also have the right to lodge a complaint with your local data authority.
10. Security
We use technical and organizational measures (encryption in transit, access controls, least-privilege, periodic reviews) to protect the limited personal data we process. Blockchain transactions are public and immutable; on-chain activity may be visible to anyone and is outside our control.
11. Children
The Services are not directed to individuals under 18. If we learn we have collected information from a minor, we will delete it.
12. Marketing & affiliates
If you sign up for updates, we may send product news or surveys; you can unsubscribe at any time. We may use referral/affiliate identifiers to attribute traffic and rewards under our Affiliate Terms.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new effective date above. Significant changes will be highlighted on the Site.
14. Contact
Questions or requests: privacy@prophex.io. You can also write to our registered address as published on the Site.