Privacy policy

• Account data — name, email address, phone number and the password hash. We never store your password itself.
• Verification data — identity documents, a selfie, document number, country of issue and date of birth, where you submit them.
• Financial data — deposits, positions, earnings, commissions, withdrawals and the payout address you supply.
• Network data — who introduced you and who you introduce, because the compensation plan is calculated from it.
• Technical data — IP address, browser user-agent and session records, used for security and fraud prevention.
• Correspondence — support tickets and messages sent through our contact form.

• To operate your account and calculate what the plan owes you.
• To meet anti-money-laundering and counter-terrorist-financing obligations.
• To detect and prevent fraud, and to secure accounts against unauthorised access.
• To answer your support enquiries.
• To keep the audit and ledger records that make our figures reconstructable.

Verification documents are stored outside any publicly reachable path and are never given a public URL. They can be retrieved only through an authenticated request by an operator holding the compliance capability, and every decision records the reviewer who made it. Documents are not used for marketing and are not shared with other members.

We do not sell personal data. We share it only:

• With service providers who operate the platform on our behalf — hosting, email delivery and, where used, identity-verification providers — bound to process it only on our instructions.
• Where required by law, regulation, or a valid request from a competent authority.
• Where necessary to establish, exercise or defend legal claims.

Blockchain transactions are inherently public. An address you supply, and transfers to it, are visible on the network and outside our control.

Account, transaction and verification records are retained for the life of the account and afterwards for the period required by anti-money-laundering law — typically five years from closure. Ledger and audit records are append-only by design and are not deleted, because they are what makes historical figures reconstructable.

Subject to local law, you may ask us to:

• Confirm what we hold about you and provide a copy.
• Correct data that is inaccurate or incomplete.
• Delete data we no longer have a lawful basis to keep — note that records we must retain by law, and ledger entries, cannot be erased on request.
• Restrict or object to certain processing.

Ask through our contact form or the in-platform support desk. We may need to verify your identity before acting on a request.

Passwords are hashed, sessions are individually revocable, and administrative access is granted per capability rather than per job title. Every action an operator takes against an account is recorded in an append-only audit log. No system is perfectly secure, and you play a part: use a unique password, and treat any message asking for your credentials as fraudulent.

We use only what the platform needs to function — a session token to keep you signed in and your interface preferences, such as your chosen theme. We do not use advertising cookies or sell behavioural data to third parties.