Privacy Policy

This Privacy Policy explains what personal data Capio Commerce LTD collects when you use the Platform, why we collect it, how we protect it, and the choices you have. Capio Commerce LTD is a Virtual Asset Service Provider licensed by the Virtual Assets Regulatory Authority (VARA) under licence number VL/26/07/003. By using the Platform you consent to the practices described here.

1. Information we collect

• Account information your name, email address, password hash, and any profile details you choose to add.
• Verification information KYC documents and details you submit to comply with VARA's AML, CTF and KYC requirements.
• Login and security records one-time passcodes, session identifiers, IP address, device and browser information, and the time and approximate location of each sign-in.
• Trading activity orders, positions, deposits, withdrawals, ledger entries and account balances.
• Support communications the contents of messages you send us through the contact form or by email.
• Technical data basic analytics about how the Platform is used, collected to keep it stable and secure.

2. How we use your information

• To create and operate your account, and to provide the features you request.
• To authenticate you, prevent unauthorised access, and send login notifications.
• To process deposits, withdrawals, orders and ledger entries.
• To meet legal, regulatory and record-keeping obligations, including VARA AML, CTF and KYC requirements.
• To respond to your support requests and contact form submissions.
• To monitor the stability, performance and security of the Platform.

3. Legal bases

Where data protection law requires a legal basis, we rely on: performance of our contract with you (operating your account and processing your orders); our legitimate interests (keeping the Platform secure and preventing fraud); your consent (where you have given it, such as optional communications); and compliance with legal obligations, including those arising under the VARA framework.

4. Cookies and local storage

We use strictly necessary cookies to keep you signed in and to protect your session. These cookies are HttpOnly and SameSite-controlled. We also use your browser's local storage to remember display preferences such as your chosen light or dark theme. We do not use third-party advertising cookies.

5. Sharing your information

We do not sell your personal data. We may share it with:

• Service providers who host, secure or support the Platform, under confidentiality obligations.
• Blockchain networks and analytics providers, where necessary to confirm a deposit or withdrawal.
• Regulators, law-enforcement authorities or counterparties where we are required to do so by law, or where necessary to investigate fraud or protect our rights.

6. Data retention

We retain account and trading records for as long as your account is open and for a period afterwards where required for legal, tax, accounting or dispute-resolution purposes, including the retention periods required under the VARA framework. Login and security records are retained for a shorter period unless they are needed for an ongoing investigation.

7. Security

We use multi-factor authentication, hashed passwords, encrypted transport, append-only ledger entries and role-based administrative access with a full audit trail. No system is completely secure, and we cannot guarantee absolute security of your data. You should use a strong, unique password and keep your email account secure.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, and to request a portable copy of it. You may also withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at support@capiocommerce.org. We may need to verify your identity before acting on a request, and some rights are subject to legal retention requirements.

9. Children

The Platform is not intended for anyone under 18 years of age, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

10. International transfers

Your data may be stored and processed in countries other than your own. Where we transfer personal data internationally, we take steps designed to ensure it receives an adequate level of protection consistent with this Policy.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above. Continued use of the Platform after a change constitutes acceptance of the revised Policy.

12. Contact

Questions, requests or complaints about privacy can be sent to support@capiocommerce.org or submitted through our contact form.