1. INTRODUCTION

TrakTrade is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your personal information when you use our online trading and investment platform.
By accessing or using TrakTrade, you consent to the data practices described in this Privacy Policy. If you do not agree, please do not use our Platform.
This Privacy Policy applies solely to information collected through TrakTrade and does not apply to any third-party websites, services, or applications, even if accessible through our Platform.

2. INFORMATION WE COLLECT

We collect several categories of personal and technical information to provide, maintain, and improve our services.

2.1 Personal Identification Information

When you register for an account, we collect:
Full legal name
Date of birth
Government-issued identification number (e.g., passport, driver’s license, national ID)
Email address
Phone number (if provided for two-factor authentication)

2.2 Verification and KYC Information

To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations, we collect:
Copies of government-issued ID documents (front and back)
Proof of address (e.g., utility bill, bank statement — with bank account numbers redacted)
Source of funds declarations
Selfie or live photo verification
Face matching and liveness detection data (biometric data processed solely for verification; we do not store raw biometric templates longer than necessary)

2.3 Trading and Investment Information

We collect and store:
Cryptocurrency wallet addresses used for deposits and withdrawals (USDT and USDC only)
Deposit and withdrawal transaction hashes
Account balance (in USDT)
Trading history (all buy/sell orders, timestamps, prices, volumes)
Investment contract holdings (amounts invested, plans selected, start and end dates, returns earned)
Loan records (amounts borrowed, interest rates, repayment status, overdue fees)
Internal transaction logs (transfers between trading, investment, and available balances)
Important: TrakTrade does not collect, store, or process:
Bank account numbers
Credit card or debit card numbers
Any other traditional banking or payment card information
All financial transactions on TrakTrade are conducted exclusively using USDT and USDC via external cryptocurrency wallets.

2.4 Technical and Usage Information

When you access our Platform, we automatically collect:
IP address (including geolocation derived from IP)
Device type (desktop, mobile, tablet)
Operating system and version
Browser type and version
Login and logout timestamps
Session duration and activity logs (pages visited, buttons clicked, features used)
Clickstream data (your path through our Platform)

2.5 Communication Information

If you contact our customer service, compliance team, or support staff, we collect:
Email correspondence (incoming and outgoing)
Live chat transcripts
Support ticket history
Attachments you send (e.g., screenshots, documents)

2.6 Cookies and Similar Tracking Technologies

We use cookies, web beacons, pixel tags, and local storage to:
Keep you logged in (session cookies)
Remember your preferences (preference cookies)
Analyze Platform usage (analytics cookies)
Detect and prevent fraud (security cookies)
For more information, see Section 9 (Cookies Policy).

2.7 Blockchain Data

Because TrakTrade operates with cryptocurrencies, certain information you provide (e.g., wallet addresses, transaction hashes) is recorded on public blockchains (e.g., Ethereum, Tron, BNB Chain). Blockchain transactions are immutable and publicly accessible. TrakTrade does not control the privacy of public blockchains.

3. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

3.1 Account Creation and Management

Create and maintain your user account
Verify your identity through KYC processes
Authenticate your login attempts
Recover lost accounts or reset credentials

3.2 Processing Transactions

Record deposits from your external wallet addresses
Process withdrawal requests to your external wallet addresses
Execute trades and investment contract purchases
Track your account balance in USDT
Manage loan disbursements and repayments

3.3 Compliance and Legal Obligations

Comply with AML, CTF, and sanctions screening laws
Respond to lawful requests from regulatory authorities, courts, or law enforcement
Investigate and prevent fraud, market manipulation, and prohibited activities (e.g., loan repayment violations under our Terms)
Maintain transaction records for legally mandated retention periods (minimum 5 years)

3.4 Platform Improvement and Analytics

Analyze usage patterns to improve Platform features
Diagnose technical issues and optimize performance
Conduct research and development for new products (investment plans, trading tools)
Generate aggregated, anonymized statistical data

3.5 Communication

Send account-related notifications (login alerts, withdrawal confirmations, security updates)
Respond to customer service inquiries
Notify you of changes to this Privacy Policy or our Terms
Send marketing communications (only if you have opted in; you may opt out at any time)

3.6 Security and Fraud Prevention

Monitor for suspicious login attempts (unusual locations, devices)
Detect account takeover attempts
Identify potential violations of our Terms (e.g., inactive account withdrawal attempts, hold violations)
Prevent unauthorized access to your funds

3.7 Enforcement of Platform Rules

We use your data to enforce the specific rules set forth in our Terms and Conditions, including but not limited to:
Verifying that loan repayments are made with new external deposits (not existing funds)
Determining when an account has been inactive for withdrawal restriction purposes
Calculating penalty deposit amounts when an account is placed on hold due to policy violations
No personal data is used to take adverse action against you without proper verification and notice.

4. DATA SHARING AND DISCLOSURES

We do not sell your personal data to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We share necessary data with trusted third-party service providers who assist us in operating the Platform, including:
KYC/AML verification providers (e.g., identity document verification, face matching, sanctions screening)
Cryptocurrency blockchain analytics providers (to monitor suspicious wallet activity)
Cloud hosting providers (to store encrypted data)
Customer support software (to manage tickets and live chat)
Email delivery services (to send transactional emails)
These providers are contractually obligated to use your data only for the services they perform for TrakTrade and must maintain appropriate security measures.

4.2 Regulatory and Law Enforcement Authorities

We may disclose your personal information if required to do so by law, subpoena, court order, or lawful request from government or regulatory authorities (e.g., securities regulators, financial intelligence units, tax authorities).

4.3 Corporate Transactions

If TrakTrade is involved in a merger, acquisition, asset sale, bankruptcy, or reorganization, your personal information may be transferred to the successor entity. We will notify you of such a transfer via email and/or a prominent notice on our Platform.

4.4 Fraud Prevention and Platform Integrity

We may share information with:
Fraud prevention databases
Other financial services platforms (to report confirmed fraudulent activity)
Law enforcement (to investigate suspected crimes, including loan repayment fraud or account abuse)

4.5 With Your Consent

We may share your information for any other purpose if you provide explicit written consent.

4.6 Aggregated or Anonymized Data

We may share aggregated, anonymized statistical data (e.g., “10,000 active users traded 1 million USDT this month”) with partners, investors, or for marketing purposes. Such data cannot be used to identify you personally.

5. DATA SECURITY

We implement industry-standard and commercially reasonable security measures to protect your personal information, including:

5.1 Encryption

All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (SSL).
Sensitive data (e.g., ID documents, KYC data) is encrypted at rest using AES-256.
Wallet addresses and transaction data are stored in encrypted databases.

5.2 Access Controls

Only authorized employees and contractors (e.g., compliance officers, support staff) have access to personal data, and only for legitimate business purposes.
Access is role-based and logged. All access attempts are audited.

5.3 Authentication

We enforce strong password requirements.
Session timeouts automatically log out inactive users.

5.4 Internal Policies

All TrakTrade personnel receive regular privacy and security training.
We conduct periodic security audits and penetration testing.

5.5 Your Responsibilities

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. You are responsible for:
Keeping your login credentials (email, password, 2FA codes) confidential
Using a secure and updated device and browser
Not sharing your account access with anyone
Immediately notifying us of any suspected breach or unauthorized access

6. YOUR PRIVACY RIGHTS

Depending on your jurisdiction (e.g., GDPR for EEA/UK, CCPA for California, LGPD for Brazil), you may have the following rights:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you.

6.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information.

6.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal information, subject to legal exceptions (e.g., we may retain KYC data for 5 years due to AML laws, or transaction records for tax purposes).

6.4 Right to Restriction of Processing

You have the right to restrict how we use your data if you contest its accuracy or object to processing.

6.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., JSON, CSV) and transmit it to another controller.

6.6 Right to Object

You have the right to object to processing based on legitimate interests (e.g., analytics or marketing).

6.7 Right to Withdraw Consent

If we process your data based on your consent (e.g., marketing emails), you may withdraw consent at any time.

6.8 Right to Non-Discrimination (CCPA)

We will not discriminate against you for exercising any of your privacy rights (e.g., charging different prices or denying services, except where the denial is based on legal requirements like KYC).

6.9 Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe our processing violates applicable law.

6.10 How to Exercise Your Rights

To exercise any of these rights, contact us at:
Privacy Requests Email: support@traktrade.com
Subject line must include: “PRIVACY REQUEST – [Your Username]”
We may require you to verify your identity before processing your request (e.g., by providing a government ID or answering security questions). We will respond within 30 days (or as required by your local law). If your request is complex or numerous, we may extend the response period by an additional 60 days and notify you of the extension.

7. COOKIES AND TRACKING TECHNOLOGIES POLICY

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help websites remember your actions and preferences over time.

7.2 Third-Party Cookies

We may use third-party services (e.g., Google Analytics, Cloudflare) that set their own cookies. These third parties have their own privacy policies, and TrakTrade is not responsible for their practices.

7.3 Managing Cookies

You can manage or disable cookies through your browser settings (e.g., Chrome, Firefox, Safari, Edge). Please note:
Disabling strictly necessary cookies will prevent you from logging in or using the Platform.
Disabling analytics cookies will not affect Platform functionality.
For more information, visit www.allaboutcookies.org.

7.4 Do Not Track (DNT)

Some browsers support a “Do Not Track” signal. TrakTrade does not currently respond to DNT signals because there is no uniform industry standard. However, you may disable analytics cookies as described above.

8. INTERNATIONAL DATA TRANSFERS

TrakTrade operates globally. Your personal information may be transferred to, stored, and processed in countries other than your country of residence, including countries that may have different (and potentially less stringent) data protection laws.
Current data storage locations: [Insert Country/Region, e.g., United States, European Union, Singapore]
When we transfer your data internationally, we implement appropriate safeguards, including:
Standard Contractual Clauses (SCCs) approved by the European Commission
Data processing agreements with our service providers
Binding Corporate Rules (if applicable)
By using TrakTrade, you consent to the transfer of your data to countries outside your residence, subject to the safeguards described above.

9. CHILDREN’S PRIVACY

TrakTrade is not intended for persons under the age of 18 (or the legal age of majority in your jurisdiction). We do not knowingly collect personal information from minors.
If we discover that we have inadvertently collected personal data from a minor, we will delete it immediately. If you believe a minor has provided us with personal information, please contact us at [Insert Privacy Email].

9. THIRD-PARTY LINKS

Our Platform may contain links to third-party websites (e.g., blockchain explorers, partner announcements, social media). We are not responsible for the privacy practices or content of those third parties. We encourage you to read their privacy policies before providing any personal information.

10. MARKETING AND PROMOTIONAL COMMUNICATIONS

10.1 Opt-In Consent

We will only send you marketing emails (e.g., new investment products, trading competitions, platform updates) if you have explicitly opted in during account registration or through your account settings.

10.2 How to Opt Out

You may opt out of marketing communications at any time by:
Clicking the “unsubscribe” link in any marketing email
Updating your email preferences in your account settings
Contacting [Insert Privacy Email] with “UNSUBSCRIBE” in the subject line
Even if you opt out of marketing emails, we will still send you transactional and service-related emails (e.g., withdrawal confirmations, security alerts, loan repayment notices, policy changes).

11. SPECIFIC DISCLOSURES RELATED TO PLATFORM RULES

As noted in our Terms and Conditions, TrakTrade enforces specific operational rules that involve the use of your data:

11.1 Loan Repayment Rule

To enforce the rule that loans must be repaid with new external deposits (not existing account funds), we analyze your deposit history, wallet addresses, and transaction timestamps. This data processing is necessary for contract performance and fraud prevention.

11.2 Inactive Account Withdrawal Restriction

To determine if your account has been inactive for the specified period, we log your login activity, trades, deposits, and withdrawals. This data is used to apply withdrawal restrictions and calculate reactivation deposit requirements (which are obtained from Customer Service as per our Terms).

11.3 Account Holds and Penalty Deposits

When your account is placed on hold due to a policy violation, we calculate the required penalty deposit based on your current account balance. This requires processing your balance data. Penalty deposits are tracked separately as compliance records.
All such data processing is performed transparently and only for the purposes stated in our Terms and this Privacy Policy.

12. BREACH NOTIFICATION

In the event of a data breach that is likely to result in a risk to your rights and freedoms (e.g., unauthorized access to your KYC documents or wallet addresses), we will:
Notify you within 72 hours of becoming aware of the breach (or as required by applicable law)
Notify relevant data protection authorities within the required timeframe (e.g., 72 hours for GDPR)
Provide information about the nature of the breach, affected data categories, and recommended actions (e.g., resetting passwords, monitoring wallet activity)

13. DO NOT SELL MY PERSONAL INFORMATION (CCPA)

Under the California Consumer Privacy Act (CCPA), California residents have the right to opt out of the “sale” of their personal information. TrakTrade does not sell personal information and has not sold personal information in the preceding 12 months. We also do not “share” personal information for cross-context behavioral advertising.

14. AMENDMENTS TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features.
Minor changes (e.g., typographical corrections, clarification of existing sections): Effective immediately upon posting with an updated “Last Updated” date.
Material changes (e.g., new data sharing practices, changes to retention periods, new processing purposes): We will notify you via email (to your registered address) and/or a prominent notice on the Platform at least 30 days before the changes take effect.
Your continued use of TrakTrade after the effective date constitutes acceptance of the revised Privacy Policy. If you do not agree, you must close your account and stop using the Platform.

15. GOVERNING LAW AND DISPUTE RESOLUTION (PRIVACY-RELATED)

This Privacy Policy is governed by the laws of [Insert Country/State], without regard to conflict of law principles.
Any dispute arising specifically from privacy matters (data collection, use, storage, breach, or rights enforcement) shall first be attempted to be resolved through good-faith negotiations. If not resolved within 30 days, disputes shall be submitted to binding arbitration in accordance with the dispute resolution provisions in our Terms and Conditions.
For users in the European Union, you also have the right to lodge a complaint with your local supervisory authority.
Response Times:
Data access/rectification/erasure requests: Within 30 days
Data breach notifications: Within 72 hours
General privacy inquiries: Within 5 business days
BY USING TRAKTRADE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY, INCLUDING HOW WE COLLECT, USE, AND SHARE YOUR INFORMATION, YOUR RIGHTS, AND THE DATA PROCESSING RELATED TO LOAN REPAYMENT, INACTIVE ACCOUNTS, AND ACCOUNT HOLDS AS DESCRIBED IN OUR TERMS AND CONDITIONS.