1. Introduction
This Privacy Policy explains how Capital Crest collects, uses, and protects your information when you use our platform. We take privacy seriously and only collect what we need to run the service and keep your account secure.
2. Information we collect
We collect information in three ways:
- Information you give us directly: your name, email address, phone number, wallet addresses, and identity verification documents when required.
- Information from your use of the platform: deposit and withdrawal history, investment activity, support messages, and settings you configure.
- Technical information: device type, browser, IP address, and session tokens needed to keep you signed in and protect against unauthorized access.
3. How we use your information
Your information is used to:
- Run your account, process deposits, investments, and withdrawals.
- Verify your identity (KYC) where required by law or platform policy.
- Send you notifications about your account activity — never marketing spam.
- Protect the platform from fraud, abuse, and unauthorized access.
- Improve the platform based on how it is used in aggregate.
4. How your information is stored
Account data is stored in a secure database with row-level security, meaning your data is isolated from other users at the database level. Sensitive files (identity documents, statements) are held in encrypted storage accessible only through short-lived signed URLs. Passwords are never stored in plain text — they are hashed using industry-standard methods.
7. Your rights
You have the right to:
- Access the data we hold about you.
- Request corrections to inaccurate information.
- Request deletion of your account and associated data, subject to legal record-keeping requirements (e.g. transaction history that must be retained for compliance).
- Withdraw consent for any optional data processing.
To exercise any of these rights, contact us through the Support page.
8. Data retention
We retain your account information for as long as your account is active. If you close your account, most personal data is deleted within a reasonable time — but certain records (such as transaction history) may be kept for the period required by financial regulations, typically several years.
9. Security
We use encryption for data in transit and at rest, row-level database isolation, and access controls to protect your information. That said, no system is completely immune to security incidents. If a breach occurs that affects your account, we will notify you as soon as we can.
10. Children
Capital Crest is not intended for anyone under 18. We do not knowingly collect information from minors. If you believe we have collected data from someone under 18, contact us and we will delete it.
11. International users
By using Capital Crest, you consent to your information being processed and stored on servers that may be located outside your country of residence. We apply the same protections regardless of where your data is stored.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be announced through the notifications panel and, where required, by email. The date at the top of this page shows when it was last revised.
13. Contact
Questions about this Privacy Policy? Reach us through the Support page. We respond as quickly as possible.