Privacy Policy

Last Updated July 30, 2026

Introduction

This Privacy Policy (this “Policy”) explains how Cryptomus website (“Cryptomus”, “Website”, “we”, “us”, “our”) collects, uses, shares and protects the personal information you provide to us when you use the Cryptomus.com or our products. This Privacy Policy governs the collection, use, disclosure and protection of our Customer's Personal Information processed through the Site and Services.

Cryptomus is committed to protecting your privacy. We take all necessary legal, technical and organizational measures to ensure the confidentiality, integrity and availability of your Personal Information.

By “Personal Information” or “Personal Data” we mean any data by which you can be identified or which can help identify you.

Our Contact Details

If you have any questions regarding data protection, please contact us at: [email protected]

What Type of Personal Information We Collect

The types of Personal Information we may collect include:

•
Account and Profile Details. When creating an Account, we may collect information such as your full name, mobile phone number, and/or email address, identification information etc. Depending on the type of Account and applicable requirements, we also request details, including your legal entity name, Identification of directors, shareholders and authorised signatories etc. Also, we collect information included in our AML policy.
•
Financial and Investment Information. To verify your eligibility for certain account types or transactions available through the Platform, we may collect financial and investment-related information. This may include your investment background, financial qualifications and training (including certifications, issuing institutions, and issuance dates), annual income, liquid assets, estimated net worth, source of funds, source of wealth, and information regarding whether another financial institution has previously refused your account application.
•
Additional Compliance Information. To satisfy legal and regulatory obligations, we may request certain supplementary Personal Information, including details relating to your status as a Politically Exposed Person or whether you appear on any sanctions or restricted persons lists.
•
Communications and Support Interactions. We collect information that you provide when communicating with us, including through email correspondence, support requests, feedback submissions, or contact forms available on the Platform. This information is used to address your inquiries, provide assistance, process transactions, and enhance the functionality and quality of the Platform.

We gather and process Personal Information about you in several ways: directly from you when you create an account or provide information through the Platform, automatically through your interactions with the Platform, and from third parties when required to meet legal or regulatory obligations. We could also receive some information from publicly available databases, sanctions lists, government registers and commercial compliance databases or from our contractors.

Please note that we will not be able to provide our services to you if you refuse to provide us information according to our KYC/AML requirements communicated to you once you decide to apply for any of our services that require verification of identity and ongoing monitoring of activity. Please keep in mind that in some cases we may require additional details and documents for KYC and AML/CTF purposes.

Please note that processing of your Personal Data may include automated decision-making including profiling. We may apply automated decision-making including profiling for onboarding, maintaining the account with us and fraud prevention purposes.

How We Get the Information and Why We Have It

We process our clients' data for the following purposes:

•
to provide our services to you, as individual, or a corporate client you represent;
•
to contact you or reply to your requests;
•
to comply with our legal obligations (e.g. KYC/AML requirements)
•
to provide assistance in case of criminal investigation and regulatory action;
•
to protect your assets from unauthorized access;
•
to prevent any fraud and scam activity;
•
to provide you information on our products, news and updates;
•
to resolve disputes and protect your interests or interests of other users.

Where applicable, we process Personal Data on one or more of the following legal bases:

•
Your consent. You are able to withdraw your consent at any time by contacting us at [email protected]
•
We have a contractual obligation;
•
We have a legal obligation to comply with AML/CTF requirements under the applicable laws and regulations, and keep records for tax purposes;
•
We have a legitimate interest in providing the necessary updates regarding our services, prevent any fraudulent activity proactively and retrospectively, and contacting employees of our clients and business partners.

Personal Information Collected Automatically

We may collect personal information automatically when you use our Services, as described below.

•
Cookies. Cookies are small text files placed in device browsers that store preferences and facilitate and enhance your experience.
•
Pixel Tags/Web Beacons. A pixel tag (also known as web beacon) is a piece of code embedded in our Services that collects information about engagement on our Services.
•
Geolocation Information. This may include your physical location expressed through latitude and longitude coordinates obtained using technologies such as GPS, Wi-Fi networks, or cellular tower signals.
•
A browser fingerprint technology is a collection of information about your web browser and device that can be combined to uniquely identify or track you online, even without cookies.

Use of cookies

Cookies

Cookies are small alphanumeric files stored on your device through your web browser for record-keeping and functionality purposes. Certain cookies help improve navigation and usability of the Platform, while others enable faster authentication, remember user preferences, or facilitate the monitoring of Platform activity. We use the following categories of cookies:

•
Session Cookies
Session cookies are temporary and remain active only for the duration of your browsing session. They are automatically deleted once you close your browser or shut down your device. These cookies allow our systems to recognize you during a single session, process transactions and requests, and maintain secure authentication as you navigate the Platform.
•
Persistent Cookies
Persistent cookies remain stored on your device after your browsing session has ended and continue until they expire or are manually deleted. We use persistent cookies to collect aggregated and statistical information regarding Platform usage and user behavior, helping us improve functionality and performance over time. Please note that the Platform currently does not respond to browser-based “Do Not Track” signals.

Who we share your Personal Information with

We may disclose or transfer your information, including Personal Information, in the following circumstances:

•
Affiliates
We may share information collected from you with our affiliated companies when necessary to provide the Platform, or related services. Any Personal Information disclosed to such entities will continue to be processed and protected in accordance with this Policy.
•
Service Providers
We may provide your information to third-party vendors, contractors, consultants, agents, and other service providers that perform services on our behalf. Such parties are authorized to use the information only as necessary to provide services to us and are contractually required to protect the confidentiality and security of the information.
•
Compliance with Legal Obligations
We may disclose your information when required to comply with applicable laws, regulations, court orders, legal proceedings, subpoenas, governmental requests, or other lawful processes.
•
Protection of Rights, Security, and Safety
We may disclose information where we reasonably believe such disclosure is necessary to investigate, prevent, or address unlawful activities, fraud, security incidents, violations of our Terms of Use or this Privacy Policy, threats to the safety or rights of any individual, or to establish, exercise, or defend legal claims.
•
Aggregated Information
We may collect, use, analyze, and share aggregated information with third parties or the public for business, research, analytical, marketing, advertising, product development, and other lawful purposes.

When sharing Personal Information with third parties, we take reasonable measures to ensure that such recipients are subject to obligations consistent with this Policy or maintain privacy and security standards that provide a level of protection equivalent to or greater than those described herein.

Personal Data Retention

We will ensure that any information we need for any purpose shall not be kept for longer than it is necessary. We retain your personal data just to comply with our legal obligations, resolve disputes, and protect your and our legitimate interests

We will retain your personal data for a maximum of seven (7) years after the termination of the legal relationship with us.

You can always request the deletion of personal data. But please be aware that in some cases we are required to retain your information to comply with legal requirements.

Your Rights

Under data protection law, you have rights including:

•
Your right of access - You have the right to ask us for copies of your personal information.
•
Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
•
Your right to erasure - You have the right to ask us to erase your personal information.
•
Your right to restriction of processing - You have the right to ask us to restrict the processing of your information.
•
Your right to object to processing - You have the right to object to the processing of your personal data.
•
Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at support [email protected] if you wish to make a request.

Please note that in some cases we will not be able to fulfill your request due to our legal obligations or overriding legitimate interest. In such cases we will explain you the reasons why your request cannot be fulfilled.

Security

Cryptomus has implemented security measures to comply with acknowledged international security standards.

Policy Changes

Cryptomus may introduce amendments to the current Policy at any time. We may notify you on our Website or via E-mail [email protected].