Last Updated: September 24, 2026
1. Information We Collect
To provide you with secure cryptocurrency exchange services, we collect the following data:
- Identity Information: Name, Date of Birth, Government-issued ID, and biometric data collected during the KYC verification process.
- Financial Data: Bank account details, UPI IDs, cryptocurrency wallet addresses, and full transaction histories on the WellCore platform.
- Technical Data: IP addresses, browser types, device identifiers, and login timestamps to prevent fraud and account takeovers.
2. How We Use Your Data
Your data is strictly utilized to facilitate core platform features: matching P2P orders, processing spot market trades, authorizing withdrawals, and shipping physical Metal Cards to your address. Additionally, we use technical data to run automated Risk Engines that flag suspicious, fraudulent, or wash-trading activities.
4. Data Security
We employ AES-256 encryption for all data at rest and TLS 1.3 for data in transit. Sensitive KYC documents are hashed and stored in isolated secure vaults. However, no digital transmission is 100% secure. You are responsible for securing your account with robust passwords and Two-Factor Authentication.
5. Your Privacy Rights
Depending on your jurisdiction (e.g., GDPR in Europe), you may have the right to request access to your data, correct inaccuracies, or request data deletion. Note that due to global Anti-Money Laundering (AML) retention laws, financial transaction records and KYC data cannot be deleted for a minimum of 5 years, even if you close your account.