We collect data directly from you (forms, onboarding, platform use), automatically via cookies/SDKs, and from third parties such as identity verification providers, payment processors, credit/affordability bureaus (where lawful), analytics vendors, and public sources (sanctions/PEP lists, corporate registries).

We process personal data to: create and maintain accounts; provide trading, custody, and support services; authenticate users; perform KYC/AML, fraud prevention, and sanctions screening; execute payments and corporate actions; monitor compliance and risks; operate and improve platforms (including telemetry and debugging); personalize content and communications; conduct research, analytics, and reporting; and meet legal, regulatory, and tax obligations.

We use necessary cookies for core functionality and (where permitted) optional cookies/SDKs for analytics, performance, personalization, and marketing. You can change preferences in our Cookie Settings panel (where available) or your browser. Blocking certain cookies may impact site functionality. We do not respond to “Do Not Track” signals where not legally required.

We may share data with: group companies; cloud and IT vendors; KYC/AML, fraud, and sanctions providers; payment/banking partners; auditors, professional advisers, and regulators; and with your consent, marketing/analytics partners. International transfers are protected by appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or other lawful mechanisms. We take steps to ensure recipients protect your data.

We keep personal data only as long as necessary for the purposes described or as required by law and regulation (for example, KYC/AML and transactional records must often be retained for fixed statutory periods after account closure). When no longer needed, we securely delete or anonymize data.

We implement administrative, technical, and physical safeguards designed to protect personal data (access controls, encryption in transit and at rest where appropriate, logging/monitoring, secure development practices, and employee training). No system is perfectly secure; please use strong passwords, enable multi-factor authentication, and notify us of any suspected compromise.

Depending on your location, you may have the right to request access, correction, deletion, or portability of your data; to object to or restrict processing; and to withdraw consent. California residents may opt out of “sharing”/targeted advertising and certain “sales” of personal information; India residents may withdraw consent subject to lawful processing requirements. To exercise rights, see Contact. We will verify your request and respond within the timeframes required by law.

Our services are not directed to children and we do not knowingly collect personal data from individuals under the minimum age required to open an account in their jurisdiction. If you believe a child has provided us data, please contact us to request deletion.

We may update this Policy from time to time. Material changes will be highlighted on this page and, where appropriate, notified to you via email or in-app notice. Continued use of our services after changes become effective constitutes acceptance.