Crevion - CREVION PRIVACY POLICY

CREVION PRIVACY POLICY

Effective Date: April 2026

1. Introduction and Scope

Crevion Inc. ("Crevion," "Company," "we," "us," or "our") respects the privacy of our users ("you" or "your"). This Privacy Policy describes how we collect, use, store, disclose, and protect your personal information when you access the Crevion website, mobile application, APIs, and related trading services (collectively, the "Platform").

This policy applies to all individuals who register for an account, use our services, or otherwise interact with Crevion.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our policies and practices, you must discontinue use of the Platform immediately.

2. Information We Collect

To provide a secure and compliant trading environment, we collect several types of information:

A. Identity and Contact Information (KYC Data)

Full legal name, date of birth, nationality, and residential address.

Government-issued identification numbers (e.g., Passport, Driver's License, National ID).

Photographs, videos, or "liveness" checks for biometric verification.

Tax identification number (SSN/ITIN) for specific reporting thresholds (e.g., IRS forms).

B. Financial and Transactional Information

Blockchain wallet addresses and transaction IDs.

Records of deposits, withdrawals, trade history, and account balances.

Payment method details (bank account or card numbers) which are tokenized and processed by third-party payment processors (we do not store full credit card numbers on our servers).

C. Technical and Device Information

IP address, browser type and version, operating system, and device identifiers.

Access times, pages viewed, and clickstream data (usage analytics).

Geolocation data derived from your IP address for security and regulatory compliance (to confirm you are not accessing the Platform from a sanctioned jurisdiction).

D. Correspondence

Records of communication with Crevion Support, including emails, chat logs, and call recordings (where permitted by law).

3. How We Use Your Information

Crevion uses your personal data strictly for the following legitimate business and legal purposes:

Service Provision: To create and maintain your account, execute trades, process deposits/withdrawals, and provide customer support.

Compliance and Legal Obligations: To verify your identity, screen against global sanctions/watchlists (AML/CFT), prevent fraud and money laundering, and respond to lawful requests from government authorities or court orders.

Security: To monitor for suspicious or unauthorized activity, protect against cyber threats, and enforce our Terms of Service and Trade Policy.

Communication: To send administrative updates, service alerts, security notifications, and, with your separate consent, marketing communications (which you may opt-out of at any time).

Research and Development: To analyze aggregated and anonymized usage data to improve the Platform's performance and user experience.

4. How We Share Your Information

We do not sell, rent, or trade your personal information for monetary consideration. However, we may share data with the following categories of third parties:

Service Providers: Trusted vendors who perform services on our behalf, such as identity verification (KYC providers), cloud hosting, email delivery, and blockchain analytics (e.g., Chainalysis). These providers are contractually bound to use data only as instructed by Crevion and to maintain confidentiality and security.

Blockchain Networks: Please note that transaction details (sender/receiver addresses and amounts) are recorded on public blockchains. Once a transaction is broadcast to the blockchain, this data is permanent, immutable, and publicly accessible. Crevion cannot delete or alter this data.

Affiliates: Within our corporate group for internal administration and risk management purposes.

Regulatory and Law Enforcement: We may disclose information if required to do so by law, subpoena, or if we believe in good faith that such action is necessary to comply with legal processes, protect the safety of our users, or investigate fraud.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required by law.

Account Records: Due to financial regulations and anti-money laundering laws, we are legally obligated to retain your identity records and transaction history for a period of at least five (5) years following the closure of your account, even if you request deletion of your data.

Inactive Accounts: For accounts that are inactive but not formally closed, we will retain data in accordance with our legal retention schedule.

6. Data Security

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect your information. This includes:

End-to-end encryption (TLS/SSL) for data transmission.

Cold storage for the majority of digital assets held in custody.

Multi-signature technology for transaction approvals.

Regular penetration testing and security audits.

No Security Guarantee: While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. You are responsible for maintaining the secrecy of your password and enabling Two-Factor Authentication (2FA).

7. Your Privacy Rights and Choices

Depending on your jurisdiction of residence (including California, EU/UK, and others), you may have certain rights regarding your personal data:

Right to Access/Portability: Request a copy of the personal data we hold about you.

Right to Rectification: Request correction of inaccurate or incomplete information.

Right to Erasure: Request deletion of your data, subject to legal retention obligations (see Section 5).

Right to Object/Restrict: Object to certain processing activities.

Opt-Out of Marketing: You can unsubscribe from marketing emails using the link provided in the footer of every email.

To exercise these rights, please contact us at privacy@crevion.com. We will respond to your request within the timeframe required by applicable law. Please note we may require specific identity verification before processing a data request to prevent unauthorized disclosure.

8. International Data Transfers

Crevion is headquartered in the United States and utilizes global cloud infrastructure. By using the Platform, you acknowledge that your information will be transferred to and processed on servers located in the United States and other jurisdictions. These jurisdictions may have data protection laws that differ from those in your country of residence. We ensure such transfers comply with applicable legal standards (such as Standard Contractual Clauses where required).

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (pixels, web beacons) to:

Keep you logged in (Essential Cookies).

Remember your preferences (Functional Cookies).

Analyze traffic and performance (Analytics Cookies).

You can control cookie settings through your browser. However, disabling essential cookies may render parts of the Platform unusable.

10. Children's Privacy

The Crevion Platform is not directed to, nor intended for use by, individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a minor without parental consent, we will take steps to delete that information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Effective Date" at the top of this page will be updated accordingly. If the changes are material, we will provide fifteen (15) days' notice via email or a prominent notice on the Platform before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the revised Privacy Policy.

12. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer (DPO):

Crevion Privacy Office

Address: 4300 Biscayne Blvd, Suite 203, Miami, Florida 33137

Email: privacy@crevion.com

Phone: +1 (786) 295-9301