Privacy Policy

25 September 2026

1. Controller

FinCras & InvCras Digital Services LLC, Suite 305, Griffith Corporate Centre, Beachmont, Kingstown, St. Vincent and the Grenadines is responsible for your personal data. Contact: [email protected].

2. Data we collect

Account data (email, password hash, two-factor settings), identity verification data and documents you upload, transaction data (deposits, orders, trades, withdrawals, addresses), and technical data (IP address, browser, session and security logs).

3. Why we use it

To provide and secure the Service, verify identity, prevent fraud and money laundering, meet legal obligations, and answer support requests. We do not sell your data.

4. How we protect it

Passwords are stored as Argon2 hashes. Identity documents are encrypted at rest and only accessible to authorised staff; every access is logged. Connections use HTTPS.

5. Retention

We keep data as long as your account is open and afterwards as required by law (for example anti-money-laundering record keeping).

6. Your rights

Depending on your jurisdiction you may request access, correction, deletion, restriction or portability of your data, or object to processing. Contact us at [email protected].

7. Cookies

We only use cookies that are necessary for signing in and security (session and CSRF protection). No advertising or tracking cookies.