Privacy Policy

This Privacy Policy explains how Welcome to Arbitex! ("we", "us", "our") collects, uses, discloses and safeguards personal data when you use our website and services. We process personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), where applicable.

1. Data Controller

The data controller is the website operator. To finalize this section, please provide: company legal name, registered address, registration number, and contact email. Until provided, you can reach us at support@arbitex.io (placeholder).

2. Categories of Personal Data We Collect

• Identification data: name, email address, account ID.
• Contact data: country code, phone number, country.
• Account data: password (hashed), referral code, referred by, tier, balances and transactions related to platform features.
• Technical data: IP address, device and browser information, cookies and similar technologies.
• Communications: messages, support requests, and email preferences.

3. Purposes and Legal Bases (GDPR)

• Account registration and authentication — performance of a contract (Art. 6(1)(b) GDPR).
• Provision of platform services, payments, and security — performance of a contract and legitimate interests (Art. 6(1)(b),(f)).
• Fraud prevention, abuse detection, and platform integrity — legitimate interests (Art. 6(1)(f)).
• Legal compliance (e.g., financial record‑keeping, requests from authorities) — legal obligation (Art. 6(1)(c)).
• Marketing communications (where permitted) — consent (Art. 6(1)(a)) or legitimate interests (Art. 6(1)(f)).

4. How We Share Personal Data

We may share personal data with service providers (e.g., hosting, email, analytics, payment/infrastructure vendors) under data processing agreements. We may disclose data when required by law, to protect rights and safety, or in connection with corporate transactions. We do not sell personal data.

5. International Transfers

If personal data is transferred outside your jurisdiction, we implement appropriate safeguards (e.g., Standard Contractual Clauses under GDPR). Details of transfer mechanisms are available on request.

6. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined above, to comply with legal obligations, resolve disputes, and enforce agreements. Retention periods depend on the type of data and legal requirements.

7. Your Rights

Subject to applicable law, you may have the following rights:

• Access: obtain a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data in certain circumstances.
• Restriction: ask us to limit processing in certain cases.
• Portability: receive data in a structured, machine‑readable format.
• Objection: object to processing based on legitimate interests or direct marketing.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.
• CCPA: right to know, delete, and opt‑out of sale/share (we do not sell personal data); non‑discrimination for exercising rights.

To exercise your rights, contact us at support@arbitex.io (placeholder) or via the account area.

8. Cookies and Similar Technologies

We use cookies and similar technologies to provide, secure and improve the services (e.g., session management, analytics). You can control cookies via your browser settings. A separate Cookie Policy may be provided for detailed information.

9. Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction or damage. However, no system can be guaranteed to be 100% secure.

10. Children’s Privacy

Our services are not directed to children under the age of 18 (or age of majority in your jurisdiction). We do not knowingly collect personal data from children.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the interface and/or email, with the updated effective date shown at the top of this page.

12. Contact

To complete this section, please provide your company’s legal address and a dedicated privacy/DPO contact email. Until then, you may contact us at support@arbitex.io (placeholder).