Privacy Policy

Data Protection & Privacy Practices · Version 1.3

Privacy Commitment: DeltaChanger values and protects your privacy. This policy explains how we collect, process, store, and safeguard your personal and transactional information in compliance with international data protection standards (including GDPR principles).

1. Information We Collect

We only collect data strictly necessary to facilitate secure exchange services, fulfill anti-fraud obligations, and ensure account integrity:

Order & Transaction Data: Incoming payment system accounts (e.g. AdvCash email, Payoneer ID, WebMoney purse), destination cryptocurrency wallet addresses, amounts, and transaction identifiers.
Account Information: Account name, registered email address, authentication credentials (stored exclusively as cryptographic hashes), and voluntary Telegram contact handles.
Technical & Connection Metadata: Client IP address, detected geographic country origin, user-agent headers, and session tokens captured during order creation and account sign-in for security auditing and compliance.
Verification Information: Identity documents, residential utility records, or source of funds statements voluntarily provided during AML/KYC Tier 2/3 verification.

2. Purpose & Legal Basis for Processing

We process client information under the following lawful bases:

Contract Execution: To calculate live rates, process payment deposits, and execute requested payouts to recipient wallets.
Legal & Regulatory Compliance: To comply with applicable AML/CTF obligations, sanction screening requirements, and fraud prevention standards.
Platform Security & Fraud Prevention: To prevent unauthorized access, mitigate chargebacks, monitor connection anomalies, and safeguard client funds.

3. Data Protection & Security Controls

DeltaChanger employs modern technical and organizational security controls to protect your data against unauthorized access, alteration, disclosure, or destruction:

All web communications are encrypted via modern TLS 1.3 cryptographic protocols with strict Perfect Forward Secrecy.
Sensitive compliance documents and verification records are stored on isolated, encrypted storage partitions with purpose-limited administrative access.
Passwords and sensitive tokens are hashed using salted cryptographic algorithms (Bcrypt with minimum 12 rounds).

4. Non-Disclosure & Third-Party Sharing

We strictly do not sell, rent, trade, or monetize your personal data. Your information is never disclosed to commercial third parties, except in the following necessary contexts:

Payment system gateways and liquidity providers solely to the extent required to execute your specific transaction.
Law enforcement or regulatory authorities upon receiving a formal, valid, and legally binding court order or regulatory subpoena.

5. Data Retention & Your Rights

Transaction logs, order history, and AML/KYC records are retained for the statutory period mandated by financial regulations (typically 5 years). You have the right to request access to your personal data, request correction of inaccurate records, or request account closure and data anonymization, subject to regulatory record-keeping laws.

6. Contact Our Data Protection Officer

For inquiries concerning your personal data or to exercise your privacy rights, please reach out to our privacy team at privacy@deltachanger.test.