LEGAL
Privacy Policy
Effective Date: April 1, 2026 · Last Updated: April 1, 2026
1. Introduction
Aeltrix Labs LLC ("Company," "we," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the AELX Pay platform ("Service").
By using the Service, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
2.1 Personal Information
When you register for an account or use our Service, we may collect:
- Full legal name and date of birth
- Email address and phone number
- Business name and registration details (for merchant accounts)
- Government-issued identification documents (for KYC verification)
- Bank account or wallet address information
2.2 Usage Data
We automatically collect certain information when you access the Service:
- IP address and browser type
- Device identifiers and operating system
- Pages visited, time spent, and navigation patterns
- Referring URLs and search terms
2.3 Blockchain Data
Transactions on the Aeltrix blockchain are publicly visible. This includes wallet addresses, transaction amounts, timestamps, and settlement hashes. This data is inherent to blockchain technology and cannot be deleted or modified.
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Process transactions and send settlement confirmations
- Verify your identity and comply with KYC/AML requirements
- Detect and prevent fraud, abuse, and security threats
- Communicate with you about service updates and support requests
- Comply with legal obligations and regulatory requirements
- Generate aggregated, anonymized analytics to improve the platform
4. Information Sharing
We do not sell your personal information. We may share your information with:
- Licensed Payment Service Providers (PSPs): To process fiat on-ramp and off-ramp conversions
- KYC/AML Verification Partners: To perform identity verification and sanctions screening
- Regulatory Authorities: When required by law, regulation, or legal process
- Service Providers: Third-party vendors that assist in operating the Service (hosting, analytics, customer support)
All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.
5. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, or as required by law. Specifically:
- Account data: Retained for the duration of your account plus 5 years
- Transaction records: Retained for 7 years per ADGM regulatory requirements
- KYC documents: Retained for 5 years after account closure
- Usage data: Retained for 24 months, then anonymized
6. Data Security
We implement industry-standard security measures to protect your information, including:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for data at rest
- Regular security audits and penetration testing
- Access controls with role-based permissions
- Infrastructure monitoring and anomaly detection
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Subject to applicable law, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Portability: Request a machine-readable copy of your data
- Objection: Object to processing of your data for certain purposes
To exercise these rights, contact us at legal@aeltrix.to. We will respond within 30 days.
8. Cookies
We use essential cookies for session management and authentication. We do not use advertising or third-party tracking cookies. Session cookies are stored temporarily and deleted when you close your browser. We use sessionStorage for non-critical UI preferences.
9. International Transfers
Your information may be transferred to and processed in jurisdictions other than your country of residence. We ensure that appropriate safeguards are in place in accordance with ADGM data protection regulations.
10. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on the Service at least 30 days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision.
12. Contact
For privacy-related inquiries or to exercise your data rights, contact:
Aeltrix Labs LLC — Data Protection
ADGM, Al Maryah Island
Abu Dhabi, United Arab Emirates
Email: legal@aeltrix.to