Privacy Policy

1. Who we are

Terafab FX operates the investment platform at terafabfx.com. For privacy-related requests, use the Contact page and mark the message as a privacy inquiry.

2. Data we collect

We collect:

• Account data — email, password (hashed), and preferences you set.
• Identity data — information and documents required for KYC/AML (government ID, selfie or biometric match, and any supporting details requested during verification).
• Transaction data — deposit and withdrawal addresses, amounts, timestamps, product selections, and balances in BTC/USDT.
• Technical data — IP address, device/browser type, and logs necessary for security and fraud prevention.
• Communications — messages you send us and responses we provide.

3. How we use data

We use personal data to:

• Create and operate your account and process investments.
• Complete KYC/AML checks and meet legal and regulatory obligations.
• Secure the platform (2FA, address whitelisting, fraud and sanctions screening).
• Provide support, send important service notices, and respond to requests.
• Improve the product and maintain audit trails required for custody and compliance.

We do not sell personal data.

4. Legal bases

Where applicable law requires a legal basis, we rely on: performance of our contract with you; compliance with legal obligations (including AML); legitimate interests in securing the platform and preventing fraud; and, where required, consent.

5. Sharing

We share data only as needed with:

• Service providers that help us run KYC, custody operations, hosting, and support (under contractual confidentiality and security obligations).
• Auditors and professional advisors as required for independent audits.
• Regulators, law enforcement, or courts when required by law or valid legal process.

6. Retention

We retain account and transaction data for as long as your account is active and thereafter as required by law, AML rules, and legitimate business needs (including dispute resolution and audit). KYC documents are kept for the periods mandated by applicable regulations.

7. Security

We use technical and organizational measures appropriate to the sensitivity of the data, including encryption in transit, access controls, and the custody practices described on the Security page. No system is perfectly secure; you remain responsible for protecting your credentials and devices.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data, or to object to certain processing. To exercise these rights, contact us via the Contact page. We may need to verify your identity before responding. Some data cannot be deleted while legal retention obligations apply.

9. International transfers

Data may be processed in countries other than your own. Where we transfer data internationally, we use appropriate safeguards required by applicable law.

10. Changes

We may update this Privacy Policy from time to time. The “Last updated” date will change, and material updates will be highlighted on the site or by notice where appropriate.

11. Contact

For privacy questions or requests, use the Contact page and mark the inquiry as privacy-related.