xiwire

This Privacy Policy explains how XiWire ("XiWire", "we", "us") collects, uses and protects personal information when you use our platform, websites and APIs (the "Service"). We act as a data controller for the information described below.

1. Information We Collect

We collect the following categories of information:

Account information: name, business details, email address, phone number and login credentials.
Verification information: identity documents, ownership and KYC data required for compliance.
Transaction information: invoices, deposits, withdrawals, wallet addresses and on-chain references.
Technical information: IP address, device and browser data, and usage logs collected automatically.

2. How We Use Information

We use personal information to:

provide, operate and secure the Service;
verify identity and meet anti-money-laundering, sanctions and other legal obligations;
process transactions and provide support;
detect, prevent and investigate fraud and abuse; and
improve the Service and communicate with you.

3. Legal Bases

We process personal information where it is necessary to perform our contract with you, to comply with a legal obligation, for our legitimate interests in operating and securing the Service, or with your consent where required.

4. How We Share Information

We share information only as needed:

Service providers: hosting, node providers, identity verification and analytics vendors that process data on our behalf.
Legal and regulatory: authorities, regulators or law enforcement where required by law.
Corporate transactions: in connection with a merger, acquisition or sale of assets.

We do not sell personal information.

5. Blockchain Data

Transactions processed through the Service are recorded on public blockchains. Information written to a blockchain, such as wallet addresses, amounts and timestamps, is public, permanent and outside our control. It cannot be changed or deleted.

6. Data Retention

We retain personal information for as long as your account is active and for as long afterwards as required to meet legal, regulatory, tax and dispute-resolution obligations. Verification records, in particular, may be retained for periods mandated by anti-money-laundering law.

7. Security

We use technical and organisational measures to protect personal information, including encryption, access controls and audit logging. No system is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict or port your personal information, or to object to certain processing. To exercise these rights, contact us through the contact page. Some rights are limited where we are legally required to retain data.

9. International Transfers

We may process and store personal information in countries other than your own. Where we transfer data internationally, we use appropriate safeguards consistent with applicable data- protection law.

10. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

11. Children

The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date and, where changes are material, provide reasonable notice.

13. Contact

For privacy questions or requests, reach us through the contact page.