Privacy Policy
This policy describes information associated with using DOTExchange.io, including exchange orders, support and transaction reviews. It explains why information is needed, how it is handled and how to raise a privacy request.
Information Used to Handle an Exchange
An order connects the selected assets and networks, sending and receiving amounts, destination address and any required destination tag. It also has an order identifier, transaction references and processing history needed to connect the deposit to the payout.
Wallet addresses and transaction references can identify activity on public blockchains. They can also relate to a person when combined with other records, so they should not be treated as automatically anonymous.
A standard order starts without a public customer profile. The private order link provides access to exchange details and should be kept secure.
If you contact support, the case also includes your reply address, messages and the evidence you choose to provide. Additional review information is described below and in the AML Policy.
Purposes of Processing
Order information is used to prepare the quote, identify the payment, process the exchange, deliver the payout and explain an unresolved stage. Support correspondence is used to respond to the request and keep related case details together.
Security and connection information is used to operate the website, investigate abuse and protect order access. Review information is used to assess the specific concern, verify relevant facts and meet applicable requirements.
Information requested for one purpose should be proportionate to that purpose. Do not send recovery phrases, private keys or wallet passwords; they are not required to investigate an exchange or a privacy request.
Review Information and Supporting Evidence
An order review can require information beyond the ordinary payment fields. Depending on the case, a request may concern identity, control of a relevant account, the transaction purpose or the source of funds.
The request should explain what is needed and how to provide it. Send documents only through the collection method supplied for the case rather than attaching unsolicited sensitive material to a general inquiry.
Access to case evidence is restricted to people and service providers who need it for the relevant task. The same principle applies when support passes an issue to the team responsible for reviewing it.
Technical Records and Browser Storage
The service uses the connection and security records needed to operate the website and protect it against misuse. These can include IP addresses, request times, browser or device information and access or error events.
Essential browser storage supports functions such as keeping a session or the order interface usable. Optional analytics and advertising tracking are outside the standard order-processing model described here.
Browser controls can remove or restrict stored information. If you clear a session, keep your own order reference and private link so you can return to the exchange where supported.
Service Providers and Other Disclosures
Information needed for hosting, communication, support and exchange execution can be handled by providers performing those tasks. Transaction-risk or verification services may receive information relevant to a review when they are involved.
The information shared should match the purpose and the recipient’s role. A hosted wallet, sending platform or receiving platform also applies its own data practices to the activity it handles.
Information may be disclosed where a valid legal requirement applies or where necessary to address fraud, a dispute or a security incident under applicable rules. This policy does not make public blockchain records private or give DOTExchange.io control over an external provider’s records.
Retention and Security
Order and support records are retained for handling the exchange, resolving related requests and disputes, and meeting applicable record duties. Review evidence and technical records are kept according to the purpose and continuing need for each category.
When the purpose and any applicable retention requirement end, we delete or anonymize the records where appropriate. Public-chain records exist separately and cannot be removed by deleting a support case or a website record.
HTTPS protects the connection to the order flow, and access to order details and case records is restricted. No transmission or storage method provides an absolute security guarantee; protect your own devices and private order access as well.
Privacy Requests
Send a privacy request to [email protected], stating what information or action the request concerns. Include a relevant order reference if it helps locate the records.
Depending on the law that applies, you may have rights concerning access, correction, deletion, restriction, objection or portability. These rights can be subject to conditions, including records that must be kept for a continuing lawful purpose.
The team may need proportionate evidence to verify that the request concerns your information before disclosing or changing it. It will not ask for a recovery phrase or private key as proof.
Where applicable, you can also raise a complaint with the relevant data-protection authority. The contact page provides the service’s other request channels.