Privacy Policy

1. Data we need

Exchanges require assets, amounts, wallet addresses, order numbers, statuses and TXIDs. An account uses a random identifier and protected sign-in credentials; email is stored only if you choose an email account. Support uses the details you provide about your order. Orders created through ONIX are processed without KYC or AML checks. If your deposit is accepted but the exchange cannot be completed, we return the funds without KYC or AML checks and without requiring documents.

2. Service use only

Information is used exclusively to execute exchanges, operate accounts, deliver service emails, provide support and calculate referral rewards. To calculate quotes and process orders, we share the recipient wallet address, asset and network details, and the exchange amount with an external service provider. We do not sell or rent data, share it with advertisers or use it for third-party profiling. Public referral links do not disclose customer wallets, email addresses or access to customer orders to partners.

3. Accounts and sessions

Sign-in uses a protected cookie lasting up to 7 days. Following a referral link stores the referring account in a cookie for up to 30 days. Your language preference is stored in your browser. Accounts do not store browsing, IP or browser histories or device fingerprints. Email opens and link clicks are not tracked.

ONIX does not keep browsing logs or track visits to order pages and clicks on review links. IP addresses may be used briefly in memory to prevent abuse. Order-page activity records collected before tracking was disabled are stored encrypted with restricted access.

4. Protection and retention

Exchange records, email addresses, payout details and queued service-email content are encrypted at rest. Passwords and sign-in keys are stored only as protected verification values. Access to operational databases and private reports is restricted. Information is retained for account operation, exchange history and rewards; private recovery copies are retained for no more than 24 hours.

5. Deletion and your rights

You can delete your account in account settings after active operations and balances are resolved. Sign-in data, email, sessions and account links are removed; separate encrypted exchange records remain. Deletions are reapplied if a recovery copy is restored. Contact support for corrections or deletion questions; no passport or selfie is required.