1. What data we collect
To open and run your account we collect: your name, email, date of birth, government-issued ID, address, and the financial information required by KYC/AML regulations. We also log technical data like IP address, device type, and the time of each login.
2. How we use your data
- To open, operate, and protect your account.
- To execute trades and settle deposits / withdrawals.
- To meet legal obligations (KYC, AML, tax reporting).
- To detect fraud and unauthorized access.
- To send service emails (we'll never sell your data to advertisers).
3. Who we share it with
Only the parties that need it to run your account: our custodian banks, our trading-desk partner, our auditors, and regulators. We do not sell personal data and we do not share it for marketing.
4. How long we keep it
For the lifetime of your account plus seven years after closure, as required by US securities recordkeeping rules. After that window we permanently delete or anonymize it.
5. Your rights (GDPR & CCPA)
You can request a copy of the data we hold on you, ask us to correct it, or ask us to delete it. We respond within 30 days. To exercise these rights, email privacy@pocoshift.com.
6. Cookies
We use one essential cookie for your login session. We do not use third-party advertising cookies. A small amount of privacy-preserving analytics helps us understand which pages are slow.
7. International transfers
EU customers' personal data is stored on servers located in the European Union. If we ever need to transfer data outside the EU we will rely on Standard Contractual Clauses approved by the European Commission.
8. Contact our DPO
Our Data Protection Officer can be reached at dpo@pocoshift.com. You also have the right to lodge a complaint with your local data protection authority.