Privacy Policy
This policy explains what personal data we collect to run a custodial exchange, why we collect it, and how we protect it.
Last updated: 23 June 2026
Data we process
- Account data: your email and authentication credentials (passwords are stored hashed by our authentication provider).
- Identity-verification data: your name, country, and government ID and selfie, processed to verify your identity.
- Verification results: the outcome of identity checks and an audit trail of related events.
- Technical data: limited request metadata used for security and reliability.
Purposes and basis
We process this data to operate the service, verify your identity, meet anti-money-laundering and other legal obligations, secure accounts, and provide support. We do not sell personal data.
Our verification provider
Identity documents are processed by Shufti Pro, our verification provider, acting as a processor. We store the verification outcome and an audit trail under server-only access; we do not store your identity documents on your user record.
Who we share with
We share data only with service providers that help us operate (such as our cloud, verification, and infrastructure providers) under appropriate agreements, and where required by law or to prevent fraud. We do not sell your data.
How long, and how protected
We retain verification and audit records for the period required by applicable anti-money-laundering law. Data is encrypted in transit and at rest, access is least-privilege, and sensitive data is never written to application logs.
Exercising your rights
Depending on your jurisdiction you may have rights to access, correct, or delete personal data, balanced against our legal recordkeeping obligations. To make a request, email privacy@americanreservemsb.com.