Privacy Policy

1. 1. Who We Are

SwapRocket operates a cryptocurrency exchange service that allows users to swap one cryptocurrency for another. Our service is designed to be simple, secure, and accessible.

This Privacy Policy applies to information we collect when you use our website, mobile applications, and other online products and services (collectively, the "Services"), or when you otherwise interact with us.

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website or sending you a notification).

2. 2. Our Privacy-First Data Policy

At SwapRocket, we prioritize your privacy and are committed to a minimal data collection approach. For standard use of our exchange service, we do not collect personal information about our users beyond what is strictly necessary to provide our services:

No personal identification by default: We do not require names, email addresses, phone numbers, or other personal identification details to use our standard exchange service
No KYC for standard exchanges: We do not require government IDs, proof of address, or other verification documents to use our standard exchange service. In limited cases required by law or to meet anti-money-laundering obligations — for example, where a transaction is flagged by our monitoring systems — we may request verification information, as described below and in our Terms of Use
No IP-based profiling: We do not use your IP address to build advertising profiles or to track you across other websites. Your IP may be processed transiently to operate the service securely and to screen access from sanctioned jurisdictions, but it is not used to identify you
No cross-site tracking: We do not use cookies to track you across other websites or to sell your data. We use only essential and limited analytics cookies, as described in our Cookie Policy

The only information visible to our system is:

Public blockchain data: Transaction hashes and wallet addresses that are already publicly available on the blockchain
Temporary session data: Minimal technical information required to process your exchange that is immediately discarded after your session ends
Optional communications: If you choose to contact our support team, we temporarily store that communication to resolve your issue

Our philosophy is simple: we believe you shouldn't have to sacrifice your privacy to exchange cryptocurrencies.

Identity Verification (KYC) Data When Required

For standard use of our exchange service, we do not collect KYC or identity data. However, where required by applicable law, where a transaction is flagged by the monitoring systems of our licensed liquidity or processing partner, or where illicit activity is reasonably suspected, we (or that partner) may collect and process the following, as described in our Terms of Use:

A government-issued identification document (such as a passport, national ID, or driver's license)
Proof of residential address
Proof of source of funds or source of wealth
Information regarding the purpose and nature of the transaction

Where we process this data, our legal basis is compliance with a legal obligation and our legitimate interest in preventing financial crime (anti-money-laundering and counter-terrorist-financing). Such records are retained only for the period required by applicable AML/CTF law and are then deleted.

3. 3. Children

Our Services are not directed to children under the age of 18, and we do not knowingly collect personal information from individuals under 18 years of age. If we learn that we have collected personal information from an individual under 18 years of age, we will promptly delete that information.

4. 4. How We Provide Services Without Personal Data

SwapRocket is designed to provide cryptocurrency exchange services with minimal to no personal data:

Processing transactions: We process cryptocurrency transactions using only public blockchain addresses
Service improvements: We develop and improve our services based on anonymous, aggregated usage patterns
Customer support: We respond to support requests while minimizing data collection
Security: We maintain platform security without tracking individual users

Unlike traditional exchanges, we do not:

Create user profiles or personalized experiences based on your data
Track or analyze individual user behavior on our platform
Send marketing communications or promotional materials
Sell your information to third-party advertisers or data brokers

5. 5. How We Share Data

We do not sell your data. We share information only with the limited infrastructure and compliance partners, and the authorities, described below:

No data sales: We never sell, rent, or trade your information to advertisers or data brokers
Verification only when required: We do not use external identity-verification services for standard exchanges; such services are used only where KYC is triggered, as described in this Policy and our Terms of Use
No marketing partners: We never share your information with marketing partners for their own use
Compliance and infrastructure partners: We work with blockchain-analytics and transaction-monitoring providers to screen for sanctions and illicit activity, with liquidity partners that fulfil your swap, and with law enforcement or regulators only when specifically required by applicable law

When interacting with blockchain networks, only the minimum required public information (wallet addresses, transaction hashes) is transmitted to facilitate transactions - this is inherent to how blockchain technology works and is not additional data collection.

Some of our service providers and partners may be located outside your country of residence. Where any personal data is transferred internationally, we take steps to ensure it is protected by appropriate safeguards consistent with applicable data-protection law.

We believe privacy is a fundamental right in the cryptocurrency space. By not collecting personal data, we eliminate the risk of data breaches and unauthorized sharing.

6. 6. Minimal Data Retention

Our no-data-collection policy means we have very little to retain in the first place. Here's our approach:

Session data: Automatically deleted when your exchange is completed
Support communications: Retained only until your issue is resolved, then deleted
Public blockchain data: This exists on the public blockchain, not in our databases

We maintain this minimal approach to data retention to provide you with a private, secure exchange experience while still maintaining the functionality of our platform.

7. 7. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

The right to access personal information we hold about you
The right to request correction or deletion of your personal information
The right to request the deletion of your personal information
The right to restrict or object to our processing of your personal information
The right to object to our processing of your personal information
The right to data portability
The right to withdraw consent where our processing is based on your consent

To exercise these rights, please contact us using the information provided in the "Contact" section below. Note that some of these rights may be limited where we have compelling reasons to continue processing your information.

Depending on your jurisdiction (for example, under the GDPR or CCPA), you may also have the right to lodge a complaint with your local data-protection or supervisory authority.

8. 8. Contact

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: support@swaprocket.io

Table of Contents