Privacy Policy
Last updated: 1 January 2026
Data We Collect
VAEX collects personal information required for account creation and regulatory compliance — including full name, email address, date of birth, government ID, and residential address.
We also collect technical data such as IP addresses, device identifiers, browser type, and trading activity logs. This data is used to detect fraud and maintain platform security.
How We Use Your Data
Your data is used to verify your identity, process transactions, comply with AML and KYC regulations, and communicate account-related updates. VAEX does not sell your personal data to advertisers.
Cookies
vaex uses essential cookies to keep you logged in and maintain session security. Analytics cookies — used to understand how traders navigate the platform — can be disabled in your account settings.
Marketing cookies are only placed with your explicit consent. You can withdraw consent at any time through the cookie preferences panel, accessible from the site footer.
Data Sharing
VAEX shares data with licensed compliance partners (Chainalysis, Elliptic), regulated payment processors, and government authorities when legally required. All third parties are bound by strict data processing agreements.
Security Measures
Personal data is encrypted at rest using AES-256 and in transit using TLS 1.3. Access to user records is restricted to authorized personnel on a strict need-to-know basis.
VAEX conducts annual third-party security audits. Any confirmed data breach affecting user privacy will be reported to relevant authorities and affected users within 72 hours of discovery.
Your Rights
Under GDPR and applicable laws, you have the right to access, correct, or delete your personal data. Submit requests to [email protected] — all verified requests are fulfill [email protected] ed within 30 days.
Third-Party Links
vaex may link to external sites. VAEX has no control over and assumes no responsibility for the privacy practices of any third-party website you visit through these links.
Data Retention
Account data is retained for a minimum of 5 years after account closure to satisfy AML regulatory requirements. After the retention period, data is securely deleted or anonymized.
Policy Updates
This Privacy Policy may be updated periodically. Registered users will receive email notice of material changes at least 14 days before they take effect. The current version is always published at vaex/privacy.