Privacy Policy

WealthChain ("Company", "we", "us", "our") operates as an online investment platform. As a controller of your personal data, we are committed to protecting your privacy and handling your data in an open and transparent manner.

This Privacy Policy applies to all personal data collected through our website, mobile applications, APIs, and any other services we operate (collectively, the "Platform"). It applies to all users, regardless of location.

We process personal data in accordance with applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR) where applicable, and equivalent legislation in other jurisdictions.

We collect several types of information from and about users of our Platform:

We collect this data directly from you when you register, complete KYC, make transactions, or contact us. We may also receive data from third-party verification services, analytics providers, and fraud prevention partners.

We use the personal data we collect for the following purposes, each supported by a lawful basis:

• Account Management: To create, verify, and manage your account, including authentication and security checks.
• Service Delivery: To process deposits, withdrawals, investments, and affiliate commissions.
• Legal Compliance: To comply with KYC/AML obligations, tax reporting requirements, and regulatory requests.
• Security & Fraud Prevention: To detect, prevent, and investigate fraudulent activity, unauthorized access, and other threats.
• Communications: To send transaction confirmations, security alerts, and important platform notices.
• Marketing: To send promotional offers and platform updates, where you have consented or where we have a legitimate interest.
• Platform Improvement: To analyze usage patterns, troubleshoot issues, and develop new features.
• Dispute Resolution: To investigate and resolve disputes, enforce our Terms of Service, and defend legal claims.

We will not use your data for purposes incompatible with those listed above without first obtaining your consent or having a valid legal basis.

WealthChain does not sell, trade, or rent your personal information to third parties for their marketing purposes. We may share your data only in the following circumstances:

• Service Providers: Third-party vendors who assist us in operating the Platform, including payment processors, cloud hosting providers, email delivery services, and analytics tools. All providers are contractually bound to protect your data.
• KYC & Identity Verification Partners: Regulated identity verification services used to fulfill our compliance obligations.
• Legal & Regulatory Authorities: Government agencies, law enforcement, or courts when required by law, court order, or legal process.
• Fraud Prevention Networks: Shared fraud databases or industry watchlists where required to prevent financial crime.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction, subject to equivalent privacy protections.

As a financial services platform, WealthChain is subject to Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations. To comply with these obligations, we are required to:

• Collect and verify identity documents, including government-issued photo ID and proof of address.
• Screen users against government and international sanctions lists and politically exposed persons (PEP) databases.
• Monitor transactions for suspicious activity and report to relevant financial authorities where required by law.
• Retain KYC records for a minimum period as required by applicable regulations, regardless of account status.

We take the security of your personal data seriously. We implement a comprehensive set of technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, and destruction:

• All data transmissions are encrypted using TLS 1.2 or higher (HTTPS).
• Sensitive data at rest is encrypted using industry-standard AES-256 encryption.
• Passwords are hashed using bcrypt with a strong cost factor and are never stored in plain text.
• Access to personal data is restricted to authorized personnel on a strict need-to-know basis.
• We conduct regular security audits, vulnerability assessments, and penetration testing.
• We maintain an incident response plan and will notify affected users of data breaches as required by law.
• Two-factor authentication is available and strongly encouraged for all accounts.

While we employ best practices, no system is entirely secure. You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account.

We use cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you, remember preferences, and analyze usage.

You can control or disable non-essential cookies through your browser settings or our cookie preference center. Disabling essential cookies may affect Platform functionality. Most browsers allow you to refuse cookies, delete existing cookies, or set preferences per website.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, accounting, or reporting requirements.

• Active account data — retained for the lifetime of the account plus 5 years after closure.
• KYC & identity documents — retained for a minimum of 5 years as required by AML regulations, irrespective of account status.
• Transaction records — retained for 7 years for financial audit and legal compliance purposes.
• Communication records — support interactions retained for 3 years from last contact.
• Technical / log data — retained for 12 months for security analysis.
• Marketing preferences — retained until withdrawal of consent or account deletion.

After retention periods expire, data is securely deleted or anonymized so it can no longer be associated with you.

Depending on your jurisdiction, you may have the following rights regarding your personal data. To exercise any of these rights, contact our Data Protection team at privacy@wealthchaininvestments.com.

We will respond to all legitimate requests within 30 days. For complex or numerous requests, we may extend this period by an additional 60 days with prior notice. We may need to verify your identity before processing your request.

WealthChain operates globally, and your personal data may be transferred to, and processed in, countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

Where we transfer data to countries outside the European Economic Area (EEA) or other jurisdictions with equivalent protections, we ensure adequate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Transfers to countries with an adequacy decision from the relevant data protection authority.
• Binding Corporate Rules where applicable within our group.

By using our Platform, you consent to the transfer of your data to our facilities and to the third parties described in this policy, wherever they are located.

WealthChain is not intended for use by individuals under the age of 18. We do not knowingly collect, use, or share personal data from minors.

If we become aware that we have collected personal data from a person under 18 years of age without verified parental consent, we will take immediate steps to delete such information and terminate the associated account.

If you believe we may have collected data from a minor, please contact us immediately at privacy@wealthchaininvestments.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email notification or displaying a prominent notice on the Platform.

Your continued use of the Platform following the posting of changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically.

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

If you are located in the European Economic Area and believe your rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.