Privacy Policy

This Privacy Policy applies to the GrowCrypto website, applications, user accounts and related services, including crypto wallet services, USDT exchange, Crypto Fixed Deposits, mining services, staking and reward services, deposits and withdrawals, and customer support, in each case where those services are actually made available to you.

GrowCrypto is not a bank, and crypto assets held or used through GrowCrypto are not bank deposits. This policy describes privacy practices only; it does not create or describe any licence, registration, approval or insurance.

If you have questions about this policy or how your information is handled, you can contact GrowCrypto at [PRIVACY EMAIL].

GrowCrypto only collects information that is actually required for the services you use and for legal, regulatory and security purposes.

Personal information

• Full name
• Date of birth
• Nationality
• Residential address
• Email address
• Mobile number
• Government identification and passport details where required
• Tax identification information where required
• Proof of address
• Identity verification information, including selfie or liveness verification
• KYC information
• Occupation or business information
• Source of funds and source of wealth information
• Beneficial ownership information where relevant

Account information

• GrowCrypto account ID and username
• Login information and authentication records
• Account preferences and notification settings
• Security settings, including two-factor authentication information
• Account status and applicable transaction limits

Account credentials are handled using industry-standard protection. GrowCrypto does not store your password in plaintext.

Crypto and blockchain information

• Wallet addresses and blockchain addresses
• Transaction hashes and network information
• Deposits and withdrawals
• Cryptocurrency balances and transaction history
• USDT exchange records
• Crypto Fixed Deposit records, including interest and reward records
• Mining records and staking records
• Referral and reward records

Blockchain transactions may be publicly visible and permanently recorded on public networks. Once recorded, such information is generally outside GrowCrypto's control and cannot be modified or deleted by GrowCrypto.

Payment information

Where payment methods are supported, GrowCrypto handles only the payment information necessary to process and verify your activity. Where third-party payment processors are used, payment details may be collected and processed directly by those providers under their own terms and privacy policies.

Device and technical information

• IP address and network information
• Device type, operating system, browser and app version
• Device identifiers
• Language and time zone
• Approximate location derived from IP address where applicable
• Login timestamps, security logs and error logs

Communications

• Customer support messages, emails and chat communications
• Complaint records
• Feedback and survey responses
• Notification and communication preferences

GrowCrypto may use cookies and similar technologies for authentication, security, preferences, website functionality, analytics, fraud prevention and, where legally permitted, marketing.

For more detail, see the Cookie Policy.

• Directly from you through the website, mobile application and account registration
• Through KYC and identity verification processes
• Through your transactions, wallet activity and use of platform services
• Through customer support interactions
• Through cookies, analytics tools and similar technologies
• From third-party identity verification and compliance providers
• From payment providers, where used
• From public blockchain networks
• From fraud-prevention and security services

Account management

Creating and administering your account, authenticating you and maintaining access.

KYC, AML and compliance

• Identity and address verification
• AML and counter-terrorist-financing compliance
• Sanctions screening
• Fraud prevention and transaction monitoring
• Risk assessment and enhanced due diligence where required

Platform services

• Crypto deposits and withdrawals
• USDT exchange
• Crypto wallet services
• Crypto Fixed Deposits
• Bitcoin (BTC) mining services
• Dogecoin (DOGE) mining services
• Ethereum (ETH) staking and reward services
• Solana (SOL) staking and reward services
• Other supported crypto services where actually offered

Security, support and operations

Protecting accounts and infrastructure, investigating suspicious activity, responding to support requests and complaints, meeting legal obligations, maintaining records, performing accounting and audit functions, and improving services through analytics.

Communications and marketing

Sending service, security and transactional messages, and — only where legally permitted and with appropriate consent or opt-out mechanisms — marketing communications.

Depending on your jurisdiction, processing may rely on one or more of the following:

• Contractual necessity, to provide the services you request
• Legal obligation, including KYC, AML and record-keeping requirements
• Legitimate interests, such as security, fraud prevention and service improvement
• Consent, where required, for example certain cookies or marketing
• Protection of vital interests, where applicable

Consent is not required for every type of processing. Some processing is necessary for GrowCrypto to provide services or to comply with the law.

GrowCrypto may require, depending on your activity and jurisdiction:

• Identity verification and address verification
• Source-of-funds and source-of-wealth information
• Sanctions screening
• Transaction monitoring
• Enhanced due diligence
• Fraud checks

Some information must be retained even after account closure because of legal and compliance obligations.

Blockchain transactions may be publicly visible, permanently recorded, and difficult or impossible to modify or delete. Wallet addresses, amounts and transaction hashes may be visible to anyone and may be analysed by third parties.

GrowCrypto cannot promise the deletion, correction or concealment of information already recorded on a public blockchain, as such records are outside GrowCrypto's direct control.

GrowCrypto may share information only where legally permitted, necessary or required, with categories of recipients such as:

• KYC and identity verification providers
• AML and compliance service providers
• Blockchain analytics providers
• Payment processors and banking or payment partners
• Cloud, hosting and infrastructure providers
• Cybersecurity and fraud-prevention providers
• Customer support and communication providers
• Analytics providers
• Professional advisers and auditors
• Regulators, courts, law-enforcement and government authorities

GrowCrypto does not sell personal information.

GrowCrypto may process information in different countries where necessary to provide services, operate infrastructure, engage service providers or meet legal obligations. Where required by applicable law, appropriate safeguards are applied to such transfers.

Information may be retained for as long as necessary for:

• Providing and administering services
• KYC and AML compliance
• Legal, tax and accounting obligations
• Fraud prevention and security
• Dispute resolution and enforcement of terms
• Other legitimate business purposes

Retention periods depend on the type of information and the applicable legal requirements in your jurisdiction.

GrowCrypto applies technical and organisational measures such as encryption where implemented, access controls, authentication and two-factor authentication, security monitoring and logging, secure infrastructure, restricted employee access on a need-to-know basis, and incident response processes.

No platform, system or transmission method can be guaranteed to be completely secure. GrowCrypto cannot promise absolute security, and you are responsible for protecting your credentials, devices and recovery information.

Depending on your jurisdiction, you may have rights to:

• Access the personal information held about you
• Request correction of inaccurate information
• Request deletion where legally available
• Request data portability where applicable
• Request restriction of processing
• Object to certain processing
• Withdraw consent where processing is based on consent
• Opt out of marketing communications
• Submit a privacy complaint

Some requests may be limited or refused where GrowCrypto has legal, KYC, AML, record-keeping or security obligations, or where information is recorded on a public blockchain.

Where applicable, GrowCrypto seeks to handle personal information in line with Indian privacy requirements, including the Digital Personal Data Protection Act, 2023 and its rules as and when they are in force. This may include providing notice, honouring valid requests from data principals, and maintaining reasonable security safeguards.

Nothing in this policy is a claim of certification, licence or approval by any Indian authority.

Where applicable, GrowCrypto seeks to handle personal information in line with UAE data-protection requirements, including federal data-protection law and any jurisdiction-specific requirements that apply to the services actually offered.

Nothing in this policy is a claim of authorisation, registration or licensing by VARA, ADGM, FSRA, CBUAE or any other authority.

Privacy rights in the United States vary by state. Where a state privacy law applies to GrowCrypto and to you, GrowCrypto will honour the rights and obligations required by that law, which may include rights to access, correct, delete or limit certain uses of personal information.

Not every US state law applies to GrowCrypto, and availability of services may vary by state.

GrowCrypto is not intended for users below the legally permitted age in their jurisdiction and does not knowingly collect personal information from such individuals. If GrowCrypto becomes aware that it has collected such information where prohibited, it will take appropriate steps to delete it and close the account.

The platform may link to third-party websites, wallets, blockchain explorers or services. Those parties operate under their own privacy policies and terms, and GrowCrypto is not responsible for their practices.

Where legally permitted, GrowCrypto may send promotional emails, SMS messages or push notifications. You can manage marketing preferences in your account settings or by using the unsubscribe option in the message.

Opting out of marketing does not stop important transactional, security, compliance or account-related communications.

GrowCrypto may use automated tools to support fraud detection, sanctions screening, transaction monitoring and risk assessment. Where such tools flag activity, outcomes may include additional verification requests, delays, limits or restrictions. Where a decision has a significant effect and applicable law requires it, you may request human review by contacting [PRIVACY EMAIL].

To exercise privacy rights, ask questions or make a privacy complaint, contact [PRIVACY EMAIL]. Please include enough information for GrowCrypto to identify your account and understand your request. Additional verification may be required before a request is processed, and responses are provided within the timeframes required by applicable law.

You may also have the right to complain to the relevant data protection or supervisory authority in your jurisdiction.

GrowCrypto may update this Privacy Policy when necessary to reflect changes in services, technology, security practices or legal requirements. The revised version will be published on the GrowCrypto website, and continued use of the services after publication means you accept the updated policy.