Privacy Policy

Last updated: November 6, 2026

FixedFloat ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data. It applies to all users of the FixedFloat platform at fixedfloat.cv.

1. Information We Collect

Information you provide voluntarily

• Email address (optional): You may optionally provide your email address to receive transaction status notifications. This is never required to use the Service.
• Wallet addresses: You provide the destination wallet address for your exchange. This is used solely to process your transaction.

Information collected automatically

• IP address: Collected for fraud prevention, rate limiting, and geographic compliance screening (sanctions enforcement). IP addresses are pseudonymized in logs after 7 days.
• Browser fingerprint: A non-identifiable technical fingerprint (screen resolution, browser type, timezone) is collected for bot detection and security purposes. This data is not used for advertising profiling.
• Transaction data: Order ID, exchange amounts, cryptocurrency types, and timestamps are stored to process and document your exchange.
• Cookies: We use strictly functional cookies (language preference, theme preference, session management). We do not use advertising or tracking cookies. See Section 5.

Information we do NOT collect

• Name, address, national ID, or government-issued document (unless KYC is specifically triggered under our AML policy)
• Payment card information
• Private keys or wallet seed phrases

2. How We Use Your Information

We use collected information for the following purposes:

• Processing exchanges: Wallet addresses and transaction data are used exclusively to execute your cryptocurrency exchange.
• Transaction notifications: If you provided an email, we send order status updates (initiated, received, complete) for the duration of that order only.
• Security and fraud prevention: IP addresses and browser fingerprints are used to detect bots, prevent abuse, and comply with OFAC/sanctions screening requirements.
• Legal compliance: We may retain and disclose transaction records where required by applicable law or in response to lawful requests from competent authorities.
• Service improvement: Aggregated, anonymized usage statistics help us understand platform performance. These statistics contain no personal information.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), our legal bases for processing personal data are:

• Contract performance: Processing necessary to execute the cryptocurrency exchange you requested.
• Legal obligation: Processing required to comply with AML, sanctions screening, and financial reporting laws.
• Legitimate interests: Fraud prevention, security, and service improvement, balanced against your privacy rights.
• Consent: Where you have provided an email address for notifications, you may withdraw this consent at any time.

4. Data Retention

• Transaction records: Stored for 5 years from the date of the transaction to comply with financial record-keeping regulations.
• Email addresses: Deleted 90 days after the associated transaction is completed or cancelled.
• IP address logs: Pseudonymized after 7 days; fully deleted after 90 days.
• Browser fingerprint data: Deleted after 30 days.
• AML screening records: Retained for 5 years where a transaction was flagged or a report was filed.

5. Cookies

We use the following cookies:

We do not use Google Analytics, Facebook Pixel, or any third-party advertising cookies. No cross-site tracking occurs.

You can disable cookies in your browser settings. Disabling functional cookies may affect your language and theme preferences.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties for commercial purposes. We may share limited data with:

• Blockchain analytics providers: Transaction hashes and wallet addresses may be screened against AML/sanctions databases. These providers do not receive your email or IP address.
• Law enforcement: We may disclose information in response to valid legal process (court orders, subpoenas) or to protect our legal rights.
• Infrastructure providers: Our hosting and CDN providers process IP addresses as part of service delivery, under strict data processing agreements.

7. International Data Transfers

FixedFloat operates globally. Your data may be processed in countries outside your home jurisdiction. Where we transfer EEA personal data internationally, we rely on Standard Contractual Clauses or other appropriate safeguards as required by GDPR.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data, subject to our legal retention obligations.
• Restriction: Request that we limit processing of your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise your rights, contact us via our Support page. We will respond within 30 days. Identity verification may be required before we action your request.

9. Security

We implement industry-standard security measures including TLS encryption for all data in transit, access controls limiting staff access to personal data, and regular security audits. However, no method of internet transmission is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised Policy.

12. Contact

For privacy-related inquiries, data subject requests, or complaints, contact us via our Support page.

If you are in the EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.