SourceX — Privacy Policy

Privacy Policy

Last updated: 22 June 2026 · How SourceX Asset Management LLC ("the Company") handles your data.

1. Data we collect

Account data: name, email, phone, password (stored hashed), language and preferences.
Identity / KYC & AML data: where verification is required — government ID, date of birth, address, photo/selfie, and source-of-funds documentation.
Financial & transaction data: deposits, withdrawals, package allocations, balances, referral activity, and on-chain wallet addresses you provide.
Technical data: IP address, device and browser information, approximate location, and security/session logs.
Support data: messages and attachments you send to our support team.

2. How and why we use it (legal basis)

To provide the service (perform our contract with you): operate your account, process deposits/withdrawals, and manage packages.
Legal compliance: identity verification, AML/CTF screening, sanctions checks, fraud prevention, and responding to lawful requests from authorities.
Security & integrity (legitimate interests): protect accounts, detect abuse, and keep audit logs.
Communications: service notices and, with your consent where required, updates about features or offerings.

3. Sharing your data

We do not sell your personal data. We share it only with: identity-verification and AML providers; payment/blockchain analytics processors; cloud and infrastructure providers acting on our instructions; and competent authorities, regulators, or courts where legally required. Processors are bound by confidentiality and data-protection obligations.

4. International transfers

Your data may be processed in countries other than your own. Where it is transferred, we apply appropriate safeguards (such as standard contractual clauses) consistent with applicable data-protection law.

5. Retention

We keep account and transaction records for as long as your account is active and thereafter for the period required by law. In particular:

KYC / identity documents (ID, proof of address, selfie/liveness) and source-of-funds records: retained for the statutory AML period — typically at least five (5) years after the end of the business relationship, or longer where a law or authority requires it.
Transaction & ledger records (deposits, withdrawals, allocations, balances): retained for the period required by financial and tax law.
Security & audit logs: retained for a limited period for fraud prevention and integrity.

We may also retain specific data for longer where needed to comply with a legal hold, investigation, or request from a competent authority. When data is no longer required, it is securely deleted or anonymised. Note that because of these legal obligations, a deletion request cannot remove records we are required by law to keep.

6. Security

We use encryption in transit, hashed credentials, access controls, and monitoring. No system is perfectly secure; you are responsible for protecting your login credentials and enabling available security features such as two-factor authentication.

7. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and request portability. Some rights are limited where we must retain data for legal/AML reasons. To exercise your rights, contact us through the Support channel. You may also lodge a complaint with your local data-protection authority.

8. Cookies

We use only the cookies and local storage necessary to keep you signed in, remember preferences (such as language and theme), and secure the session. We do not use non-essential advertising cookies by default.

9. Children

The Platform is not intended for anyone under 18, and we do not knowingly collect data from minors.

10. Changes & contact

We may update this Policy; material changes will be notified in the Platform. For privacy questions or requests, contact us via the Support channel in your dashboard.