1. Introduction

At Poisar ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cryptocurrency trading platform.

We are committed to complying with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password, username
• Profile Information: Display name, preferences, settings
• Financial Information: Wallet addresses, transaction history
• Communication: Messages sent through our contact form or support channels

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent
• Device Information: Browser type, operating system, IP address
• Cookies: Session data, preferences, analytics
• Log Data: Server logs, error reports, performance metrics

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Process your transactions and orders
• Send you important updates and notifications
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms
• Analyze usage patterns to improve user experience

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: You have given clear consent for us to process your data
• Contract: Processing is necessary to fulfill our contract with you
• Legal Obligation: We must comply with legal requirements
• Legitimate Interests: Processing is in our legitimate business interests

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who help us operate our platform
• Payment Processors: For transaction processing
• Analytics Providers: To understand how our service is used
• Legal Authorities: When required by law or to protect our rights

We never sell your personal information to third parties.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• Regular Audits: Security assessments and penetration testing
• Monitoring: 24/7 security monitoring and incident response
• Compliance: SOC 2 Type II certified

7. Your Privacy Rights

7.1 GDPR Rights (EU Users)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Object: Object to certain types of processing
• Withdraw Consent: Withdraw consent at any time

7.2 CCPA Rights (California Users)

You have the right to:

• Know what personal information we collect
• Know if we sell or disclose your information
• Opt-out of the sale of your information (we don't sell)
• Access your personal information
• Request deletion of your information
• Non-discrimination for exercising your rights

To exercise your rights, please contact us using the information below.

8. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for the platform to function
• Analytics Cookies: Help us understand how users interact with our service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling cookies may affect functionality.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Account Data: Retained while your account is active
• Transaction Data: Retained for 7 years (legal requirement)
• Analytics Data: Anonymized after 26 months
• Support Tickets: Retained for 3 years

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by relevant authorities
• Binding corporate rules

11. Children's Privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending an email notification (for material changes)

Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us:

• Email: Use our contact form
• Data Protection Officer: Available through contact form
• Response Time: We respond within 30 days

14. Supervisory Authority

If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection authority.