Legal

Privacy policy

Last updated, May 2026. Placeholder content for development. Replace before launch with text reviewed by counsel.

What we collect

To create an account and protect the platform, we collect:

  • Email address, phone number.
  • For full KYC, government ID image and a selfie used for liveness check.
  • IP address, device fingerprint, and approximate location for security and anti-abuse.
  • USDT addresses you deposit from or withdraw to.
  • Activity within the platform (deposits, purchases, settlements, withdrawals).

How we use it

  • To run your account: process deposits, distribute profits, send withdrawals.
  • To detect fraud, sanctions risk, multi-account abuse, and unusual patterns.
  • To respond to support requests.
  • To improve the product, in aggregate form only.

Sharing

We do not sell your data. We share with:

  • Custodial wallet and payments providers, only what they need to process transactions.
  • KYC providers, only when you complete full identity verification.
  • Sanctions screening providers.
  • Law enforcement when legally compelled.

Retention

Account and transaction records are retained for at least 7 years after account closure to meet financial recordkeeping expectations. Marketing preferences and notification settings are deleted when you close your account.

Your rights

  • Access, you can request a copy of your data.
  • Correction, you can fix incorrect personal information from the profile screen.
  • Deletion, you can ask us to delete your account; some records are retained as required by law.
  • Marketing opt-out, you can disable product news in your notification preferences.

Security

We use TLS for all traffic, encrypt sensitive data at rest, store passwords as bcrypt hashes only, and require TOTP for internal staff access. We do not store full wallet private keys on hot infrastructure.

Cookies

We use first-party session cookies to keep you signed in. We do not use third-party advertising trackers or cross-site fingerprinting tools. Analytics, if any, is privacy-preserving and aggregated.

Children

ShareHub is not for anyone under 18. We do not knowingly collect data from minors. If we learn we have, we delete it.

Changes

We may update this policy. Material changes will be announced in-app and by email at least 14 days before taking effect.