Privacy Policy

Effective date: 1 January 2025

This policy explains what data we collect, why we collect it, and how we use it.

1. Who We Are

CryptoHub ("we", "us", "our") operates a digital asset trading platform accessible at www.getapicoin.top. This Privacy Policy applies to all users of our website and services.

2. Information We Collect

Account Information

Username and email address provided at registration
Password (stored as a one-way cryptographic hash — we never store your plain-text password)
Profile settings and preferences

Identity Verification (KYC)

Full legal name, date of birth, nationality
Residential address
Government-issued identity document (front and back image)
Selfie photograph submitted for identity verification

KYC document images are stored as files on our secure server. They are not stored inside the database and are only accessible to authorised administrators.

Financial Information

Wallet addresses you add for withdrawals (bank card details or digital crypto addresses)
Transaction history, deposit and withdrawal requests
Trading activity (options, contract, and spot trades)

Technical Information

IP address and browser user-agent at login
Session data stored in server-side PHP sessions
Error logs (no personal data logged beyond what PHP captures)

3. How We Use Your Information

To create and maintain your account
To process deposits, withdrawals, and trades
To verify your identity as required by our platform rules
To send you account notifications (deposit approvals, withdrawal status, announcements)
To calculate your credit score on the platform
To detect and prevent fraud or unauthorised access
To comply with applicable legal obligations

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Data Sharing

We only share your data in these limited cases:

Service providers: Our hosting provider (IONOS) processes data as part of providing server infrastructure. They are bound by their own privacy and data processing terms.
Customer support: If you use our live chat (Tawk.to), your chat messages are processed by Tawk.to under their privacy policy.
Legal requirements: We may disclose data if required by law, court order, or regulatory authority.

5. Data Retention

We retain your account data for as long as your account is active. If you request deletion of your account, we will remove your personal data within a reasonable timeframe except where retention is required by law or for fraud prevention purposes.

Transaction records may be retained for up to 5 years for audit and compliance purposes.

6. Security

We implement the following technical measures to protect your data:

HTTPS with HSTS enforced on all pages
Passwords hashed using PHP password_hash() (bcrypt)
Funding/withdrawal passwords stored separately with bcrypt hashing
Server-side PHP sessions with no sensitive data in cookies
Sensitive files (.env, config.php) blocked from public access via .htaccess
SQL injection prevention via PDO prepared statements throughout

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but we take reasonable steps to protect your information.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Object to certain processing activities
Withdraw consent where processing is based on consent

To exercise any of these rights, contact us using the details in Section 10 below.

8. Cookies

We use a small number of cookies necessary for the platform to function. We do not use advertising or tracking cookies. See our Cookie Policy for full details.

9. Children

Our platform is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, please contact us and we will delete the account.

10. Contact

For any privacy-related questions or data requests, contact us at:

Email: support@cryptohub.com

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via the platform notification system. Continued use of the platform after changes constitutes acceptance of the updated policy.