Privacy Policy
Last updated: February 2026
1. Data Collection
GUDAX Limited ("we," "us," or "our") collects personal information necessary to provide our trading services and comply with legal and regulatory obligations under the Anjouan Offshore Finance Commission (AOFC) regulatory framework. The data we collect falls into several categories depending on your interaction with our platform.
During account registration, we collect identifying information including your full name, date of birth, nationality, residential address, email address, and phone number. For Know Your Customer (KYC) compliance, we require government-issued identification documents (passport, driver's license, or national ID card) and proof of address documents (utility bills or bank statements issued within the last three months).
When you use our trading platform, we automatically collect technical data including your IP address, browser type and version, operating system, device identifiers, geolocation data, and usage patterns such as pages visited, features accessed, and transaction history. We also collect financial information related to deposits, withdrawals, trading activity, and account balances for the purpose of providing our services and maintaining transaction records.
2. How We Use Your Data
We process your personal information for several legitimate purposes. Primarily, we use your data to create and maintain your trading account, execute and settle trades, process deposits and withdrawals, and provide customer support services. Your identity information is used to verify your identity and comply with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.
Your data enables us to communicate important account updates, transaction confirmations, regulatory changes, and marketing communications (where you have consented to receive such materials). We analyze usage patterns to improve our platform's functionality, develop new features, and enhance user experience. This includes monitoring for system performance optimization and security threat detection.
We may use aggregated, anonymized data for research, statistical analysis, and business intelligence purposes. Such data cannot be used to identify individual users. We also process your data to comply with legal obligations, including responding to court orders, regulatory inquiries, and maintaining records as required by financial services regulations.
4. Third-Party Services
In the course of providing our services, we share your personal information with carefully selected third-party service providers who assist us in operating our platform and conducting our business. These third parties are contractually obligated to protect your data and use it only for the specific purposes we authorize.
Payment processors handle transaction processing for deposits and withdrawals. KYC verification services verify your identity documents using automated and manual review systems. Cloud infrastructure providers host our platform and store encrypted data backups. Customer support tools enable our support team to respond to your inquiries efficiently. Email service providers deliver transactional and marketing communications on our behalf.
We may also share information with regulatory authorities, law enforcement agencies, and financial institutions when required by law or necessary to prevent fraud, money laundering, or other illegal activities. In the event of a merger, acquisition, or sale of company assets, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal and regulatory obligations. The retention period varies depending on the type of data and the applicable regulatory requirements.
Account information and KYC documents are retained for a minimum of seven (7) years after account closure, as required by anti-money laundering regulations. Transaction records, including trading history and financial statements, are maintained for seven (7) years in accordance with financial services recordkeeping requirements. Communication records, such as support tickets and email correspondence, are typically retained for three (3) years.
Technical data, including login logs and IP addresses, are retained for two (2) years for security monitoring and fraud prevention purposes. Marketing data is retained until you withdraw consent or request deletion, whichever occurs first. Upon expiration of the applicable retention period, we securely delete or anonymize your personal information in accordance with data protection best practices.
6. Your Rights
Under applicable data protection laws, you have several rights regarding your personal information. You have the right to access the personal data we hold about you and receive a copy in a commonly used electronic format. You may request corrections to inaccurate or incomplete information at any time through your account settings or by contacting our support team.
You have the right to request deletion of your personal data, subject to our legal obligations to retain certain records for regulatory compliance. You may object to processing of your data for marketing purposes at any time by unsubscribing from our communications or updating your preferences. You can also request restriction of processing in certain circumstances, such as while we verify the accuracy of disputed data.
To exercise any of these rights, please submit a written request to privacy@gudax.com with proof of identity. We will respond to verified requests within thirty (30) days. If you are dissatisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
7. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer using the following information:
- Email: privacy@gudax.com
- Postal Address: GUDAX, correspondence via email preferred
- Subject Line: "Privacy Inquiry" for faster processing
We are committed to protecting your privacy and will investigate all complaints thoroughly. Updates to this Privacy Policy will be posted on this page with a revised "Last updated" date. Continued use of our services after such changes constitutes acceptance of the updated policy.