This Privacy Policy explains what personal data MoinCash collects when you use www.moin.cash and the related exchange and merchant services, why we collect it, with whom we share it, how long we keep it, and what rights you have. We aim to collect only what is necessary to provide the exchange service securely and to meet our legal obligations.
1. Who is responsible for your data The operating entity of the MoinCash platform, as identified on the platform, is the controller of the personal data described in this Policy. For any privacy question or request, you can contact us at support@moin.cash.
2. Data we collect Account data. If you register an account, we collect your e-mail address and the credentials you choose. If you provide a name, business details or identity documents in the course of identity verification, we collect those as well. Identity documents and verification data are collected only where verification is required.
Order data. For every exchange we process the source and target assets and networks, the amounts, the deposit address, your receiving address and any memo or destination tag, your refund address, the blockchain transaction hashes, the rate and fee applied, and the status and timestamps of the order. Blockchain addresses and transaction hashes are public information on the relevant network, but we treat them as personal data when they are linked to you.
Technical data. When you use the platform we collect your IP address, an approximate location derived from it, device and browser characteristics such as browser type, operating system and screen properties, your language setting, and logs of your requests. We use this data for security, fraud prevention, abuse detection, compliance screening and the technical operation of the platform.
Support communications. If you contact us, we keep your messages, your contact details and any information you choose to include, so that we can assist you and keep a record of the case.
Cookies and local storage. We use cookies and browser storage to keep your session, to remember preferences such as language and display settings, to allow guest orders to be found again on the same browser, and to keep the platform secure. Details are in section 8.
Merchant data. If you use the merchant API, we process the business contact details you provide and records of the activity carried out with each API key.
3. Why we use your data and on what basis - To provide the service: to produce quotes, create and execute orders, display order status, and provide support. This is necessary to perform our contract with you. - To comply with the law: identity verification, sanctions and restricted-region screening, record keeping, transaction monitoring, and responding to lawful requests from authorities. This is necessary to meet legal obligations that apply to us. - To keep the service secure: to detect and prevent fraud, abuse, unauthorised access and technical attacks, and to investigate incidents. This is in our legitimate interest and yours. - To improve the service: to understand which features and routes are used and where errors occur, using aggregated or minimised data wherever possible. This is in our legitimate interest. - To communicate with you: service messages about your orders, your account, or material changes to our terms. Marketing messages, if any, are sent only where you have consented, and you may withdraw consent at any time.
4. Who we share data with We do not sell your personal data, and we do not share it for third-party advertising. We share data only as follows: - Exchange service providers: the data needed to execute your order, such as the assets, amounts, the receiving address and any memo, and the refund address. Without this the exchange cannot be carried out. - Identity verification and sanctions screening providers: where verification or screening is required, the identity data and documents needed to perform it. - Infrastructure providers: hosting, content delivery, logging, security and e-mail delivery providers that process data on our behalf under written instructions and appropriate confidentiality and security obligations. - Authorities: regulators, law enforcement, tax authorities or courts, where we are legally required to disclose data or where disclosure is necessary to establish, exercise or defend legal claims. - Corporate transactions: a successor entity, where all or part of the business is transferred, subject to the protections described in this Policy.
5. International transfers Our providers may be located in countries other than your own. Where personal data is transferred across borders, we rely on appropriate safeguards, such as transfers to countries recognised as providing an adequate level of protection, or contractual data protection clauses combined with technical and organisational measures. You may request information about the safeguards used by contacting us.
6. How long we keep data Order records, verification records and the related compliance documentation are kept for at least five years after the end of our relationship with you, or longer where applicable law requires it. Account data is kept while your account is open and afterwards only for the retention period described above. Technical logs are kept for a limited period appropriate to security and troubleshooting. Support correspondence is kept for as long as needed to handle the case and to defend against claims. When a retention period ends, data is deleted or irreversibly anonymised.
Closing your account. When an account is closed, at your request or by us, you can no longer sign in, and its API keys and automatic payout settings are turned off. The records described above continue to be kept for the retention period. Contacts you saved for other people (their e-mail addresses, phone numbers and handles) and identity or business verification forms you started but never submitted are deleted 90 days after closure, unless the account has been restored before then. The e-mail address of a closed account stays linked to that account and cannot be used to open a new one. During the retention period you may ask us at support@moin.cash to restore the account; we will verify your identity first. Closing an account is not a request to delete your data: to ask for deletion, see section 10.
7. Security We apply technical and organisational measures appropriate to the risk, including encryption of data in transit, restricted and logged internal access on a need-to-know basis, separation of environments, monitoring for unusual activity, and regular review of our providers. No system can be guaranteed to be completely secure, so we ask you to protect your own credentials, enable any additional authentication factor offered, keep API keys confidential, and be alert to phishing: we will never ask you for your password, your recovery information or your wallet's private keys or seed phrase.
8. Cookies and local storage We use only what is needed to operate the platform and to keep it secure, together with storage that improves your experience: - Essential storage: session and security data, protection against automated abuse, and the credential that allows a guest order to be reopened on the same browser. - Preference storage: language, display and similar settings you have chosen. If you clear your browser storage or use a different device, guest orders may no longer appear in the interface; they can still be recovered by e-mail if you supplied one when creating the order. You can control or delete cookies in your browser settings, but essential storage is required for the platform to function.
9. Automated checks and human review Compliance and security controls, such as sanctions and restricted-region screening and fraud detection, are applied automatically and may result in a transaction being refused, delayed or held for review. Where such a decision significantly affects you, you may ask for it to be reviewed by a person, express your point of view and contest the outcome, by writing to support@moin.cash. In some cases the law restricts how much we may tell you about the reason for a decision.
10. Your rights Subject to the conditions of applicable data protection law, you may: - request access to the personal data we hold about you and a copy of it; - request correction of inaccurate or incomplete data; - request deletion of your data, which we will carry out unless we are required to retain it for legal or compliance reasons; - object to processing based on our legitimate interests, and request restriction of processing in certain cases; - request portability of data you provided to us, in a structured, commonly used and machine-readable format; - withdraw any consent you gave, without affecting processing carried out before withdrawal; - lodge a complaint with the data protection supervisory authority of your country. To exercise a right, write to support@moin.cash. We may need to verify your identity before acting, and we will respond within the period required by applicable law.
11. Children The Service is not intended for anyone under 18 years of age, and we do not knowingly collect data from children. If you believe a minor has provided us with personal data, please contact us and we will delete it.
12. Third-party sites Explorers, wallets and other third-party sites linked from the platform are operated independently and have their own privacy practices. We are not responsible for how they handle your data, and we encourage you to read their policies.
13. Changes to this Policy We may update this Policy to reflect changes in the Service, in our providers, or in legal requirements. The current version and its date are always published on the platform. Where a change materially affects you, we will provide additional notice through the platform or, where appropriate, by e-mail.
14. Contact For questions about this Policy, or to exercise any of your rights, contact support@moin.cash.
If you have any questions or concerns about this privacy policy, please contact us: