UEX.US Inc. Privacy Policy
Effective Date: April 26, 2025
Introduction
Welcome to the Privacy Policy of UEX.US Inc. (“UEX”, “we” or “our”). UEX.US Inc. operates a suite of financial and digital asset services, including the website uexpayments.com (collectively, our “Services”). We are committed to protecting your privacy and handling your personal data in a transparent and lawful manner. This Privacy Policy explains what information we collect, how we use and share it, and your rights in relation to your personal data. By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our Services.Legal Compliance: UEX.US Inc. is a legally registered financial services company. We are registered as a Money Services Business (MSB) with the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) and comply with related regulations.
Obtaining all necessary Money Transmitter Licenses (MTLs)in applicable jurisdictions is an integral part of our regulatory roadmap, and we are actively working towards full MTL compliance.
We operate our Services in accordance with applicable laws and regulations, including data protection laws such as the EU General Data Protection Regulation (GDPR) for our users in the European Economic Area (EEA) and equivalent laws in other jurisdictions. We welcome international users to our Services, provided that use of our platform is in compliance with local laws and regulations.
Personal Data We Collect
We collect various types of personal information from you when you use our crypto and fiat currency services, NFT purchase platform, and swap services. This includes, but is not limited to:
- Identity Information: Full name, date of birth, nationality, and government-issued identification details (such as passport or driver’s license numbers, ID documents, and any photographs or biometric data you provide for identity verification).
- Contact Information: Email address, telephone number, and residential or mailing address.
- Financial Information: Payment details such as bank account numbers or credit/debit card information and billing address (for fiat transactions), as well as cryptocurrency wallet addresses and transaction identifiers (for crypto transfers, swaps, or NFT purchases).
We also record transaction history on our platform, including deposit, withdrawal, swap, and purchase details (e.g., amounts, asset types, timestamps, recipient or sending addresses) for both crypto and fiat transactions.
- Know Your Customer (KYC) Data: Information required for compliance with KYC and Anti-Money Laundering (AML) regulations, which may overlap with some of the above (e.g., copies of your government ID, selfie photographs, proof of address documents, and responses to any compliance questionnaires).
- Usage Data: Information about how you access and use our Services. This includes technical data automatically collected when you interact with our websites or app: IP address, device type, browser type and version, operating system, unique device identifiers, referral URL, and other log information.
- We also collect data on your activities on the platform, such as pages or screens viewed, features used, links clicked, and other actions on our Services.
- Cookies and Tracking Technologies: We use cookies, beacons, and similar tracking technologies to collect information about your interactions with our Services. This may include your preferences, session information, and analytics data. Cookies help us recognize you, remember your preferences, and improve your user experience (for example, by keeping you logged in or understanding how you navigate our site). For more details, see Cookies and Tracking Technologies below.
- Communication Data: Copies of communications you send to us or post on our platform, including emails, support tickets, chat messages, or survey responses. This also covers metadata related to such communications (like dates and times).
We collect most of this data directly from you (for example, when you register an account, complete identity verification, make a transaction, or contact customer support). We may also obtain some data from third parties, such as public databases, blockchain networks (for transaction confirmation), identity verification providers, and marketing partners, as permitted by law.
How We Use Your Personal Data
UEX.US Inc. uses the collected personal data for the following purposes, in accordance with applicable law:
- To Provide and Maintain Services: We use your information to create and administer your account, enable you to use our crypto/fiat exchange services, process payments, facilitate crypto swaps, and allow you to purchase or sell NFTs on our platform. For example, we will use your provided details to execute your transactions, such as transferring funds or digital assets as you direct, and to display your account balances and transaction history.
- Identity Verification and Compliance: Your identity and KYC information are used to verify your identity and meet legal obligations, such as Anti-Money Laundering (AML), Countering the Financing of Terrorism (CFT), and know-your-customer requirements.
- This helps us confirm you are eligible to use the Services, prevent fraud, and comply with financial regulations. We may use third-party services to assist with identity verification (see “Sharing of Personal Data” below).
- Transaction Monitoring and Fraud Prevention: We monitor usage and transactions to detect and prevent fraudulent, suspicious, or illegal activities. This includes using automated systems and manual reviews to flag potentially unauthorized transactions, hacks, money laundering attempts, or other violations. If we detect possible illegal activity, we may take protective measures such as pausing or blocking transactions and, if necessary, freezing your account to secure our platform and comply with our legal obligations.
- (Please note: as a regulated financial service, we reserve the right to suspend your account if we suspect it is being used for unlawful purposes, such as fraud or money laundering.)
- Service Communications: We use contact information (like your email and phone number) to communicate with you about your account and our Services. This includes sending verification codes, transaction alerts, confirmations and receipts, notifications of important changes (e.g. updates to this Privacy Policy or our Terms of Service), and customer support responses. These communications are primarily service-related and not promotional in nature.
- Customer Support: When you contact us with questions, feedback, or issues, we will use your provided information and communication history to assist you and resolve problems.
- Improvement and Development: We analyze usage data and feedback to understand how our Services are used. This helps us troubleshoot performance issues, develop new features, improve functionality, and enhance user experience. For example, usage patterns may inform us about popular features or identify user interface improvements. We also use analytics tools (which may use cookies and device data) to understand aggregate user behavior and preferences.
- Marketing and Promotions (with Consent): If you have provided consent (where required by law), we may use your email or other contact info to send you promotional communications about new products, features, or events we believe may interest you. You will have the opportunity to opt-out of marketing emails at any time. (We do not share your personal data with third parties for their own marketing without your explicit consent.)
- Security and Asset Safeguards: We use data (such as device identifiers and access logs) to help secure accounts and assets. This includes implementing multi-factor authentication, monitoring for unauthorized access attempts, and using anti-abuse mechanisms. We may use your data to enforce our terms and policies, and to protect the rights and safety of our users, our company, or others (for example, to investigate and address attempted hacks or violations of our terms).
- Legal Obligations and Reporting: We process and may preserve your information as needed to comply with applicable laws and regulations. For instance, we may use your data to fulfill financial reporting obligations, respond to lawful requests by government or regulatory bodies, file mandatory reports (such as suspicious activity reports under AML laws), or to comply with a court order or subpoena. Using personal data for these purposes is necessary for us to meet our legal compliance requirements.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another related reason that is compatible with the original purpose (and permitted by law). If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis for that new use when required.
Cookies and Tracking Technologies
Like most online services, we use cookies and similar tracking technologies to operate and enhance our Services. Cookies are small text files that are stored on your browser or device when you visit a website. We use cookies to remember your preferences, keep you logged into your account, and collect information about your interaction with our Services. For example, cookies allow us to recognize you on subsequent visits, personalize content for you, and understand which sections of our site users find most useful.The types of cookies we may use include:
- Essential Cookies: These are necessary for our website’s core functionality – for instance, to authenticate users and enable you to securely log in and navigate the platform. Without these, certain services cannot be provided.
- Preference Cookies: These remember your settings and choices (e.g. language or region selection) to provide a more personalized experience.
- Analytics Cookies: We, or our third-party analytics providers, use these to collect information about site usage and performance. This helps us analyze web traffic and user behavior on an aggregate level, so we can improve our Services. For example, we may use Google Analytics or similar tools which use cookies to track page view statistics and other usage data (you can often opt out by installing a browser add-on or adjusting cookie settings).
- Advertising Cookies: (If applicable) These cookies would be used to deliver relevant advertisements for our Services on other websites and to measure the effectiveness of our ad campaigns. (Note: At present, UEX does not use third-party advertising cookies for marketing, but we reserve the right to do so in the future with appropriate updates to this Policy.)
We may also use web beacons or pixels in our emails or site that work with cookies to measure user engagement (for example, whether an email was opened).Your Choices: When you first visit our sites, you may be presented with a cookie banner or preferences manager to consent to or manage non-essential cookies, depending on your jurisdiction. You can also control and delete cookies through your browser settings. However, please note that if you disable certain cookies, some features of our Services may not function correctly. For more information about cookies and how to manage them, you can visit resources like AboutCookies.org.
Sharing of Personal Data
We treat your personal data with care and confidentiality. However, in order to operate our business and comply with legal requirements, we may share your personal data with third parties in the following circumstances:
Aside from the situations above, UEX.US Inc. does not sell or rent your personal information to third parties. We also do not share any personally identifying information with advertisers. Any sharing is limited to the purposes described and always done in accordance with applicable data protection laws.
International Data Transfers and Global Users
UEX.US Inc. is headquartered in Sheridan, WY, USA and our Services are accessible to users around the world. International Users: We welcome users from various countries, and we strive to comply with data protection laws applicable in the regions where we operate. However, please note that by using our Services, your personal data may be transferred to, stored in, or processed in a country different from your home country. This might happen, for example, if our servers (or our service providers’ servers) are located in another jurisdiction (such as the United States or the European Union), or if our staff or contractors access your data from a country outside of yours. Cross-Border Data Protection: Whenever we transfer personal data out of its country of origin, we take steps to ensure that appropriate safeguards are in place to protect it. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data transfer restrictions, we will implement relevant legal transfer mechanisms to ensure your data remains protected according to your home country’s standards. This may include using European Commission-approved Standard Contractual Clauses or relying on an adequacy decision for the destination country, as applicable.
Our third-party service providers and partners are vetted for strong data protection practices, and when they process data internationally, we contractually oblige them to uphold privacy protections in line with this Policy and applicable law. For example, personal data of EU users may be stored on servers in the U.S., but we will ensure the data receives an adequate level of protection equivalent to EU standards.
By using our Services, you consent to the transfer of your personal information to countries outside of your own, including the United States. You acknowledge that different countries may have different data protection laws than your country of residence, and in some cases, those laws might provide less protection. Even so, we will handle your personal data as described in this Privacy Policy and with appropriate care no matter where it is processed.
We also remain committed to any additional privacy rights or protections that may apply under local laws. If local law prohibits or restricts certain data practices (for example, if certain content is illegal in your country), it is your responsibility to ensure your use of our Services is lawful in your jurisdiction. We reserve the right to restrict access to the Services in certain jurisdictions if required by applicable law.
Your Privacy Rights (GDPR and Other Jurisdictions)
UEX.US Inc. respects your rights to your personal data. Depending on your location and subject to applicable law, you may have some or all of the following data subject rights regarding the personal data we hold about you:
- Right to Access: You have the right to request confirmation of whether we are processing your personal data, and if so, to request a copy of the personal data we hold about you, as well as information about how we use it.
- This is commonly known as a “Data Subject Access Request.” We will provide you with a copy of your data in a commonly used electronic format, unless you request a different method. Right to Rectification: If any of your personal information is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
- We encourage you to keep your account information up-to-date so we can serve you best.
- Right to Erasure (Deletion): You have the right to request that we delete your personal data in certain circumstances (also called “the right to be forgotten”). For example, you can request erasure if the data is no longer necessary for the purposes it was collected, or if you withdraw consent (where applicable) or object to processing and we have no overriding legitimate interest in continuing the processing, or if we are required by law to erase it. We will honor valid deletion requests, though we may retain certain information as required by law or for legitimate business purposes (see Data Retention below for more information on when we might need to retain data).
- Right to Restrict Processing: You have the right to ask us to limit or “pause” the processing of your personal data in certain situations.
- For instance, if you contest the accuracy of your data, you can request we restrict processing while we verify the information. Or if you object to our processing based on legitimate interests, you can request restriction pending review. Restriction means we will hold the data but not use it (other than storing it securely) until the issue is resolved.
- Right to Data Portability: You have the right to obtain a copy of certain personal data in a structured, commonly used, machine-readable format so that you can re-use it or transfer it to another service provider.
- This right applies to personal data you have provided to us (e.g., account data) that we process by automated means, where the processing is based on your consent or on a contract with you. Where technically feasible, upon your request, we can also transmit that data directly to another organization if you prefer.
- Right to Lodge a Complaint: If you believe that we have infringed your privacy rights or violated data protection laws, you have the right to complain to a supervisory authority. This could be the data protection authority in your country of residence, place of work, or where the incident took place.
- For example, EU users can contact their national Data Protection Authority; UK users can reach out to the ICO; and Canadian users can complain to the OPC. We would, however, appreciate the chance to address your concerns directly before you approach a regulator – please see Contact Us below to reach our Data Protection Officer or privacy team, and we will do our best to resolve any issue in a timely manner.
Additional Rights: In certain jurisdictions, you may have additional rights not listed above. For instance, if you are a California resident, you have rights under the CCPA (California Consumer Privacy Act) such as the right to know categories of personal information we have collected and the right to opt-out of the sale of personal information. While UEX does not sell personal data, we will facilitate any such requests in line with applicable law. If you are in a jurisdiction with broader privacy rights (like the right to object to processing or rights related to automated decision-making), we will respect those rights as well. We will also honor your right to withdraw consent at any time if we rely on consent for processing (with such withdrawal not affecting the lawfulness of processing before the withdrawal).Exercising Your Rights: You can exercise these rights by contacting us (see Contact Us section). For certain requests, we might need additional information from you to verify your identity – this is to ensure we do not disclose personal data to an unauthorized person. We will respond to your request within the timeframe required by law (generally within one month for GDPR-related requests, extendable if necessary). Please note that some rights may be limited: for example, if fulfilling your request would reveal personal data about another individual, or if you request deletion of data that we are legally required to keep, we may not be able to fully comply. In such cases, we will inform you of the specific reasons we cannot fulfill the request. There is no fee for exercising your rights, unless the requests are manifestly unfounded or excessive (in which case we may charge a reasonable fee or refuse the request).
Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. In practice, this means:
- General Retention: For most account-related data, we keep your information for as long as your account is active and for a reasonable period thereafter in case you decide to reactivate our Services. If you close your account or it has been inactive for a long period, we will either delete or anonymize your personal data or, if that is not possible (for example, data stored in backups), securely store your data and isolate it from further use until deletion is feasible.
- Retention for Legal Compliance: Financial and transaction records, as well as the personal identification data associated with those records, are kept for a minimum period as required by law. Notably, under many Anti-Money Laundering (AML) regulations, we are obligated to retain certain customer and transaction data for at least 5 years after the end of the customer relationship or the date of a transaction.
- This includes information like your identity verification data and transaction history, which we must preserve even if you request deletion or terminate your account, in order to comply with AML laws and prevent illicit financial activity. For example, Crypto.com (a comparable service) discloses that it “retains personal data for 5 years after you close your account” to meet EU Anti-Money Laundering Directive requirements.
- UEX similarly will retain your data for at least the legally mandated period. We may also be subject to other record-keeping laws (for tax, accounting, or other regulatory purposes) that require retention for a certain time (often 5 to 7 years depending on jurisdiction). We will not delete required records before those periods expire even if you request erasure.
- Dispute and Enforcement Retention: If you are involved in a dispute or investigation (for example, a legal claim, fraud allegation, or regulatory inquiry), we will retain relevant information throughout the duration of the dispute/investigation and for any applicable limitation period thereafter. We also keep data as needed to enforce our agreements and to resolve any complaints or appeals.
After the applicable retention period has passed, or if we determine that the information is no longer required (and not subject to a legal hold or other obligation), we will either permanently erase the personal data in our custody or render it anonymous (so that it can no longer be associated with you). When disposing of personal data, we take care to do so securely to prevent any unauthorized access (for example, by using data wiping software, de-identification techniques, or physical destruction of hardware).Please note that due to the decentralized and blockchain-based nature of some of our Services, certain data (like transaction records on public blockchains) cannot be altered or deleted by us. However, any personal data that we store on our own systems will be governed by the above retention policies.
Data Security
We take the security of your personal information very seriously. UEX.US Inc. employs a variety of technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: We use industry-standard encryption protocols (such as HTTPS/TLS) to protect data in transit between your device and our servers. Sensitive data (like passwords and payment information) is encrypted at rest in our databases or storage. We also encourage you to use the latest secure browsers and to enable available security features (like two-factor authentication) on your account for additional protection.
- Access Controls: Personal data is stored on secure servers that are protected by firewalls and located in secure facilities.
- We limit access to personal information to authorized personnel who have a business need to know. UEX staff and contractors who handle personal data are subject to confidentiality obligations and undergo training on data security. We implement role-based access controls so that employees only access the data necessary for their job functions.
- Security Testing and Standards: We maintain internal policies and procedures aligned with industry best practices for information security. This includes regular security assessments, vulnerability scanning, and, where appropriate, penetration testing of our infrastructure. We keep our software and infrastructure updated to protect against known vulnerabilities. In addition, we may undergo external audits or reviews to verify our security practices and compliance.
- Payment and Financial Security: For handling payment card information, we comply with the Payment Card Industry Data Security Standard (PCI-DSS) as applicable. Cryptocurrency assets on our platform are secured using measures such as encryption of private keys, cold storage solutions, and multi-signature wallets to mitigate the risk of theft. Transaction approvals may require multi-factor verification to ensure they are legitimate.
- Incident Response: We have put in place a data breach response plan. In the event of a security incident that affects your personal data, we will notify you and relevant authorities as required by law, and we will take all reasonable steps to mitigate the incident and prevent future occurrences.
Despite our efforts, please be aware that no security measure or system is infallible. The transmission of information via the internet is not completely secure, and we cannot guarantee the absolute security of your data, especially data transmitted to our platform. You also play a role in keeping your information safe. We advise you to use a strong, unique password for your UEX account, enable two-factor authentication, and guard against unauthorized access to your account credentials or devices. If you suspect any unauthorized activity or security breach related to your account, please contact us immediately.
Compliance and Law Enforcement
As a provider of financial and digital asset services, UEX.US Inc. adheres to strict compliance standards to prevent illicit activities and protect our users and the public. Below is how we address compliance and cooperate with law enforcement:
- AML and Fraud Compliance: We continuously monitor accounts and transactions for compliance with AML/CFT regulations and our internal anti-fraud policies. We leverage the personal data you provide (and data generated through your use of our Services) to conduct risk assessments and due diligence. If certain thresholds or suspicious patterns are detected, our compliance team will review and, if necessary, request additional information from you or take action such as temporarily freezing funds or accounts. As noted above, if we have reason to believe your account is being used for illegal purposes (e.g., fraud, money laundering, sanctions violations), we reserve the right to suspend or terminate your access to the Services and block transactions, in line with our legal obligations and terms of service.
- This is both for your protection and to comply with laws that give financial institutions the authority to freeze accounts when unlawful activity is suspected.
- Regulatory Reporting: We may be required by law to collect additional information from you or to report certain information about your activities to regulators or government agencies. For example, under the U.S. Bank Secrecy Act and international equivalents, we might need to file Currency Transaction Reports (CTRs) for large cash transactions or Suspicious Activity Reports (SARs) for transactions that might signal illegal activity. These reports could include personal data such as your name, account number, and details of the transaction in question. We are generally prohibited by law from telling you if we have filed a SAR related to your account. We retain records of all such compliance-related communications and filings as part of our regulatory obligations.
- Sanctions Compliance: We do not allow use of our Services in certain sanctioned jurisdictions or by individuals/entities that are subject to trade sanctions or watchlists (e.g., those listed by the U.S. OFAC, UN, EU, etc.). Thus, we may screen your data against relevant sanctions lists. If a potential match is found, we may block the individual or entity from using our Service and might report it to authorities, as required by law.
- Law Enforcement Requests: From time to time, UEX may receive lawful requests from law enforcement agencies (such as subpoenas, court orders, or warrants) seeking access to user data. When we receive such requests, our legal team will validate that the request is legitimate and complies with all applicable laws. If so, we will respond in a manner that is narrowly tailored to the scope of the request (providing only the data that the authorities are legally entitled to obtain). We will notify affected users of any such requests if we are legally allowed to do so. However, authorities may prohibit us from notifying you in some cases (for example, a court order might bar disclosure of an ongoing investigation). Rest assured, we do not volunteer information to the government outside the scope of lawful requests or our legal obligations.
- Corporate Compliance: UEX.US Inc. maintains an internal compliance program and has appointed compliance officers to oversee adherence to all relevant laws and regulations. We conduct regular audits of our processes and cooperate fully with regulators. Our status as a FinCEN-registered MSB and our pursuit of state MTLs means we are accountable to regulatory oversight and committed to the highest standards of legal compliance in all operations.
- This dedication to compliance helps ensure that your data is handled lawfully and that our platform remains a safe environment for legitimate users.
Children’s Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children or minors. If you are under 18, you should not use our Services or provide any personal information to us. If we become aware that we have inadvertently collected information from a child, we will take steps to delete such information promptly. Parents or guardians who believe that we might have any information from or about a minor under 18 may contact us to request deletion.
Updates to this Privacy Policy
We may update or modify this Privacy Policy from time to time to reflect changes in our business, legal or regulatory obligations, or best practices. If we make any material changes to how we collect or use your personal data, we will provide prominent notice (such as by posting a notice on our websites or notifying you via email, push notification, or message through the Service) prior to the change becoming effective. The “Effective Date” at the top of this Policy will be updated to indicate when the latest changes were made. We encourage you to review this Policy periodically for any updates.
Your continued use of our Services after any changes to this Privacy Policy signifies your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the Services and may request us to delete your personal data (subject to the limitations discussed in Data Retention above). For significant changes where required by law, we may seek your explicit consent (for example, if a change would require new consent under GDPR).
Loan Terms
1. Disclaimer for Liquidation:
The exchange is not responsible for the consequences of asset liquidation due to market fluctuations.
2. Obligation to Repay the Loan:
By taking out a loan, the user undertakes the obligation to repay the full amount on time, regardless of market fluctuations.
3. Awareness of Risks:
The user confirms that they are aware of the high risks associated with crypto lending and accepts them.
4. Liquidation Conditions:
The user is responsible for monitoring their positions and risk levels. The exchange is not liable for losses incurred due to a delayed response to market changes.
5. Changes in Terms:
The exchange reserves the right to modify the lending terms, with prior notification of any changes to the users.
6. No Advisory Support:
The information provided and the lending terms are for informational purposes only and do not constitute financial or investment advice.
7. Legal Liability:
In case of a breach of the loan agreement, the exchange reserves the right to take measures to recover the debt, including the forced liquidation of assets.
8. Confidentiality and Security:
All operations are conducted in accordance with security standards; however, the responsibility for the security of personal data and the user's funds lies primarily with the user.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please feel free to contact us. Our dedicated privacy team (or Data Protection Officer) will be happy to assist you.
Email: You can reach us by email at [email protected] Address: Attn: Privacy Officer.Telephone: +1 (888) 502-2312 We will endeavor to respond to your inquiry as quickly as possible, and in any event within any timeframes required by law. If you are contacting us to exercise a specific data subject right, please clearly describe your request (e.g., “I am requesting access to my personal data” or “I want to delete my account information”) and provide enough information for us to verify your identity.Thank you for trusting UEX with your personal data. We value your privacy and are committed to safeguarding your information while providing you with secure and compliant crypto, fiat, and NFT services.