1. Scope and role
This Privacy Policy explains how ExchangerPoint collects, uses, stores, shares and protects personal data and trade data when you access the website, start a P2P trade, verify OTP, upload proof, use chat, trace an order or contact support.
ExchangerPoint processes personal data for lawful operational, contractual, security, compliance and support purposes. This policy is intended to align with Indian privacy expectations, including principles reflected in the Digital Personal Data Protection Act, 2023, where applicable.
- This policy applies to website visitors, buyers, sellers, support contacts and trade room users.
- It applies to digital records, messages, files, logs and trade metadata collected through the website.
2. Data we collect
The data collected depends on your activity. Starting a trade generally requires name, email, mobile number, fiat amount, digital asset type, wallet or payout details, captcha response, OTP verification status and terms acceptance.
During review, ExchangerPoint may collect chat messages, payment screenshots, bank or UPI references, account holder details, transaction hash, wallet screenshots, government ID, selfie with ID, IP address, device/browser details, location approximation and risk review notes.
- Identity and contact data: name, email, phone.
- Trade data: trade ID, asset, amount, quote, wallet, payout details, status.
- Security data: IP address, device/browser, captcha, OTP, access-control signals.
- Proof/KYC data: documents, screenshots, transaction references and uploaded files.
3. Why we use data
ExchangerPoint uses data to calculate and record quotes, create trade rooms, verify OTP, operate chat, process proof, review payment, release or complete trades, trace orders, provide support, prevent abuse and meet compliance expectations.
Data may also be used to detect duplicate trades, blocked users, suspicious IPs, third-party payment, high-risk behaviour, fraud indicators, sanctions or AML/CFT concerns.
- To operate the P2P escrow workflow.
- To communicate with buyer, seller and admin.
- To review payment, escrow funding, payout and release.
- To comply with legal, regulatory, tax, audit, AML/CFT and dispute obligations.
4. Consent, legitimate use and compliance necessity
By submitting forms, verifying OTP, accepting terms, uploading files or using the trade room, you provide data for the stated trade, support and compliance purposes. Some data may be processed because it is necessary to provide the requested service, prevent fraud, maintain security, comply with law or defend legal claims.
If you decline required data, ExchangerPoint may be unable to start or complete a trade. Withdrawal or deletion requests may be limited where retention is required for legal, compliance, dispute, security, tax or audit reasons.
- Captcha and OTP are required for abuse prevention.
- KYC or proof may be required for review.
- Trade records may need to be retained after completion or cancellation.
5. Data sharing and processors
ExchangerPoint may share data with service providers and processors needed for hosting, email, SMS/OTP, captcha, payment review, storage, analytics, security, legal, accounting or compliance support. Data may also be disclosed to banks, payment providers, regulators, law enforcement, courts, FIU/AML authorities or other competent authorities where required or appropriate.
ExchangerPoint does not sell customer personal data as a data-broker product. Social media links and third-party channels are governed by their own privacy terms.
- SMS/email providers may process contact data.
- Google reCAPTCHA may process captcha-related data.
- Hosting and storage providers may process trade room and file data.
- Authorities may receive data where legally required or for suspicious activity handling.
6. Retention
Data is retained for as long as reasonably necessary for trade completion, order trace, dispute handling, fraud prevention, legal compliance, AML/CFT review, tax/accounting records, audit, customer support and system security.
Retention periods may vary by data type and risk level. Some logs or backups may remain for a limited period even after active records are closed.
- Completed, cancelled, expired and disputed trade records may be retained.
- KYC/proof records may be retained where required for compliance or dispute defence.
- Support communications may be retained to maintain service history.
7. Security safeguards
ExchangerPoint uses reasonable administrative, technical and operational safeguards designed to protect data from unauthorised access, misuse, alteration or loss. These may include OTP, captcha, access control, private trade room links, PIN/session handling, server controls, audit trails and limited access to support functions.
No online system is completely risk-free. You must keep trade links, OTP, PIN, wallet access, email and device secure. Do not forward private trade links to unauthorised persons.
- Use only official ExchangerPoint pages and links.
- Do not share OTP or private trade room links.
- Report suspicious messages or impersonation attempts promptly.
8. Customer rights and requests
Subject to applicable law and identity verification, you may request access, correction, update or deletion of certain personal data. ExchangerPoint may refuse or limit requests where retention is required for legal, compliance, security, audit, dispute, fraud prevention or transaction record purposes.
Requests must include enough information to identify the relevant trade or account data, such as trade ID, email and mobile number.
- Access request: ask what data is associated with your trade.
- Correction request: ask to correct inaccurate contact or payout details before completion.
- Deletion request: may be limited by retention obligations.
9. Storage, transfer and cross-border processing
Digital infrastructure, communication tools or service providers may process data in India or other jurisdictions depending on hosting, email, SMS, captcha or cloud-provider architecture. ExchangerPoint will use such processing for operational and compliance purposes subject to applicable law.
Do not submit data if you do not want it processed through the systems required to operate the website and trade room.
- Third-party services may have independent security and privacy controls.
- International processing may be subject to different legal regimes.
10. Minors and prohibited users
The service is not intended for minors or persons who are not legally competent to transact. ExchangerPoint may reject or cancel trades if age, identity, authority, legality or account ownership is doubtful.
Parents, guardians or third parties must not use a minor identity or payment account to bypass controls.
- You must be legally competent.
- You must use your own lawful account and identity.
11. Cookies, captcha and technical logs
The website may use cookies, browser storage, cache-control headers, captcha scripts, logs and technical identifiers to operate forms, prevent abuse, maintain sessions, diagnose errors and secure the service.
Browser or device settings may allow you to control certain storage, but disabling required functionality may prevent forms, captcha, quote calculation or trade room access from working correctly.
- Captcha protects forms from automated abuse.
- Logs help diagnose fraud, errors and availability issues.
12. Privacy contact
For privacy questions, data requests or trade-data concerns, contact ExchangerPoint support with your trade ID, email and mobile number. Support may verify identity before acting on a request.
Do not send sensitive ID documents over public social media comments. Use official support channels or the private trade room where available.
- Email: support@exchangerpoint.com
- Contact page: contact-us.html
- Trade support: use the private trade room for active trades.