Privacy

This notice explains what personal data Vestvelda collects, why it is held, who it is shared with and how long it is kept. It applies to the Vestvelda platform and to any account opened on it.

1. Who is responsible

Vestvelda, of 12681 DAISY ST BORON CA 93516-1651 USA, is the controller of the personal data described here. Questions about this notice, or about the data held on an account, can be sent to help@vestvelda.com.

2. Information you provide

Account details. An email address, a display name of your choosing, and a cryptographic hash of your password. The password itself is never stored and cannot be recovered from the hash.

Identity verification. Full name, country of residence, date of birth, document type and document number, together with the document image or scan submitted in support of them.

Funding details. The bank, card or wallet information needed to credit and debit an account. Card and bank credentials are handled by the payment processor named in section 6; Vestvelda receives a token and the last four digits, not the full instrument.

Correspondence. Messages sent to support, and the replies to them.

3. Information generated by use of the platform

Trading records. Orders submitted, executions returned by the venue, open and closed positions, balances, transfers and the full transaction history of the account.

Technical records. IP address, browser and device characteristics, request timestamps, and authentication and session events. These are held for security, fraud prevention and the detection of abusive trading patterns.

4. Why this data is processed

To operate the account and execute instructions, which is the performance of the contract between you and Vestvelda. To meet obligations under anti-money-laundering and counter-terrorist-financing rules, sanctions screening, tax reporting and transaction recordkeeping, which is compliance with a legal obligation. To prevent fraud, secure the platform and monitor for market abuse, which rests on legitimate interests in running the service safely. To answer support requests.

5. Identity verification

Verification data and supporting documents are processed by the identity provider named in section 6 and retained by Vestvelda for the period set out in section 9. This retention is required by anti-money-laundering recordkeeping rules and applies even where an account is later closed. Verification codes are stored only as hashes and are cleared once used.

6. Who data is shared with

Vestvelda discloses personal data to the following categories of recipient, each under contract and each limited to what its function requires:

• the identity verification provider, smile, for onboarding checks;
• the payment processor, crypto transfers, for funding and withdrawal;
• the execution venue and custodian, 12681 DAISY ST BORON CA 93516-1651 USA, for order routing and settlement;
• the hosting and infrastructure provider, vestvelda custom servers;
• regulators, tax authorities and law enforcement, where disclosure is legally required or permitted;
• professional advisers, auditors and insurers, in confidence;
• a purchaser or successor entity, together with its advisers, in connection with a merger, acquisition, financing or sale of assets, subject to confidentiality undertakings and to this notice continuing to apply to the data transferred.

Price data is requested server-side from CoinGecko and Finnhub. Those requests originate from the Vestvelda server and carry no account or user identifier.

7. What is not done

No advertising, no behavioural analytics, no advertising or tracking cookies, and no third-party scripts beyond the web font stylesheet. Personal data is not sold, rented, or shared for any party's independent marketing.

8. Transfers outside your jurisdiction

Where a recipient listed in section 6 is located outside california, the transfer is made under standard contractual clauses / adequacy decision / other mechanism.

9. Retention

Account and trading data is held for as long as the account is open. After closure, identity verification records, transaction records and the associated correspondence are retained for 5 years from the end of the relationship, as required by anti-money-laundering and financial recordkeeping rules. Technical logs are kept for 3 months. Anything not subject to a retention obligation is deleted on request or on account closure.

10. Security

Passwords are stored only as hashes. Traffic is served over TLS. Access to production data is restricted to personnel who require it and is logged.

11. Your rights

You may request a copy of the data held about you, ask for inaccurate data to be corrected, request deletion, request a portable export, or object to processing carried out on the basis of legitimate interests. Deletion requests cannot override the retention periods in section 9 where those are imposed by law; in that case the data is restricted from further use rather than erased. You may also complain to your supervisory authority.

12. Age

Vestvelda is not available to anyone under 18, and accounts are not knowingly opened for minors.

13. Changes

This notice is updated when practices change. The date at the top reflects the current version, and material changes are notified to account holders by email before they take effect.

14. Contact

Write to help@vestvelda.com