Privacy Policy

Effective August 1, 2026

Strade (“Strade”, “we”, “us” or “our”) is committed to protecting the privacy of its users and takes its data-protection responsibilities with the utmost seriousness. This Privacy Policy describes how Strade collects, uses, stores, transfers and protects your personal information when you use the websites, applications and other services of Strade (whose domain names include, without limitation, https://strade.io/) that reference this Policy. The terms “Strade” and “we” mean all Strade Operators — the persons who operate Strade and provide its services.

This Privacy Policy applies together with our Terms of Use and other contractual documents. By using our products and services, you agree to the practices described in this Policy. We may amend this Policy from time to time and recommend that you review it periodically. For questions related to this Policy, contact us at support@strade.io.

1. What data we collect

We collect the following categories of personal data:

(1) Identity and verification data (KYC): first and last name, photograph, details of identity documents (passport, driver’s license, etc.), including numbers, dates of issue and expiry, photograph and address; date of birth; tax number (if applicable);

(2) Contact data: email address, postal address, phone number, username;

(3) Financial and transaction data: bank details, transaction history, deposit and withdrawal information, blockchain wallet addresses;

(4) Technical and device data: IP address, device and operating system type, device identifiers (e.g., IMEI, MAC address), browser type and language, cookie identifiers, location data, internet service provider information;

(5) Data from other sources: information obtained from third-party business partners and verification service providers through whom you access our Services.

This Policy does not apply to: (1) your search queries when using our Services; (2) content you make publicly available; (3) information about violations you have committed of laws, regulations or our rules and the measures applied in connection therewith.

2. How we use your information

We use your information for the following purposes, including without limitation:

(1) opening and maintaining your account on Strade;

(2) providing the Services and executing your transactions, including spot trading, deposits and withdrawals, and exchange (Swap);

(3) identity verification (KYC) and ensuring information security, detecting fraudulent, misleading and illegal activities;

(4) responding to your inquiries and providing user support;

(5) analyzing and improving our products and services;

(6) complying with applicable legal and regulatory obligations, including anti-money-laundering (AML), tax and sanctions legislation;

(7) providing information about products and promotions — only with your explicit consent.

3. Legal bases for processing

We process your personal data on the following legal bases:

(1) Performance of a contract — processing is necessary to provide you with the Services in accordance with the Terms of Use;

(2) Compliance with a legal obligation — processing is necessary to fulfil legal requirements, including KYC, anti-money-laundering and counter-terrorism-financing (AML/CFT), tax and sanctions legislation;

(3) Legitimate interests — processing for the purposes of security, fraud prevention, risk management and improvement of our Services, where this is not overridden by your rights and interests;

(4) Consent — processing for marketing purposes, the use of certain cookies and in other cases where we request your consent; you have the right to withdraw consent at any time.

4. Disclosure to third parties

We may disclose the personal information we collect about you:

(1) with your consent — to unaffiliated third parties;

(2) to service providers — including identity and KYC verification providers and transaction processors, so that you can use the relevant services;

(3) to business partners — when jointly providing a product or service;

(4) to our affiliates;

(5) to law-enforcement authorities, regulators and other authorized bodies — where required by law, by subpoena, court order or other legal procedure, as well as to report suspected illegal activity or investigate violations.

Any third party gaining access to your personal information is obligated to protect it and use it only to provide the relevant services, unless otherwise required or permitted by law.

5. International data transfers

We store and process your personal and transaction information in various countries where we and our service providers are located, including outside your country of residence. If such a transfer is made to a jurisdiction that does not provide a comparable level of data protection, we apply appropriate legal safeguards, including Standard Contractual Clauses or other mechanisms provided for by applicable law, to protect your information.

6. Data retention

We retain your personal information for the period during which you use our Services, as well as for the period necessary to achieve the purposes for which it was collected, resolve disputes, protect legal claims, conduct audits and comply with applicable law. To comply with anti-money-laundering requirements, as well as tax and other legal obligations, we retain account data and personal information for the period required by applicable law. Data retained solely for regulatory purposes is protected from excessive processing and stored only to enable the provision of information to the competent authorities.

7. Deletion and anonymization of data

As soon as we are no longer obligated to provide you with the Services or to retain your personal information for legal or regulatory purposes, we anonymize or destroy it in accordance with accepted industry security standards so that it cannot be recovered or linked to you. If immediate deletion is not possible (for example, in archived backups), we retain a record of which information is to be deleted upon data restoration.

8. Cookies

We use cookies — small data files that assign a unique identifier to your device — as well as similar technologies (web beacons, transparent GIF files). They allow us to save your preferences, evaluate the effectiveness of the site, analyze trends and improve the quality of your experience. We may engage third parties to analyze site usage; such providers may place cookies and receive aggregated information. You can block, reject or delete cookies using your browser; however, this may limit access to certain functions of our Services.

9. Security

We apply reasonable technical, physical and organizational security measures to protect your personal information from loss, unauthorized access, use, alteration or destruction. Only authorized Strade employees, who are obligated to maintain confidentiality, have access to your data. If we transfer your data to third parties, we require a comparable level of protection on the basis of contractual obligations. These measures are periodically reviewed in light of changes in legislation and technology. No system is absolutely secure; in the event of a personal data breach, we will notify you and the competent authorities in accordance with applicable law. If you discover that your credentials have been disclosed, immediately contact our support service.

10. Automated processing and profiling

To reduce the risks of fraud, money laundering and abuse of our Services, we may apply automated processing and profiling to analyze your identification, transaction and behavioral data. If you do not consent to such processing, we may be unable to provide you with some or all of our Services. If you believe that such processing affects your rights, contact us for more information.

11. Your rights

Depending on applicable law, you may have the following rights, which you can exercise by contacting support@strade.io:

(1) Access — to find out whether we process your data and to obtain a copy of it together with information about the processing;

(2) Rectification — to request the correction of incomplete or inaccurate data;

(3) Erasure — to request the deletion of data in certain circumstances (subject to exceptions where the data is required by law or in connection with claims);

(4) Restriction — to request the suspension of the processing of certain data;

(5) Portability — to request the transfer of certain data to another party;

(6) Objection — to object to processing based on legitimate interests, as well as to processing for direct-marketing purposes;

(7) Withdrawal of consent — to withdraw previously given consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal;

(8) Complaint — to lodge a complaint with the competent data-protection supervisory authority.

These rights may be limited — for example, if fulfilling the request would disclose another person’s personal data, infringe someone’s rights, or if we are required to retain the data by law. To protect your data, we may require confirmation of your identity before fulfilling the request.

12. Marketing

At registration or later, we may request your consent to use your personal information for marketing purposes, providing the option to choose preferences in your profile. You have the right to withdraw your consent to processing for marketing at any time by changing the relevant settings in your profile or by contacting us by email.

13. Children’s privacy

Our Services are intended exclusively for persons who are at least 18 years old. We do not knowingly collect personal data of minors. If we become aware that we have received data of a person under 18, we will take steps to delete such data and close the corresponding account.

14. External websites

Our site may contain links to third-party websites (“External Websites”) that we do not control. This Policy does not apply to External Websites; they have their own terms of use and privacy policies. We recommend that you review the policies of each site you visit, and we are not liable for their content, policies or actions.

15. Changes to this Policy

We may change, supplement or update this Privacy Policy at any time at our own discretion. We notify of any changes made by posting the updated version on our site. If the changes materially affect your rights, we may request confirmation of your consent to them before continuing to provide the Services.

16. Protection against fraud and phishing

Please note: Strade does not cooperate with persons or organizations that present themselves as “support agents” and offer paid assistance by phone or on social media. Official Strade support is provided exclusively through the Strade site and is always free. To protect against phishing, we recommend using the anti-phishing code in your account settings and verifying the authenticity of domains and emails before entering your data.

17. Contact us

If you have any questions, comments or complaints related to this Privacy Policy, or you intend to exercise your rights, contact us at support@strade.io.