Privacy Policy

📋 1. Information We Collect

We collect information you provide directly and information generated through your use of our services:

• Account Information: Email address, name, company name, and password (stored as hashed value) when you register
• Query Data: Blockchain addresses, transaction hashes you submit for risk analysis. This data is used to provide results and is not shared with third parties
• Usage Data: API call logs, feature usage patterns, and dashboard interactions to improve product performance
• Payment Information: Billing details processed by our secure payment provider. We do not store full card numbers
• Communications: Support messages, demo request submissions, and email correspondence

🎯 2. How We Use Information

We use collected information for the following purposes:

• Providing and improving the KYT risk analysis service
• Authenticating your account and managing access controls
• Processing billing and subscription management
• Sending transactional emails (query results, alerts, receipts)
• Responding to support requests and demo inquiries
• Detecting and preventing fraud, abuse, or security threats
• Complying with applicable legal and regulatory obligations in Hong Kong, Singapore, and other operating jurisdictions

🔐 3. Data Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption for data at rest
• TLS 1.3 for all data in transit
• Passwords hashed using bcrypt with per-user salts — we cannot recover your password
• Regular penetration testing and vulnerability assessments
• SOC 2 Type II certified infrastructure
• Role-based access controls — only authorized engineers can access production systems under audit logging

No system can guarantee absolute security. We encourage you to use strong, unique passwords and to enable 2FA when available.

🚫 4. Data Sharing

We do not sell, rent, or trade your personal data. We share information only in the following limited circumstances:

• Service Providers: Trusted vendors who help us operate (cloud hosting, payment processing, email delivery). All vendors are contractually bound to data protection standards
• Legal Requirements: If required by valid court order, subpoena, or regulatory mandate in applicable jurisdictions
• Corporate Transactions: In the event of a merger or acquisition, subject to confidentiality obligations and user notification
• With Your Consent: Any other sharing will only occur with your explicit consent

🍪 5. Cookies & Tracking

We use essential cookies to operate the platform (session management, authentication). We use limited analytics cookies to understand product usage patterns with anonymized data.

We do not use advertising cookies or third-party tracking pixels. You can disable non-essential cookies in your browser settings without affecting core functionality.

📅 6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account information: Retained until account deletion is requested
• Query history: Retained for 12 months, then anonymized for aggregate analytics
• Billing records: Retained for 7 years as required by Hong Kong tax law
• Support communications: Retained for 2 years after resolution

⚖️ 7. Your Privacy Rights

Depending on your jurisdiction (including GDPR for EU users), you have the right to:

• Access: Request a copy of all personal data we hold about you
• Correction: Update inaccurate or incomplete information
• Deletion: Request erasure of your personal data, subject to legal retention requirements
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing for certain purposes including direct marketing
• Restriction: Request we limit processing while a dispute is resolved

To exercise any right, contact us at privacy@lionx.cash. We will respond within 30 days.

🌐 8. International Data Transfers

LionX KYT operates globally. Your data may be transferred to and processed in jurisdictions other than your country of residence, including Hong Kong and Singapore, where our primary infrastructure is located.

For users in the European Economic Area, we ensure appropriate safeguards (Standard Contractual Clauses) are in place for data transfers outside the EEA.

👶 9. Children's Privacy

Our services are intended for business use by individuals 18 years of age or older. We do not knowingly collect personal information from children under 18. If you believe a minor has provided us with personal information, please contact us immediately.

📬 10. Contact Us

For privacy-related inquiries, data requests, or to report a security concern:

• Email: privacy@lionx.cash
• Address: LionX Technology Limited, Room 2101, 21/F, One IFC, 1 Harbour View Street, Central, Hong Kong SAR

We reserve the right to update this policy at any time. Material changes will be communicated via email to registered users 30 days in advance of taking effect.