Privacy Policy

1. Information We Collect

1.1 Personal Identification Information

When you register for an account or use our services, we collect information that identifies you, including:

• Full legal name and email address
• Country of residence
• Government-issued identification documents (for KYC verification)
• Photographic identification including selfie with ID document
• Member number and invitation code used for registration

1.2 Financial Information

To facilitate deposits, withdrawals, and investment activities, we collect:

• Cryptocurrency wallet addresses used for withdrawals
• Transaction history and deposit records
• Investment plan details and active plan status
• Account balances including deposit and withdrawal balance
• Payment receipts from our payment processor (OxaPay)

1.3 Technical and Usage Information

We automatically collect certain technical information when you access our platform:

• IP address, browser type, and operating system
• Country and region of access (via Vercel geolocation headers)
• Pages visited and features used
• Login timestamps and session data
• Device type (desktop or mobile)

2. How We Use Your Information

SpaceX Stocks uses the information we collect for the following purposes:

• Account Management: To create, maintain, and secure your account and verify your identity
• Service Delivery: To process transactions, activate investment plans, and credit weekly returns
• Regulatory Compliance: To comply with KYC/AML requirements and applicable financial regulations
• Communications: To send OTP verification codes, account notifications, and important service updates
• Security: To detect, investigate, and prevent fraudulent transactions and unauthorized access
• Platform Monitoring: To track site visits and monitor platform health via Pushover notifications

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

3.1 Service Providers

We engage trusted third-party service providers who assist in operating our platform, including OxaPay (cryptocurrency payment processing), Resend (email delivery), Supabase (database infrastructure), and Vercel (hosting and deployment). These providers are contractually obligated to maintain the confidentiality of your information and may not use it for their own purposes.

3.2 Legal Requirements

We may disclose your information when required by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 KYC Verification

Identity verification documents submitted through our KYC process are reviewed by our compliance team and may be shared with relevant regulatory authorities where required by applicable law.

4. Data Security

SpaceX Stocks implements industry-standard security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmission
• Bcrypt hashing for all stored passwords and sensitive credentials
• JWT-based authentication with 30-day token expiry
• Email-based OTP authentication for all account access
• Service role key isolation — public API keys cannot modify sensitive data
• Strict access controls limiting personnel access to personal data

5. Data Retention

We retain your personal information for as long as your account remains active or as needed to provide our services. Financial records including transaction history and investment details are retained for a minimum of 5 years in accordance with standard financial compliance requirements. Upon account closure, certain data may be retained for regulatory compliance purposes. KYC documents are retained for the period required by applicable law.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Objection: Object to certain processing of your personal information

To exercise any of these rights, please contact us at support@spacestocks.finance.

7. Cookies and Session Data

Our platform uses authentication tokens stored in your browser's local storage to maintain your logged-in session. We do not use advertising cookies or third-party tracking cookies. Session tokens expire automatically and can be cleared by logging out of your account.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a minor, we will take immediate steps to delete such information and terminate the associated account.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our platform. Your continued use of our services after such changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@spacestocks.finance
• Invest: invest@spacestocks.finance
• Website: spacestocks.finance