How it works Resources Packages Partner program Docs FAQ Log in Create account
Get started
Legal

Privacy Policy

How we collect, use, and protect your information.

§ 01.00 DATA INGESTION

Information We Collect

To maintain compliance with international financial regulations and deliver high-speed trading services, Cueral collects information that you provide directly and telemetry generated during platform operation.

1. Personal Identity Telemetry

Full legal name, date of birth, residential address, government passport or national ID card, tax identification numbers, and cryptographic facial liveness verifications.

2. Financial & Custodial Records

External public ledger addresses, fiat banking settlement details, incoming wire hashes, margin allocations, and executed order book histories.

3. Network & Device Telemetry

IP addresses, browser client fingerprints, TLS handshake parameters, operating system specifications, and geolocation metrics for anomaly mitigation.

§ 02.00 OPERATIONAL PURPOSE

How Data Is Utilized

Collected data is processed strictly to maintain legal order-matching infrastructure, safeguard accounts against takeover attempts, and meet supervisory mandates.

  • ✓ Execution and real-time clearing of spot, perpetual futures, margin, and staking positions.
  • ✓ Anti-Money Laundering (AML) sanctions screening against OFAC, FATF, and international enforcement databases.
  • ✓ Automated risk calculation, portfolio collateralization levels, and liquidation circuit triggers.
  • ✓ Dispatch of high-priority security notifications including 2FA authorization alerts and withdrawal authorizations.
§ 03.00 SECURITY CONTROLS

Cryptographic Storage & Vault Security

All personally identifiable information (PII) is encrypted at rest using AES-256 Galois/Counter Mode (GCM). Encryption keys are managed through Hardware Security Modules (HSMs) with strict multi-party computation threshold quorum policies.

ℹ

Data in transit is protected using TLS 1.3 cryptographic tunnels with Perfect Forward Secrecy. Raw credentials, private keys, and master passwords are never stored in plaintext across any layer of our database clusters.

§ 04.00 DATA INTEGRATIONS

Third-Party Disclosures & APIs

Cueral does not sell, rent, or trade your personal records. We transmit data strictly to verified institutional infrastructure providers under binding non-disclosure commitments:

KYC Verification Providers Automated optical ID scanning and biometric verification engines.
Banking & Payment Rails Regulated clearing partners processing fiat bank wires and SEPA transfers.
Blockchain Analytics On-chain AML scoring engines flagging illicit transaction flows.
Judicial & Legal Mandates Disclosures mandated by verified court subpoenas and regulatory orders.
§ 05.00 JURISDICTION

International Cross-Border Transfers

Operating a global liquidity network requires server nodes distributed across certified Equinix and AWS data centers in North America, the European Union, and Asia-Pacific. Data transferred between cross-border regions is protected by Standard Contractual Clauses (SCCs) and binding corporate privacy guidelines.

§ 06.00 LEGAL RECOURSE

Your Statutory Rights (GDPR & CCPA)

Depending on your geographic residency, you hold enforceable rights over your stored personal telemetry:

Right of Access (DSAR) Request full export of all records held on your profile.
Right to Rectification Correct outdated identity or financial payment instruments.
Right to Erasure Purge personal telemetry subject to statutory AML retention laws.
Right to Restriction Halt analytical profiling and marketing telemetry processing.
§ 08.00 LIFECYCLE

Data Retention & Purge Protocols

In compliance with global anti-money laundering frameworks and financial reporting standards, account transaction histories and KYC verification dossiers are maintained for a minimum mandatory retention period of five (5) years following account termination.

Upon expiry of mandatory regulatory retention windows, all physical and cryptographic records undergo permanent cryptographic erasure in accordance with NIST SP 800-88 guidelines.