Aurex Privacy Policy

1. Overview

This Privacy Policy explains how Aurex ("we", "the Service") collects, uses, stores and protects the personal data of customers who use our website, our Telegram bot @AurexOTCBot, and our exchange services. By using the Service you agree to the practices described here.

2. Data We Collect

Depending on how you interact with the Service, we may collect:

• contact and identity data — name, Telegram username and ID, and any phone or messenger contacts you provide;
• transaction data — currencies, amounts, wallet addresses (including the sending wallet collected for AML screening), and order history;
• verification data — identity documents and proof of address, where KYC applies (see our AML Policy);
• technical data — IP address, device and browser information, and cookies collected automatically when you visit the website.

3. How We Use Your Data

We use personal data only for the following purposes:

• to process exchange orders and provide the service you request;
• to meet Anti-Money Laundering (AML) and Counter-Terrorism Financing obligations, including KYC and transaction screening;
• to communicate with you about your orders and provide customer support;
• to prevent fraud, abuse and other unlawful activity;
• to comply with legal and regulatory requirements.

4. Legal Basis

We process personal data to perform the exchange you request, to comply with our legal obligations (in particular AML/CTF law), and for our legitimate interest in operating the Service securely. We do not use your data for advertising and we do not sell it.

5. Data Sharing

We do not sell personal data. We disclose it only:

• to AML and blockchain-analytics providers that screen wallet addresses on our behalf;
• to payment and banking partners, strictly as needed to complete a transaction;
• to authorized government bodies and regulators where required by applicable law;
• to professional advisers bound by confidentiality obligations.

6. Data Retention

Verification documents and transaction records are retained for 5 years after your last transaction, in line with international AML practice. Other data is kept only as long as necessary for the purpose for which it was collected.

7. Data Security

Personal data and KYC documents are stored encrypted, and access is restricted to authorized personnel. We apply organizational and technical measures to protect data against unauthorized access, loss or disclosure.

8. Your Rights

Subject to applicable law and our AML retention obligations, you may:

• request access to the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of data that the law no longer requires us to retain;
• object to or restrict certain processing of your data.

9. Telegram Bot

When you use our Telegram bot @AurexOTCBot, we receive your Telegram ID, username and profile name, together with the messages and order details you submit. The bot uses this data solely to process your requests and operates under this Privacy Policy. Telegram's own handling of your data is governed by Telegram's Privacy Policy.

10. Contacts

Privacy questions and data requests: @aurexOTCsupport