Privacy Policy

1. Information we collect

We collect information that you provide directly to us, such as your full name, email address, phone number, country of residence and other details requested during account creation or verification. We also collect information generated automatically when you use the Services, including device identifiers, IP address, browser type, access times and the pages or features you interact with.

2. Account information

Your account information includes the credentials and profile details needed to identify you and operate your account, such as your name, email address, account preferences and any profile image you upload. You can review and update much of this information from your profile and settings. Keeping your account information accurate and current is your responsibility.

3. Personal data

Personal data means any information that relates to an identified or identifiable individual, such as your name, contact details, device and usage data, and transaction records associated with you. We process personal data to provide the Services, maintain security, comply with legal obligations and improve our platform. We do not sell your personal data to third parties.

4. Authentication

We use authentication systems to verify your identity when you sign in, recover access or perform sensitive actions. This includes hashed credentials, session tokens, sign-in records and, where available, third-party sign-in such as Google. We store authentication data in encrypted form and limit access to it. You are responsible for keeping your credentials confidential and for activity under your account.

5. Transaction information

When you use features such as swaps, transfers or payments, we record transaction information needed to operate and reconcile the Service, including the assets and networks involved, amounts, status, timestamps and provider reference identifiers. Digital asset transactions are generally recorded on public blockchains and may be visible to third parties through those networks independently of Tunda. We do not store your private keys, seed phrases or recovery phrases.

6. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences and measure how the Services are used. We use analytics tools to understand aggregate usage and improve performance; these tools may collect usage data such as page views and session duration. You can control or disable cookies through your browser settings, but some features may not function correctly without them.

7. Third-party service providers

We work with trusted third-party providers to deliver parts of the Services, such as digital asset exchange and swap infrastructure, authentication, email delivery, analytics and cloud hosting. These providers process information on our behalf only to the extent necessary to provide their services and under appropriate confidentiality and security obligations. Each provider is responsible for its own practices; you should review their terms and policies where applicable.

8. Security

We apply reasonable technical and organisational measures to protect your information, including encryption in transit and at rest, access controls and monitoring. However, no system is completely secure, and we cannot guarantee the absolute safety of your data. You play an important role in protecting your account by using a strong password, enabling any available security features and reporting suspicious activity promptly.

9. Data retention

We retain your information for as long as your account is active and for as long afterwards as necessary to comply with legal obligations, resolve disputes, enforce our agreements and maintain records for accounting and audit purposes. Transaction records may be retained for extended periods as required by applicable law. You can request deletion of your account and associated personal data, subject to these retention requirements.

10. Your rights

Depending on where you live, you may have rights regarding your personal data, including the right to access, correct, export or delete it, and to object to or restrict certain processing. You can exercise many of these rights from your account settings or by contacting us. We may ask for information to verify your identity before acting on a request.

11. International transfers

Your information may be processed and stored in countries other than your own, including where our providers operate. Where this occurs, we take steps designed to ensure your data receives an appropriate level of protection consistent with this Policy and applicable law.

12. Children’s privacy

The Services are not directed at children, and we do not knowingly collect personal data from anyone under the age required to use financial services in their jurisdiction. If you believe a child has provided us with personal data, please contact us so we can remove it.

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Services or by email where appropriate. Continued use of the Services after a change takes effect means you accept the updated Policy.

14. Contact us

If you have questions about this Privacy Policy or your personal data, contact us at hello@tunda.io or visit www.tunda.io.