Skip to content

Pre-launch: investment products, deposits and withdrawals are not yet open.Regulatory status

Legal

Privacy Policy

This policy explains what personal data KVESTY collects, why, and your rights. It is a working draft that must be reviewed by a qualified data-protection lawyer before launch.

Draft for legal review. This document is a structured draft and must be reviewed and approved by qualified legal counsel before the platform launches.

Data we collect

Depending on how you use the website and platform:

  • Contact details you submit (name, email, phone, message).
  • Account data (email, hashed password, security settings).
  • Identity-verification data where required by law (legal name, date of birth, country, identity-document details, verification outcome).
  • Transaction and portfolio records, once those services exist.
  • Technical data (IP address, device and browser information, security logs).

Why we use it

To respond to enquiries, operate and secure your account, meet legal and regulatory obligations (including identity-verification and anti-money-laundering requirements), prevent fraud and improve our service.

What we never collect

We never ask for your cryptocurrency private keys or seed phrases, and we do not store card or bank credentials ourselves; payments are expected to be handled by licensed third-party providers.

Sharing

We share data only with service providers acting for us (for example hosting, identity verification and payment providers), professional advisers, and regulators or authorities where required by law. We do not sell personal data.

International transfers and retention

Data may be processed in other countries with appropriate safeguards. We keep data only as long as necessary for the purposes above and for legal retention periods applicable to financial businesses.

Your rights

Depending on your location (for example under the Nigeria Data Protection Act 2023, the UK/EU GDPR or other laws) you may have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to complain to your data-protection regulator.

Security

We use encryption in transit, hashed passwords, optional two-factor authentication, access controls and audit logging. No system is perfectly secure.

Contact

Use the Contact page. A named data-protection contact will be published here once appointed.