Your data, handled properly.
instiXFX Global Ltd is the data controller for personal data processed through this platform. We collect only what regulation and product delivery require.
What we collect
Identity data (name, date of birth, nationality, address, document images, selfie video), contact data (email, phone), transactional data (top-ups, conversions, withdrawals), device data (IP, user agent, session identifiers) and communications with support.
Why we process it
To open and operate your account, verify your identity, prevent financial crime, execute FX and payment instructions, meet legal and regulatory obligations, and improve our service. We do not sell personal data.
Lawful basis
Contract performance (running your account), legal obligation (AML, sanctions, tax and payments regulation), and legitimate interests (fraud prevention, service security). Marketing communications, where offered, are strictly opt-in.
Sharing
With regulated third parties strictly for account operation — KYC/verification providers, card acquirers, banking partners for SEPA/SWIFT, cloud infrastructure providers under GDPR-compliant contracts — and with regulators, law enforcement or courts where legally required.
Retention
Identity and transactional records are retained for at least five years after account closure, as required by AML law. Marketing data is retained only while your consent is active.
Your rights
Access, correction, restriction, portability, objection and (subject to legal retention) erasure. Exercise any right at privacy@instixfx.io. You can also complain to your local data protection authority.
Security
TLS in transit, encryption at rest, principle-of-least-privilege access controls, continuous monitoring and annual independent penetration tests.