How AuricPrime Handles Personal Data
Effective July 22, 2026 · Version 2026-07-22
Controller/operator: AuricPrime
1. Who is responsible
AuricPrime is the controller of personal data it determines how and why to process. Contact our privacy team at info@auricprime.com. A community, broker, exchange, payout provider or other integrated service may be a separate controller for its own purposes; its notice also applies.
2. Data we collect
| Category | Examples |
|---|---|
| Identity and account | Name, email, country, public member/referral code, profile photo, age/eligibility confirmations, role, permissions, account and email-verification status. |
| Verification and compliance | Identity, address, beneficial-owner, source-of-funds/wealth, tax-residency, sanctions and risk-screening information when required; review outcomes and supporting evidence. |
| Financial and transaction | Contributions, subscription purchases, assets, networks, public wallet addresses, transaction IDs, payment reservations, confirmations, profit/share calculations, internal-wallet ledger, withdrawals, payout methods, fees, invoices, adjustments and audit history. |
| Trading and automation | Broker/exchange and MT5 account identifiers, bot/licence details, balances, equity, positions, trades, symbols, performance metrics, live telemetry, debug logs, configuration and command history. Do not provide private keys or seed phrases. |
| Device and security | IP address, user agent, device name/ID, operating system, app/application ID, session and access-token records, login and acceptance logs, passkey/two-factor metadata, fraud and security signals. Biometric templates remain with the device/platform and are not received by us. |
| Community and referral | Referrer, attribution cookie, community membership, partner-request business name, owner name, phone, email, community size, reason, reward eligibility and payout records. |
| Communications | Contact forms, email, newsletter status, support-chat content and identifiers, conversation status, Discord identity/messages relevant to support or operations, complaints and call/message records. |
| Content and files | Profile images, transaction proofs, support attachments and other material you choose to upload. |
| Usage and diagnostics | Pages/screens viewed, feature interactions, cookie/local-storage identifiers, crashes, application performance, real-user monitoring and service logs. |
| Inferences | Risk, fraud, eligibility, product-use and support-priority indicators derived from the above. We do not use solely automated decisions producing legal or similarly significant effects without a lawful basis and required safeguards. |
3. Sources
We collect data from you; your device and use of the Services; referrers and community owners; administrators acting on authorised records; MT5, brokers, exchanges and blockchain explorers; banks and payout providers; Chatwoot, Discord, Firebase and email providers; fraud, sanctions and identity-verification providers; public blockchains and lawful public sources; and other parties you authorise.
4. Purposes and legal bases
- Contract: register and authenticate you; provide licences, bots, slots, payment instructions, transaction verification, profit calculations, wallet ledgers, withdrawals, referrals, support and requested communications.
- Legal obligation: identity and transaction checks, AML/CFT and sanctions controls, accounting, tax, regulatory reporting, recordkeeping, court orders and data-subject requests.
- Legitimate interests: secure and improve the Services, prevent fraud, investigate incidents, enforce agreements, maintain audit trails, perform analytics, manage communities and defend legal claims, balanced against your rights.
- Consent: optional marketing, non-essential cookies, device push permission and other processing where law requires consent. You can withdraw consent without affecting earlier lawful processing.
- Vital/public interests: protect life, safety, systems or the public where the law permits or requires it.
If required information is not provided, we may be unable to open an account, verify a payment, allow a regulated feature or process a withdrawal. We do not treat acceptance of this Policy as blanket consent.
5. How we use data
We use data to operate and personalise accounts; calculate and reconcile contributions, ownership, profits, fees, rewards and balances; connect and monitor authorised trading services; deliver notifications and support; administer communities and white-label access; verify payments and payouts; detect prohibited or suspicious activity; troubleshoot and monitor performance; maintain business, security and legal records; communicate material changes; conduct aggregate analytics; and establish, exercise or defend claims.
6. Sharing and recipients
We disclose only what is reasonably necessary to:
- Infrastructure and software providers: hosting, databases, storage, security, monitoring, email, Firebase push messaging, Chatwoot support chat, Discord operational notifications, app stores and device platforms.
- Financial and trading parties: MT5/MetaQuotes, brokers, exchanges such as configured Binance or OKX services, blockchain networks/explorers, payment, banking and payout providers.
- Communities: an authorised community owner or administrator may receive member, contribution, profit, withdrawal, support and referral information needed to operate that community. We do not authorise unrelated use.
- Professional and legal recipients: auditors, accountants, insurers, lawyers, compliance providers, regulators, tax bodies, law enforcement and courts.
- Corporate transactions: diligence and transfer recipients in a merger, financing, restructuring or sale, subject to confidentiality and applicable notice.
- At your direction: a party you ask us to connect with or disclose to.
We do not sell personal data for money. We do not share it for cross-context behavioural advertising. If our practices change, we will provide any legally required opt-out.
7. Public blockchains and visible information
Blockchain addresses, transaction IDs, assets, amounts and timestamps may be permanently public and can be linked to you by analytics or other parties. We cannot erase or change a public blockchain. Public member codes, referral links, community labels and published performance may also be visible as clearly indicated. Do not place confidential information in public transaction metadata.
8. International transfers
We and our providers may process data outside your country, including where cloud, exchange, support, messaging or app-store infrastructure operates. Where required, we use an adequacy decision, approved contractual clauses, provider certification or another lawful mechanism, and apply supplementary security measures where appropriate. Contact us for information about the mechanism relevant to you.
9. Retention
| Record | Typical period |
|---|---|
| Account/profile and support | While active, then normally up to 3 years after closure or last interaction. |
| Contracts, acceptances, licences and complaints | Term of the relationship plus normally 6 years. |
| Financial, transaction, wallet, trading, AML/CFT and sanctions records | For the period required by applicable financial, virtual-asset, tax, accounting and anti-financial-crime laws; otherwise for the applicable claims and audit period. |
| Security, access and diagnostic logs | Normally 12–24 months, longer for an incident, investigation or legal hold. |
| Push tokens | Until disabled, invalid, account closure or 12 months of inactivity. |
| Newsletter/marketing | Until opt-out, plus a minimal suppression record to honour it. |
| Referral attribution cookie | The period configured for attribution, then deletion/expiry unless needed for a completed reward record. |
Actual periods may be shorter or longer based on jurisdiction, regulator direction, litigation hold, fraud risk and backup cycles. When no longer required, data is deleted, anonymised or access-restricted.
10. Security
We use measures designed for the risk, including encrypted transport, protected password storage, encryption of selected secrets, role-based permissions, email verification, optional two-factor/passkeys, secure mobile storage, logging, backups, payment verification and incident monitoring. No system or blockchain is perfectly secure. You must secure your email, devices, credentials, broker/exchange accounts and wallet destinations and promptly report suspected compromise.
11. Cookies, local storage and mobile permissions
We use strictly necessary session, security, preference and referral-attribution technologies and may use consent-based analytics. The mobile app may request notifications, photos/camera for a selected profile image or proof, biometrics for local unlock, and network access. Permissions can be changed in device settings, although a related feature may stop working. See the Cookie Policy.
12. Your rights
Depending on your location, you may request access, confirmation, correction, deletion, restriction, portability, objection, withdrawal of consent, a copy of transfer safeguards, or review of a significant automated decision. You may also opt out of marketing and, where applicable, sale/sharing or targeted advertising (which we currently do not perform).
Email info@auricprime.com. Describe the right and account. We may verify identity and authority, redact others’ data, and refuse or limit a request only where law permits—for example, to retain transaction/AML records, protect security, preserve another person’s rights or defend claims. We will respond within the legally required period and explain any extension or refusal. You may complain to your competent privacy, consumer or sector regulator.
13. Account deletion
Deletion closes or de-identifies ordinary profile data but cannot erase public blockchain records or data we must retain for financial, AML/CFT, tax, security, dispute or audit duties. We may restrict retained records from ordinary use. An account with unsettled positions, balances, withdrawals, licences or an active legal hold must first complete the applicable closure process.
14. Marketing and referrals
We send marketing only as law allows and provide an unsubscribe method. Service, security, transaction and legal notices continue. Referrers may learn that a qualifying referral generated a reward but should not receive your private trading or payment details. Partners must not upload contact lists or send marketing through AuricPrime without a lawful basis and required consent.
15. Children
The Services are for persons at least 18 and are not directed to children. We do not knowingly open child accounts. If you believe a child supplied data, contact us; we will investigate, close the account where appropriate and delete data unless preservation is legally required.
16. Changes to this Policy
We may update this Policy for product, provider, legal or security changes. We will post the new version and, for material changes, provide prominent or direct notice where reasonably practicable. We will request consent if a new use requires it. Previous processing remains governed by the version then in effect.
17. Contact and complaints
AuricPrime
Privacy email: info@auricprime.com
Please contact us first so we can investigate. This does not limit your right to complain to a regulator or seek a judicial remedy.