Privacy Policy
آخر تحديث: January 8, 2026
النص القانوني الرسمي متاح باللغة الإنجليزية أدناه كما هو منشور من arbah.co.
1. Introduction and Scope
Arbah.co ('Company', 'we', 'us', or 'our') is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, store, and protect your personal data when you use our cryptocurrency trading platform and related services (collectively, the 'Platform'). This Policy applies to all users of the Platform worldwide, though certain rights may vary based on your jurisdiction. By using the Platform, you consent to the data practices described in this Policy. If you do not agree with this Policy, please do not use the Platform. We may update this Policy periodically, and material changes will be communicated through the Platform or via email.
2. Information We Collect
We collect several types of information: (A) Information You Provide: email address, display name, profile picture, phone number (if provided for 2FA), wallet addresses you connect, trading preferences and settings, customer support communications, survey responses, and any other information you voluntarily provide. (B) Information Collected Automatically: IP address, device type and identifiers, browser type and version, operating system, access times and dates, pages viewed and features used, click patterns and navigation paths, referral URLs, session duration, and performance data. (C) Blockchain Data: public wallet addresses, transaction history, token holdings, and smart contract interactions (all of which is publicly available on the blockchain). (D) Third-Party Information: data from analytics providers, data from authentication services, market data providers, and publicly available information.
3. How We Use Your Information
We use your information for the following purposes: (A) Service Provision: to create and manage your account, provide access to Platform features, process transactions, display your portfolio and trading history, enable copy trading and social features, and provide customer support. (B) Platform Improvement: to analyze usage patterns and trends, identify bugs and technical issues, develop new features and services, personalize your experience, and conduct research and analytics. (C) Communication: to send service notifications and updates, respond to your inquiries, provide important security alerts, send marketing communications (with your consent), and notify you of policy changes. (D) Security and Compliance: to detect and prevent fraud, enforce our Terms of Service, comply with legal obligations, protect our rights and property, and ensure platform security. (E) Legal Bases: we process data based on contractual necessity, legitimate interests, legal compliance, and your consent where required.
4. Data Sharing and Disclosure
We may share your information with: (A) Service Providers: cloud hosting providers, analytics services, payment processors, customer support tools, email service providers, and security services. All service providers are bound by confidentiality obligations. (B) Business Transfers: in connection with any merger, acquisition, restructuring, or sale of assets, your information may be transferred as a business asset. (C) Legal Requirements: when required by law, court order, or government request; to protect our rights, privacy, safety, or property; to enforce our Terms of Service; or to respond to an emergency involving danger of death or serious injury. (D) With Your Consent: when you explicitly authorize sharing with third parties. (E) Aggregated Data: we may share anonymized, aggregated data that cannot be used to identify you. We DO NOT sell your personal information to third parties for their marketing purposes.
5. Blockchain and Public Data
You acknowledge that: (A) blockchain transactions are publicly recorded and permanently stored on distributed ledgers; (B) your wallet addresses, transaction amounts, and token holdings are visible to anyone; (C) once recorded on the blockchain, transactions cannot be deleted or modified; (D) linking your identity to a wallet address may make your transaction history identifiable; (E) we cannot control or limit access to public blockchain data; (F) third parties may analyze blockchain data and potentially link it to your identity; and (G) you should consider these factors when using the Platform and connecting wallets. We recommend using different wallets for different purposes if privacy is a concern.
6. Data Retention
We retain your personal data for as long as necessary to: (A) maintain your active account and provide services; (B) comply with legal, accounting, or reporting requirements; (C) resolve disputes and enforce our agreements; (D) maintain security and fraud prevention records; and (E) fulfill any other legitimate business purpose. Specific retention periods: account data is retained while your account is active plus 7 years; transaction logs are kept for 7 years for compliance; security logs are maintained for 2 years; marketing preferences are kept until you unsubscribe; and support tickets are retained for 3 years. After retention periods expire, data is securely deleted or anonymized. Some data may be retained longer if required by law or for ongoing legal proceedings.
7. Data Security
We implement comprehensive security measures including: (A) Technical Safeguards: encryption of data in transit (TLS 1.3) and at rest (AES-256), secure server infrastructure with regular security audits, intrusion detection and prevention systems, regular vulnerability assessments and penetration testing, secure coding practices, and multi-factor authentication options. (B) Organizational Safeguards: employee access controls and least-privilege principles, regular security training for staff, incident response procedures, vendor security assessments, and data protection impact assessments. (C) Operational Safeguards: regular backups with encryption, disaster recovery procedures, and continuous monitoring. Despite these measures, no system is completely secure. You are responsible for maintaining the security of your account credentials and devices.
8. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights: (A) Access: request a copy of your personal data we hold. (B) Correction: request correction of inaccurate or incomplete data. (C) Deletion: request deletion of your personal data (subject to legal retention requirements). (D) Portability: receive your data in a structured, machine-readable format. (E) Restriction: request restriction of processing in certain circumstances. (F) Objection: object to processing based on legitimate interests or for direct marketing. (G) Withdraw Consent: withdraw consent where processing is based on consent. (H) Lodge Complaints: file complaints with your local data protection authority. To exercise these rights, contact us at privacy@arbah.co with proof of identity. We will respond within 30 days (or as required by applicable law). Some requests may be denied if they conflict with legal obligations or legitimate interests.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards including: (A) Standard Contractual Clauses approved by relevant authorities; (B) data processing agreements with recipients; (C) ensuring recipients maintain adequate security measures; and (D) compliance with applicable cross-border transfer requirements. By using the Platform, you consent to the transfer of your information to countries outside your residence, including countries that may not provide the same level of data protection as your home country.
10. Cookies and Tracking Technologies
We use cookies and similar technologies for: (A) Essential Cookies: required for Platform functionality, security, and authentication. (B) Analytics Cookies: to understand how users interact with the Platform, measure performance, and identify issues. (C) Preference Cookies: to remember your settings and preferences. (D) Marketing Cookies: to deliver relevant advertisements (with your consent where required). You can manage cookies through your browser settings. Disabling certain cookies may affect Platform functionality. We also use: local storage for performance optimization, session storage for temporary data, and pixel tags/web beacons for analytics. Our analytics providers may include Google Analytics (you can opt out via browser plugin), and similar services.
11. Do Not Track Signals
Some browsers have 'Do Not Track' (DNT) features that signal to websites that you do not want your online activity tracked. There is currently no universally accepted standard for how companies should respond to DNT signals. At this time, we do not respond to DNT signals. However, you can use the privacy settings and tools described in this Policy to manage tracking and personalization. We will update this Policy if a standard for responding to DNT signals is established.
12. Third-Party Services and Links
The Platform may contain links to or integrate with third-party services, including: wallet providers, blockchain networks, market data providers, authentication services, and social media platforms. These third parties have their own privacy policies that govern their collection and use of your information. We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies before providing any information or using their services. Third-party integrations are provided for convenience, and their inclusion does not imply endorsement.
13. Children's Privacy
The Platform is not intended for users under 18 years of age (or the age of majority in your jurisdiction, whichever is higher). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will promptly delete that information. If you believe we have collected information from a child, please contact us immediately at privacy@arbah.co. Parents or guardians who become aware that their child has provided us with information should contact us.
14. Marketing Communications
With your consent where required, we may send you marketing communications about our products, services, and promotions. You can opt out of marketing communications at any time by: (A) clicking the 'unsubscribe' link in any marketing email; (B) adjusting your notification preferences in account settings; (C) contacting us at privacy@arbah.co. Please note that even after opting out of marketing, you will continue to receive transactional and service-related communications necessary for the operation of your account.
15. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): (A) Right to Know: what personal information we collect, use, disclose, and sell. (B) Right to Delete: request deletion of your personal information. (C) Right to Opt-Out: of the sale or sharing of personal information (note: we do not sell personal information). (D) Right to Non-Discrimination: for exercising your privacy rights. (E) Right to Correction: of inaccurate personal information. (F) Right to Limit: use of sensitive personal information. To exercise these rights, contact us at privacy@arbah.co or call our toll-free number. We will verify your identity before processing requests. You may designate an authorized agent to make requests on your behalf.
16. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) including: (A) the rights described in Section 8 (Your Privacy Rights); (B) the right to lodge a complaint with your local supervisory authority; (C) the right to object to automated decision-making; and (D) the right not to be subject to decisions based solely on automated processing. Our legal bases for processing are: contract performance, legitimate interests, legal compliance, and consent. Our Data Protection Officer can be contacted at dpo@arbah.co. For EU-specific inquiries, we have appointed an EU representative who can be reached at eu-rep@arbah.co.
17. Other Regional Privacy Rights
Users in other jurisdictions may have additional rights under local laws: (A) Brazil (LGPD): rights similar to GDPR, including access, correction, deletion, and data portability. (B) Canada (PIPEDA): rights to access and correct personal information. (C) Australia: rights under the Privacy Act 1988. (D) Singapore (PDPA): rights to access and correct personal data. (E) Other Jurisdictions: we comply with applicable local privacy laws. Contact us to learn about rights specific to your jurisdiction.
18. Data Breach Notification
In the event of a data breach that affects your personal information: (A) we will investigate promptly and take appropriate remedial measures; (B) we will notify affected users without undue delay (and within timeframes required by applicable law); (C) notification will include the nature of the breach, types of data affected, steps we are taking, and recommendations for protecting yourself; (D) we will notify relevant supervisory authorities as required by law; and (E) we maintain incident response procedures to handle breaches effectively. We encourage you to monitor your accounts and report any suspicious activity.
19. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes: (A) we will update the 'Last Updated' date at the top of this Policy; (B) we will notify you via email or prominent notice on the Platform; (C) we may request renewed consent where required by law; and (D) continued use of the Platform after changes constitutes acceptance. We encourage you to review this Policy regularly. Previous versions of this Policy are available upon request.
20. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Arbah.co Privacy Team, Email: privacy@arbah.co, Data Protection Officer: dpo@arbah.co, General Support: support@arbah.co. For EU Users: EU Representative at eu-rep@arbah.co. We aim to respond to all privacy-related inquiries within 30 days. For complaints, you may also contact your local data protection authority.