At VeloxSwap, your privacy is important to us. This policy explains how we collect, use, and safeguard your personal information when you use our platform. We aim to be transparent and give you meaningful control over your data.
1. Overview
VeloxSwap ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, and the choices you have in relation to your data. By using our platform, you agree to the practices described in this policy.
2. Information We Collect
We collect information you provide directly, as well as data generated through your use of our service:
- Account Information: Full name, email address, phone number, date of birth, and optional profile avatar when you register.
- Usage Data: Assets you add to your watchlist, portfolio holdings, and interaction patterns within the app — stored locally in your browser.
- Session Data: A secure JSON Web Token (JWT) stored in an httpOnly cookie to keep you signed in.
- Uploaded Files: Profile photos you choose to upload, stored securely on our servers.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account and authenticate you securely.
- Personalise your experience (e.g. displaying your name and avatar).
- Enable watchlist and portfolio features tied to your account.
- Respond to support requests or inquiries.
- Improve the reliability and performance of our platform.
- Comply with legal obligations.
We do not sell your personal data to third parties.
4. Data Storage & Security
Account information is stored in a SQLite database managed by Prisma. Passwords are hashed using bcrypt and are never stored in plain text. Session tokens are stored in httpOnly cookies, inaccessible to client-side JavaScript. Profile images are stored in a private directory on our server. While we implement industry-standard security measures, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
5. Third-Party Data Providers
VeloxSwap retrieves market data from the following third-party providers. When you use the platform, your browser may indirectly interact with their services:
- Finnhub.io — Symbol search and market news. Subject to Finnhub's Privacy Policy.
- Yahoo Finance — Real-time quotes and chart data, accessed server-side.
Quote and chart requests are proxied through our own server — your IP address is not forwarded to Yahoo Finance.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you.
- Right to rectification — request correction of inaccurate data.
- Right to erasure — request deletion of your account and associated data.
- Right to data portability — request a machine-readable export of your data.
- Right to withdraw consent — at any time, where processing is based on consent.
To exercise any of these rights, please contact us at contact@veloxswap.app.
8. Data Retention
We retain your account information for as long as your account is active. Watchlist and portfolio data stored in your browser (localStorage) is retained until you clear your browser data or manually remove items. Server-side data is deleted within 30 days of an account deletion request.
9. Children's Privacy
VeloxSwap is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date at the top of this page. Continued use of VeloxSwap after changes have been made constitutes acceptance of the revised policy.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at contact@veloxswap.app.