Privacy Policy
Effective Date: 11 June 2025
1. Introduction
This Privacy Policy describes how XS Trades Ltd. ("Company", "we", "us", or "our") collects, uses, stores, and protects your personal information when you use the PULSAR.INK platform (the "Platform"), including the Telegram bot, Mini App, and website at pulsar.ink.
2. Data We Collect
We collect the following categories of data:
2.1 Telegram Account Data
- Telegram user ID
- Username and display name
- Language preference
- Profile photo (if publicly available)
2.2 Financial Data
- Cryptocurrency wallet addresses (generated and connected)
- Transaction history (deposits, withdrawals, trades)
- Account balances
- Trading mode preferences
2.3 Technical Data
- IP address
- Device information and browser type
- Access timestamps
- Referral source data
3. How We Use Your Data
We use your data to:
- Provide and maintain the Platform services
- Process deposits, withdrawals, and trades
- Generate and manage cryptocurrency wallets
- Comply with AML/KYC regulations
- Prevent fraud and unauthorized access
- Improve our services and user experience
- Communicate service updates and important notices
4. Data Security
We implement robust security measures to protect your data:
- Private key encryption: Cryptocurrency wallet private keys are encrypted using Fernet symmetric encryption with keys derived via PBKDF2 (Password-Based Key Derivation Function 2). Private keys are never stored in plaintext.
- Access controls: Administrative functions require Telegram-based authentication and are restricted to authorized personnel.
- Rate limiting: API endpoints are protected against brute-force and abuse attacks.
- Data validation: All inputs are validated and sanitized to prevent injection attacks.
5. Third-Party Data Sharing
We share data with third parties only as necessary to provide our services:
- Exolix: Cryptocurrency exchange service — receives wallet addresses and transaction amounts for processing deposits.
- TronGrid / TRON Network: Blockchain API — wallet addresses are used to monitor on-chain transactions.
- Law enforcement: We may disclose data if required by law, court order, or regulatory request.
We do not sell your personal data to third parties.
6. Data Retention
We retain your data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:
- Account data: Duration of account activity plus 5 years
- Transaction records: Minimum 5 years (regulatory requirement)
- Technical logs: Up to 12 months
7. Your Rights
Subject to applicable law, you have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Portability: Request your data in a machine-readable format
- Objection: Object to certain processing activities
To exercise your rights, contact us at contact@pulsar.ink.
8. Cookies and Local Storage
The Platform uses browser localStorage and sessionStorage to store session data, user preferences, and authentication tokens within the Telegram WebApp environment. See our Cookie Policy for details.
9. Children's Privacy
The Platform is not intended for persons under 18 years of age. We do not knowingly collect data from minors. If we discover that a minor has provided us with personal data, we will delete it promptly.
10. International Transfers
Your data may be processed in countries other than your country of residence. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform. The "Effective Date" at the top indicates the latest revision.
12. Contact
For privacy-related inquiries, contact us at contact@pulsar.ink.