Privacy policy
This policy explains what data we collect when you use CoinYatra, why we need it, and the controls that protect it.
Data we collect
Account data (email, name, phone, country), verification data (date of birth, address, government ID type and number, ID images and selfie), transaction data (deposits, orders, swaps, withdrawals, ledger entries), settlement data (payout account details), and technical data (IP address, user agent, security events such as sign-ins and 2FA changes).
Why we use it
To operate your account and process transactions; to meet anti-money-laundering, know-your- customer, sanctions and record-keeping obligations; to detect and prevent fraud and unauthorised access; to provide support; and to improve platform reliability and security.
How it is protected
Access to your records is scoped to your authenticated account at the database level. Two-factor secrets and recovery codes are never readable by any client application. Payout account details are encrypted before storage and only masked identifiers are displayed. Identity documents are held in private storage accessible only to you and authorised reviewers.
Who we share with
Service providers who host our infrastructure, provide market data, or support blockchain transaction lookups; and law enforcement, regulators or courts where we are legally required to disclose. We do not sell your personal data and do not use it for third-party advertising.
Blockchain data
On-chain transactions are public and permanent by design. Deposit and withdrawal addresses, amounts and transaction IDs exist on public networks outside our control and cannot be deleted or amended by us.
Retention
We retain verification and transaction records for the period required by financial record-keeping rules, typically several years after your account closes. Security event logs are retained for a shorter period for fraud investigation.
Your rights
Subject to applicable law you may request access to your data, correction of inaccurate data, a copy of the data you provided, or deletion where we have no legal basis or obligation to keep it. Legal record-keeping duties may prevent deletion of transaction and verification records. Requests can be made through our support channel.
Cookies and local storage
We store your session locally in your browser so you stay signed in, and we keep minimal preference data. We do not run third-party advertising trackers.
Contact
Privacy questions and rights requests can be raised through the support section of your account or by email to our support address shown on the support page.