Privacy Policy

The controller responsible for data processing on this website is:

CuiveMedia – Dienstleistungen
Inh: Brian Brelöer
Siriusstraße 2, 12524 Berlin, Germany
Email: help@cryptomex.de
Phone: (030) 89 39 91 47

We collect the following categories of personal data:

• Account data: Email address, username, and hashed password when you register.
• Exchange API keys: Encrypted at rest using industry-standard encryption. We never store plaintext credentials. Keys are used solely to execute your trading instructions and retrieve your account data from connected exchanges.
• Trading data: Positions, orders, trade history, and wallet balances retrieved from your connected exchanges for display and analytics purposes.
• Usage data: IP address, browser type, pages visited, and timestamps — collected automatically via server logs.
• Payment data: Processed entirely by Stripe. We do not store credit card numbers or payment details. We only receive your Stripe customer ID and subscription status.

We process your data for the following purposes:

• Contract performance (Art. 6(1)(b) GDPR): Providing the CryptoMEX platform, executing trades, syncing exchange data, managing your subscription.
• Legitimate interest (Art. 6(1)(f) GDPR): Improving our service, preventing fraud, ensuring platform security, analyzing usage patterns in aggregate.
• Consent (Art. 6(1)(a) GDPR): Where applicable, e.g., marketing communications. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c) GDPR): Compliance with applicable laws, e.g., tax record retention.

We share your data only in the following cases:

• Cryptocurrency exchanges: Your encrypted API keys are decrypted in memory at runtime to communicate with your connected exchanges. Data is transmitted directly to/from the exchange APIs.
• Stripe: Payment processing. Subject to Stripe's Privacy Policy. Stripe's Privacy Policy.
• Hosting provider: Our servers are located in Germany. Your data is processed within the EU/EEA.

We do not sell, rent, or trade your personal data to third parties.

• Account data: Retained for the duration of your account. Deleted within 30 days of account deletion request.
• Trading data: Retained for the duration of your account. Historical PnL data may be retained up to 2 years as part of the service.
• API keys: Deleted immediately upon removal by the user or upon account deletion.
• Server logs: Retained for up to 90 days.

Under the General Data Protection Regulation, you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Restrict processing under certain conditions.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interest.

To exercise your rights, contact us at help@cryptomex.de. You also have the right to lodge a complaint with the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

CryptoMEX uses only essential cookies required for authentication and session management (JWT tokens). We do not use third-party tracking cookies, analytics scripts, or advertising pixels.

We implement appropriate technical and organizational measures to protect your data, including encrypted storage of API keys, hashed passwords, secure session management, two-factor authentication, and brute-force protection. Despite these measures, no method of transmission over the Internet is 100% secure.

We may update this privacy policy from time to time. Material changes will be communicated via email or a notice on the platform. Continued use of CryptoMEX after changes constitutes acceptance of the updated policy.

For privacy-related inquiries, contact us at: help@cryptomex.de