Last updated: February 2026
This Privacy Policy applies to all users of the Xolaxis Platform. Xolaxis Ltd does not serve US persons under its current Regulation S structure. If you are accessing from a restricted jurisdiction, please do not use the Platform.
"Personal Data" is any information that identifies or can reasonably identify you, directly or indirectly - including name, email address, Telegram handle/ID, wallet addresses, IP address, device identifiers, transaction-related identifiers, and identity verification data such as passport or national ID details.
Account data: email address, Telegram handle/ID, username, country/region, language settings. Verification data: legal name, nationality, government ID or passport details, proof of address, source-of-funds documentation, and enhanced due diligence materials as required by Licensed Custody Partner obligations. Deal and transaction data: deal terms and scope, amounts, wallet addresses, transaction hashes, timestamps, itemized receipts, evidence files, communication logs, dispute submissions. Device and usage data: device type, operating system, browser type, IP address, approximate location, session logs, security signals, and cookies (web Platform only).
We use Personal Data to operate and improve the Platform; coordinate deal custody release instructions to Licensed Custody Partners; authenticate users and prevent unauthorized access; detect and prevent fraud, abuse, and prohibited activity; conduct sanctions and AML screening; handle disputes and arbitration processes; maintain audit trails; provide user support; and comply with applicable legal and regulatory obligations. We may use aggregated or anonymized data for analytics and Platform improvement.
Where applicable under local law, processing of Personal Data is based on one or more of: • Contract necessity: processing required to provide the Platform services; • Legitimate interests: security, fraud prevention, and Platform integrity; • Legal obligation: record-keeping and compliance requirements; • Consent: where required and separately obtained. The Platform does not serve US persons.
We may share Personal Data with: • Licensed Custody Partners (to fulfill KYC/AML obligations for custody arrangements); • Independent arbitration panel members (case-specific, limited to relevant deal data); • Compliance and sanctions screening providers; • Hosting, infrastructure, and security service providers; • Professional advisors under confidentiality obligations; • Authorities where legally required by court order, law, or regulation. We do not sell, rent, or trade Personal Data to third parties for marketing purposes. In the event of a merger, acquisition, or asset sale, Personal Data may be transferred as part of the transaction, subject to equivalent privacy protections.
Xolaxis is incorporated in the British Virgin Islands. Personal Data may be processed by infrastructure providers or Licensed Custody Partners located in other jurisdictions. Where required, we apply appropriate safeguards including contractual data protection clauses and access controls.
We retain Personal Data for as long as necessary to: provide Platform services; resolve open or potential disputes; prevent fraud and abuse; and comply with legal and regulatory obligations. Minimum retention: five (5) years from the date of the last relevant transaction or account closure, or longer if required by law or ongoing legal proceedings. Blockchain transaction records (hashes, on-chain data) are immutable and cannot be deleted by Xolaxis or users.
We implement reasonable technical and organizational safeguards including: encryption in transit and at rest; access controls and least-privilege permissions; multi-factor authentication for administrative systems; monitoring and anomaly detection; and regular security reviews. No method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your own account credentials and devices.
Depending on your jurisdiction, you may have rights to: access your Personal Data; correct inaccurate data; request deletion (subject to legal retention obligations); restrict or object to processing; and request data portability. We may require identity verification for privacy requests and may decline requests where processing is required for compliance, fraud prevention, active disputes, or legal obligations. To exercise your rights, contact: support@xolaxis.com
The web Platform may use essential cookies for security, session management, and core functionality. Optional analytics tools may be used in aggregate form. You can control cookie preferences through your browser settings; disabling essential cookies may limit Platform functionality.
We may send service-related and transactional messages (deal updates, security alerts, policy changes) without separate marketing consent, as these are necessary to operate the service. Any optional marketing or promotional messages will include a clear opt-out mechanism.
The Platform is not intended for individuals under 18 years of age. We do not knowingly collect Personal Data from minors. If we learn that a minor has provided Personal Data, we will take steps to delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated via email, in-Platform notification, or Telegram. Continued use of the Platform after the effective date of changes constitutes acceptance of the updated Policy.