The short version

Halyard collects what it needs to open your account, keep it safe and meet the law, and nothing more. We never sell, rent or swap customer data, and we do not use it for advertising. You can ask to see, correct or delete your data at any time by writing to support@halyard.exchange.

What we collect

• Account details: your email, country and a password hash or passkey, and the settings you choose such as two-factor authentication and withdrawal allow-lists.
• Identity documents: when the law asks us to verify who you are, a photo of an ID document, a selfie and your address. These are checked by our verification provider and stored encrypted.
• Activity: orders, trades, deposits, withdrawals, the addresses you send to and the devices and IP addresses used to sign in.
• Support: messages you send to support@halyard.exchange and through the help center.
• Website data: pages visited and the browser used, through privacy-friendly analytics.

How we use it

• To run your account: match deposits, settle trades, send withdrawals and show your history.
• To keep you safe: spot sign-ins from new devices, stop account takeovers and screen for fraud and sanctions.
• To meet the law: know-your-customer checks, record keeping and lawful requests from regulators.
• To tell you what matters: security alerts, changes to fees or terms, and market notes only if you asked for them. Every marketing email has a one-click unsubscribe.

How your assets and keys are held

Balances on the exchange are held one-to-one in segregated wallets and attested monthly. The self-custody wallet keeps your keys on your own device; we never see them and cannot recover a lost recovery phrase.

We never sell customer data, and we never share your balances or trading history for someone else's marketing.

Who sees your details

Staff who run support, compliance and security; the verification, banking and cloud providers that work on our instructions; our auditors; and regulators when the law requires it. Blockchains are public, so a withdrawal address can be seen by anyone, but it is never tied to your name by us.

How long we keep it

Account and transaction records are kept for as long as financial law asks (usually five to seven years after the account closes). Support messages are deleted after two years. Marketing preferences are kept until you change them.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete what we are not required to keep, and object to any use you did not expect. Write to support@halyard.exchange and we will answer within 30 days. You can also complain to your local data protection authority.

Children

Our services are for adults. We do not open accounts for anyone under 18 and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will say so on this page and by email before the change takes effect.

Contact

Questions about your data go to support@halyard.exchange.