This Privacy Policy explains how Instant Exchange ("we," "us," or "our") collects, uses, stores, and protects your information when you use the InstantExchange.net website and platform (the "Service"). By using the Service, you consent to the practices described in this policy.

1. Information we collect

We collect information in the following categories:

• Account information: When you register, we collect your username, email address, and a hashed version of your password. We never store passwords in plain text.
• Transaction information: When you create an exchange or deposit, we record the cryptocurrency type, amount, wallet addresses, PayPal email, exchange status, and timestamps.
• Communication data: If you contact us via live chat, email, or the contact form, we retain the content of those communications to provide support and improve our service.
• Technical data: We automatically collect your IP address, browser type and version, device type, operating system, referral URLs, and pages visited. This data helps us maintain security and improve performance.

2. How we use your information

We use your information to:

• Process cryptocurrency-to-PayPal exchanges and manage your account balance.
• Send transactional emails including verification codes, exchange confirmations, and status updates.
• Provide customer support and respond to inquiries.
• Detect and prevent fraud, abuse, and unauthorized access.
• Improve the Service through usage analytics and performance monitoring.
• Comply with legal obligations.

3. Information sharing

We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:

• Payment processors: We share necessary transaction details with our crypto payment processor (NowPayments) to facilitate exchanges.
• Email service: We use a third-party email provider (Resend) to deliver transactional emails. Only the recipient address and email content are shared.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or enforceable government request.
• Protection of rights: We may share information to enforce our Terms of Service, protect our rights, or investigate potential violations.

4. Data security

We take reasonable measures to protect your information, including:

• HTTPS encryption for all connections to our platform.
• Bcrypt hashing for passwords — we cannot read or recover your password.
• Rate limiting and verification codes to prevent brute-force attacks.
• Database access restricted to authorized services only.

No system is completely secure. While we use commercially reasonable safeguards, we cannot guarantee absolute security of your data.

5. Data retention

We retain your account information for as long as your account is active. Transaction records are kept for a minimum of 5 years for compliance and dispute resolution purposes. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

6. Cookies and local storage

We use browser local storage to maintain your login session (authentication token) and language preference. We do not use third-party tracking cookies or advertising networks. No data is shared with advertisers.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and personal data.
• Object to certain processing of your data.

To exercise any of these rights, contact us at support@instantexchange.net. We will respond within 30 days.

8. Children's privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

9. International users

The Service is operated from servers that may be located outside your country of residence. By using the Service, you consent to the transfer of your information to these locations. We take steps to ensure your data receives adequate protection regardless of where it is processed.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page. We encourage you to review this policy periodically. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at support@instantexchange.net.

Last updated: February 27, 2026