Summary: USDX collects information strictly necessary to operate the stablecoin service — including identity verification data for KYC/AML compliance, wallet addresses for transaction processing, and limited technical data for API operation. We do not sell personal information and do not use it for advertising. Blockchain transaction data is public by the nature of the underlying networks.
01 Scope and controller
This Privacy Policy applies to information collected by USDX ("we", "us", "our") in connection with the USDX stablecoin, the USDX website at usdx.finance, the Transparency Hub, and the public USDX API (collectively, the "Service").
USDX acts as the data controller for personal information collected directly from users. For information processed by third-party custodians and KYC providers in connection with identity verification, those parties may act as independent controllers or processors — their own privacy policies apply to that processing.
02 Information we collect
Identity verification (KYC) information
To comply with applicable anti-money laundering (AML) and know-your-customer (KYC) regulations, we collect identity documents and verification data from users who mint or redeem USDX. This includes:
- Full legal name
- Date of birth
- Country of residence and citizenship
- Government-issued identification documents
- Proof of address
- Source of funds information, where required by applicable law
KYC verification is performed by licensed third-party identity verification providers. We receive the outcome of verification and, where legally required, retain underlying documentation.
Wallet and transaction information
When you interact with USDX smart contracts, we may collect or process:
- Blockchain wallet addresses associated with your account
- Transaction hashes and amounts for compliance monitoring
- On-chain compliance registry status associated with your address
API usage information
Access to the USDX public API is subject to rate limiting. We collect minimal technical data for this purpose, including:
- IP address (for rate limit enforcement, not stored long-term)
- API request metadata (endpoint, timestamp, response code)
Communications
If you contact us by email, we retain your contact information and the content of the communication for as long as necessary to respond and maintain records of our correspondence.
03 How we use information
We use the information we collect for the following purposes:
- Service operation: Processing mint and redemption requests, maintaining compliance registry state on-chain, and operating the transparency infrastructure.
- Legal and regulatory compliance: Meeting KYC, AML, and sanctions screening obligations under applicable laws. This is a condition of providing the Service.
- Fraud and sanctions screening: Checking wallet addresses and user identities against applicable sanctions lists and internal risk models.
- Security: Detecting and responding to security incidents, abuse of the API, or suspicious activity.
- Communications: Responding to enquiries and, where you have consented, sending service notifications.
We do not use personal information for advertising, behavioural profiling, or sale to third parties.
04 Information sharing
We share personal information only in the following circumstances:
- Regulatory and legal obligations: We may disclose information to regulators, law enforcement, or courts when legally required or when necessary to comply with a valid legal process.
- KYC and compliance providers: Identity documents and verification data are shared with licensed third-party identity verification and AML screening providers.
- Reserve custodians: Custodians hold reserve assets on behalf of USDX and may have access to information necessary to perform their custodial function.
- Professional advisors: Lawyers, auditors, and accountants, subject to confidentiality obligations.
- Business transfers: In connection with a merger, acquisition, or sale of assets, subject to the receiving party assuming equivalent data protection obligations.
We do not sell personal information to third parties for commercial purposes.
05 Blockchain and public data
Important: Blockchain transactions are public by design. Wallet addresses, transaction amounts, and on-chain compliance registry states are permanently recorded on public blockchains and cannot be deleted. USDX has no ability to alter or remove on-chain data.
The USDX reserve snapshot data, proof hashes, supply figures, and domain registry — published via the public transparency API and committed to smart contracts — are intentionally public and accessible by anyone. This is a core feature of the USDX transparency model, not a privacy risk.
06 Data retention
We retain personal information for as long as necessary to fulfil the purposes set out in this policy, or as required by applicable law. Specifically:
- KYC records: Retained for the duration of the customer relationship and for a minimum of five years after relationship termination, as required by applicable AML regulations.
- Transaction records: Retained for a minimum of five years, consistent with financial records obligations.
- API logs: Retained for 90 days for security and rate-limiting purposes.
- Communications: Retained for three years from the date of the most recent communication.
07 Your rights
Depending on your jurisdiction, you may have rights regarding your personal information, including:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of personal information, subject to legal retention obligations and the irreversible nature of on-chain data.
- Restriction: Request restriction of processing in certain circumstances.
- Portability: Receive your personal information in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
To exercise any of these rights, contact us at privacy@usdx.finance. We will respond within 30 days. Note that certain rights may be limited where we have legal obligations to retain or process data.
08 Security
We implement technical and organisational measures to protect personal information against unauthorised access, loss, or destruction. These include access controls on systems holding personal data, encryption in transit and at rest, and internal policies limiting access to personal information to personnel with a need to know.
No method of transmission or storage is completely secure. In the event of a personal data breach that creates a risk to your rights, we will notify you and applicable regulators as required by law.
09 Cookies and analytics
The USDX website and Transparency Hub do not use third-party analytics cookies or advertising trackers. The website is served as static HTML and does not set persistent tracking cookies. Session state, where required for API interactions, is managed without persistent identifiers.
10 International transfers
USDX operates across multiple jurisdictions. Personal information may be transferred to and processed in countries other than your country of residence. Where such transfers occur, we apply appropriate safeguards consistent with applicable data protection law, such as standard contractual clauses or equivalent mechanisms.
11 Children
The USDX Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us at privacy@usdx.finance and we will delete it promptly.
12 Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated by posting a notice on the website prior to the change taking effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after any revision constitutes acceptance of the updated policy.
13 Contact us
For privacy-related enquiries, data subject rights requests, or complaints, contact:
Email: privacy@usdx.finance
General enquiries: contact@usdx.finance