Privacy Policy

1. Overview and Data Controller Identity

This Privacy Policy outlines the operational principles and security protocols observed by Swapkoire ("Swapkoire", "we", "us", or "our") when gathering, recording, structuring, storing, and processing personal data obtained through swapkoire-official-app.com and associated cloud endpoints (collectively, the "Platform").

Swapkoire serves as the Data Controller responsible for determining the purposes and lawful means of processing personal data collected across the Platform. Our operational architecture prioritizes data minimization and cryptographic data segregation at every stage of analysis.

2. Categories of Information We Collect

Depending on your interaction with the Platform, we may collect and process information falling within several defined categories:

• Identity and Contact Data: Name, professional title, email address, telecommunication numbers, and country of residence provided during correspondence or service provisioning.
• Technical and Telemetry Data: Internet Protocol (IP) addresses, client browser classification, screen resolution, operating system identifiers, geographic country-level routing records, server access timestamps, and diagnostic error logs.
• Usage and Interaction Patterns: Navigation paths across platform interfaces, computational query execution times, feature utilization frequency, algorithmic configuration preferences, and performance response measurements.
• Cryptographic Connection Metadata: Read-only application programming interface (API) keys and public address records utilized to link external liquidity venues. Swapkoire never requests or stores private secret keys or discretionary withdrawal authorizations.

3. Lawful Grounds and Purposes for Processing

Under the UK GDPR and associated regulatory statutes, we process personal information solely where an authorized legal basis exists:

• Performance of a Contract: To establish your access credentials, maintain platform availability, execute user-defined algorithmic scripts, and deliver technical support.
• Legitimate Interests: To optimize latency performance, conduct system threat assessments, safeguard against malicious network interference or unauthorized intrusion, and enhance quantitative analytical infrastructure.
• Legal and Regulatory Compliance: To adhere to applicable statutory obligations, respond to requests issued by judicial authorities or statutory regulators, and combat economic crime.
• Consent: Where you have granted express, freely given consent for specific non-essential telemetry or communications, which you maintain the absolute right to revoke at any time.

4. Cookies, Session State, and Analytics

The Platform implements essential session tokens and technical cookies to deliver safe navigation, maintain visual interface preferences, and prevent cross-site request forgery attacks. Performance measurement cookies are utilized in aggregated or pseudonymous form to evaluate network load balancing and interface efficiency. Users can manage or block cookies through browser controls, although disabling functional elements may impair interactive capabilities.

5. Data Disclosure and Third-Party Processors

Swapkoire does not sell, rent, monetize, or trade your personal information to third parties. We may disclose personal data only under strictly regulated situations:

• Infrastructure Sub-processors: Verified cloud service providers, distributed network security layers, and data center facilities bound by stringent Data Processing Agreements (DPAs) requiring adherence to equivalent confidentiality benchmarks.
• Corporate Restructuring: Transferees or prospective successors in the event of a merger, acquisition, corporate reorganization, or asset sale, subject to identical privacy terms.
• Legal Mandates: Law enforcement, court authorities, or statutory bodies when compulsory legal processes or statutory disclosure mandates strictly require production of records.

6. International Data Transfers

Given the global distribution of modern cloud computational infrastructure, your personal information may be transferred to or accessed from servers situated outside the United Kingdom. When international transfers occur, we implement legally recognized safeguards, such as the UK International Data Transfer Agreement (IDTA), standard contractual clauses approved by competent authorities, and adequacy decisions recognizing equivalent protection levels.

7. Information Security and Retention

We deploy end-to-end encryption protocols (TLS 1.3 in transit and AES-256 for data at rest), strict role-based access restrictions, multi-factor authentication requirements, and continuous intrusion vulnerability scanning. Personal data is retained solely for the period necessary to fulfill the operational purposes delineated in this policy, satisfy legal, tax, or statutory reporting obligations, or enforce contractual agreements. Upon conclusion of retention criteria, data is securely erased or irretrievably anonymized.

8. Your Statutory Data Subject Rights

Under UK data protection law, you possess enforceable statutory rights regarding your personal records, including:

• Right of Access: Requesting written confirmation and copies of personal data processed by us.
• Right to Rectification: Requiring correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): Demanding deletion of personal data where continuing retention lacks legal grounds.
• Right to Restriction and Objection: Contesting processing based on legitimate interests or demanding temporary processing suspensions.
• Right to Data Portability: Receiving your personal information in a structured, machine-readable format.

You additionally retain the right to submit complaints to the UK Information Commissioner's Office (ICO) at ico.org.uk should you believe your privacy rights have been infringed.

9. Contact and Data Protection Inquiries

For questions, formal rights requests, or clarifications regarding our computational data stewardship, contact our designated privacy team at [email protected]. Requests are addressed without undue delay within statutory timelines.