Privacy Policy
What we collect, why, and how long we keep it.
Last updated: 21 September 2026
Scope of this policy
This policy covers everything Wixonal AI collects through its website, applications and support channels. By using any of them you acknowledge what is set out here.
Data we collect
We collect what you give us directly: name, email address, mobile number and identity verification documents. We also collect technical data automatically, such as IP address, browser type and your browsing history within the site.
Basis for processing
We process your data to perform the contract with you, to meet regulatory obligations on anti-money-laundering and identity verification, and for a legitimate interest in improving the service and protecting it from fraud.
How we use data
We use it to open and run your account, to process deposits and withdrawals, to answer your questions, and to send operational notices about your account. We do not use it to make investment decisions for you beyond the settings you configured yourself.
Sharing data
We share only what is necessary with providers of identity verification, payment processing and data hosting, all of whom are contractually bound to protect what reaches them. We also share data with competent authorities on a valid legal request.
Retention period
We retain account data for the life of the contractual relationship, then for the period financial regulation requires after closure. Once that period expires the data is deleted or anonymised.
Cookies
We use cookies necessary to run the site and remember your preferences, and analytics cookies that measure page performance. You can disable the non-essential ones in your browser without the site ceasing to work.
Information security
We use 256-bit transport encryption, separate access rights internally so no employee sees more than their role requires, and run periodic independent security reviews.
Your rights
You may request a copy of your data, correction of anything inaccurate, deletion so far as it does not conflict with our regulatory obligations, or object to a particular processing. We respond within thirty days.
Transfers abroad
Some data may be processed by service providers outside the Kingdom. Where that happens we verify contractual safeguards providing protection equivalent to that applied locally.
Policy updates
We may update this policy as the service or the regulation changes. We publish the update on this page with a revised date, and notify you by email of any material change.
Privacy contact
For any question or request about your data, write to [email protected] and the compliance team will handle it directly.