PRIVACY POLICY

Last Updated: April 15, 2025

1. Introduction

Welcome to Onedotone (“Company,” “we,” “us,” or “our”). We operate an exclusive, invitation-only mobile platform for investing in digital assets (the “Services”). We take your privacy seriously. This Privacy Policy explains how we collect, use, share, and protect the personal information of users who visit our website, use our mobile application, or otherwise interact with our Services.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with these practices, please do not use our Services.

For any questions or concerns regarding this Privacy Policy, you may contact us:

• Email: info@onedotone.finance
  
  
• (No physical address applies.)

2. Scope and Applicability

This Privacy Policy applies to any personal information we collect through:

1. Our website, including any subdomains and related online services (collectively, the “Site”).
   
   
2. Our mobile application (“App”).
   
   
3. Any communication channel with us, such as email or support inquiries.
   
   
4. Any other products or services that link to or reference this Privacy Policy.

3. Information We Collect

We may collect the following categories of personal information. The specific types of information we collect depend on how you interact with our Services.

3.1. Information You Provide Directly

• Contact Details: Such as your name, email address, phone number.
  
  
• Account Registration Data: Information you provide when creating an account (e.g., username, password, basic financial or identification details).
  
  
• Identity Verification (KYC): Government-issued ID, proof of address, and other details required for compliance with Anti-Money Laundering (AML) and Counter-Terrorism Financing (CFT) regulations.
  
  
• Communication Records: Any messages, feedback, or inquiries you send us via email or other channels.
  
  

3.2. Information Collected Automatically

• Device Information: IP address, device type, operating system, unique device identifiers, and mobile network information.
  
  
• Usage Data: Pages or screens visited on our Site or App, navigation paths, and features used within our Services.
  
  
• Log Data: Date and time of visits, referring URLs, error logs, and system activity details.
  
  

3.3. Information from Third Parties

• Verification Vendors: We may receive additional information from identity verification providers (e.g., biometric checks, sanction list screenings).
  
  
• Analytics Providers: We may receive aggregate data about user behavior, demographics, or usage patterns (all anonymized or pseudonymized).
  
  
• Payment and Banking Partners: Information relating to your deposits, withdrawals, or transactions with Onedotone.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

1. To Provide Our Services:
   
   
   • Enabling account creation, access, and management.
     
     
   • Processing transactions, such as fiat and digital asset deposits/withdrawals, trades, or staking activities.
     
     
2. Identity Verification and Compliance:
   
   
   • Conducting necessary Know Your Customer (KYC) checks, AML/CFT procedures, and other legal compliance measures.
     
     
   • Monitoring transactions and activities to detect suspicious or illicit behavior.
     
     
3. Service Improvement and Personalization:
   
   
   • Understanding how users interact with our Site or App to improve functionality and user experience.
     
     
   • Customizing or personalizing features, content, or promotions.
     
     
4. Security and Fraud Prevention:
   
   
   • Protecting the integrity of user accounts and our infrastructure.
     
     
   • Investigating potential threats, fraud, or other malicious activity.
     
     
5. Communication:
   
   
   • Sending administrative or transactional communications (e.g., confirmations, security alerts).
     
     
   • Responding to user inquiries, support requests, or feedback.
     
     
6. Legal and Regulatory Requirements:
   
   
   • Complying with applicable laws and regulations.
     
     
   • Cooperating with law enforcement, regulatory agencies, or other official inquiries.

5. Legal Bases for Processing

We process personal information under one or more of the following legal bases, to the extent they apply:

• Consent: Where you have given consent for a specific processing activity (e.g., certain marketing communications).
  
  
• Contract: When processing is necessary to perform a contract with you (e.g., Terms and Conditions), or to take steps at your request before entering a contract.
  
  
• Legal Obligation: Compliance with a legal obligation to which we are subject, including AML/CFT requirements under Salvadoran law.
  
  
• Legitimate Interests: Where processing is necessary for our legitimate interests, provided these interests do not override your fundamental rights and freedoms (e.g., improving our Services, securing our infrastructure).

6. Cookies and Similar Technologies

We may use cookies, web beacons, and similar technologies to collect information about how you use our Site or App and to provide certain features. These technologies help us:

• Recognize your browser or device.
  
  
• Remember your preferences and settings.
  
  
• Measure the effectiveness of content and marketing campaigns.
  
  
• Enhance security and detect fraudulent activities.
  
  

You may choose to disable or limit cookies using your browser settings, though doing so may affect the functionality of our Services.

7. How We Share Your Information

We do not sell or rent your personal information. We may share personal information with:

1. Service Providers and Partners:
   
   
   • Third-party vendors that help us perform core business operations (e.g., cloud hosting, identity verification, payment processing, analytics).
     
     
   • Such service providers are contractually bound to protect your information and use it only as needed to provide services to us.
     
     
2. Affiliates and Subsidiaries:
   
   
   • Within our corporate family, to streamline internal operations and ensure consistent delivery of Services.
     
     
3. Regulatory and Law Enforcement Authorities:
   
   
   • When required to comply with applicable laws, regulations, or requests from authorities.
     
     
   • When necessary to protect our rights, users, or the public from harm or illegal activities.
     
     
4. Business Transfers:
   
   
   • In connection with any merger, acquisition, sale of assets, or other business transaction. If such a change happens, we will request that the new entity follow this Privacy Policy or obtain your consent for any new use of your data.

8. Data Retention

We will keep your personal information only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, or internal policy requirements. The exact duration depends on factors such as:

• Legal obligations (e.g., AML/CFT rules often require a minimum retention period).
  
  
• Dispute resolution or enforcement of our agreements.
  
  
• Legitimate business needs (e.g., maintaining service continuity or account history).
  
  

Once retention is no longer necessary, we will securely destroy or anonymize your information in accordance with applicable laws and regulations.

9. International Data Transfers

Onedotone is subject to the laws of El Salvador. However, in the course of providing the Services, we may transfer your personal information to our affiliates, service providers, or partners located in other countries. We will ensure that any transfer of personal information is safeguarded by appropriate legal mechanisms (e.g., standard contractual clauses or equivalent measures).

10. Security Measures

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect the personal information we collect against unauthorized access, loss, misuse, or alteration. These measures may include:

• Encrypted data transmissions (SSL/TLS).
  
  
• Access controls and authentication methods (e.g., multi-factor authentication).
  
  
• Periodic security assessments and audits.
  
  

However, no security system is 100% foolproof. We cannot guarantee the absolute security of your information. You are responsible for keeping your access credentials confidential.

11. Minors

Our Services are intended only for users who are at least 18 years of age. We do not knowingly collect or maintain personal information from minors. If you believe a minor has provided us with personal information, please contact us at info@onedotone.finance so that we can take steps to delete such data.

12. Your Rights and Choices

Depending on the data protection laws in your jurisdiction, you may have certain rights regarding your personal information. These could include:

• Access: Requesting a copy of the personal information we hold about you.
  
  
• Rectification: Asking us to correct inaccurate or incomplete data.
  
  
• Erasure: Requesting deletion of your data under certain circumstances.
  
  
• Restriction: Limiting the processing of your data, for example when you contest its accuracy.
  
  
• Portability: Obtaining a copy of your data in a commonly used format or requesting its transfer to another controller.
  
  
• Objection: Objecting to certain types of data processing, such as direct marketing.
  
  

To exercise any of these rights, please email us at info@onedotone.finance. We will respond consistent with applicable laws. We may request additional information to verify your identity before fulfilling your request.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be effective upon posting the updated version on our Site or App, unless otherwise specified. We will update the “Last Updated” date at the top of this document to reflect the date of any revisions. Your continued use of our Services after the effective date of any changes indicates your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or comments about this Privacy Policy or how we handle your personal information, please contact us at:

Onedotone
Email: info@onedotone.finance

15. Additional Disclosures for Specific Jurisdictions (if applicable)

Some jurisdictions may require additional privacy disclosures. This section may include notices applicable under frameworks such as the GDPR (EU) or the UK Data Protection Act, as relevant.