Privacy policy: private by design

This policy explains how Ghostex.ai (“Ghostex”, “we”, “us”) handles information when you use the website and the exchange service. It applies together with our Terms of service. Ghostex.ai, established at 15 Tamar Mepe Street, Kutaisi 4600, Georgia, is responsible for the processing described here; privacy and legal questions can be sent to legal@ghostex.ai.

The service is designed around data minimisation. We process only what is needed to quote, execute and deliver a swap, and to meet legal obligations. We never ask who you are, so the data we hold is not linked to your name or identity.

• No accounts. No name, email address, phone number, username or password.
• No KYC. No identity documents, selfies, proof of address or source-of-funds forms.
• No cookies. The site sets no cookies, first-party or third-party.
• No trackers. No analytics, advertising pixels, session recording, fingerprinting or social-media plugins.
• No bank or card details. The service accepts digital assets only.

When you create an order, the following is processed by the backend that runs the agents:

Addresses and transaction hashes are pseudonymous, not anonymous. On their own they do not name you, but combined with other information, such as an address you have published elsewhere, they can be linked to a person.

Your browser keeps a small amount of data in its local storage, never in cookies. Keys start with the prefix gx:. They are:

This data stays on your device and is not sent to us. Looking up an order sends only its ID. You can remove everything at any time by clearing this site’s data in your browser settings; private windows discard it when closed.

When your browser loads the site or talks to the exchange backend, the servers involved necessarily receive your IP address, the requested address, the time and your browser’s user-agent. Hosting providers may keep this in short-lived logs for security and reliability.

We keep such logs to the minimum needed to operate and protect the service, and we do not use them to build profiles or to connect them with an identity. You are free to use privacy tools such as a VPN.

The site loads a small number of resources from third parties. Each request reveals your IP address and browser details to that provider, which handles them under its own privacy policy.

Some networks, such as Monero, offer stronger privacy at the protocol level; most do not. Information you publish elsewhere, such as an address on social media, can be combined with blockchain data by anyone who looks.

The agents use order data only to quote, route, detect, execute, deliver or refund your order, and to apply the rules in the Terms of service, such as minimum and maximum amounts and the rate window. They do not profile you or make decisions about you as a person, and your data is not used to train AI models.

If you believe an automated decision about your order was wrong, contact us with the order ID.

We use order data only to provide the service, to handle refunds and support requests, to secure the service and prevent prohibited use, and to comply with legal obligations. We share it only:

• with liquidity providers and blockchain networks, to the extent needed to execute your swap and send your payout;
• with infrastructure providers, such as hosting, that process it on our behalf;
• with authorities, where the law requires it, limited to the order data we hold.

Some of these providers may process data in other countries. Where the law requires it, we use appropriate safeguards for those transfers. We do not sell or rent data, and we do not use it for advertising.

• Order records are kept for as long as needed to complete the order, handle refunds and support, and meet legal or accounting obligations. They are then deleted or anonymised.
• Server logs are kept for a short period for security and reliability.
• Local storage on your device is kept until you clear it.
• Blockchain data is permanent and outside anyone’s control.

Data is protected in transit with HTTPS, and we use technical and organisational measures appropriate to the data we hold. Holding as little as possible is itself a safeguard: there are no accounts or passwords to breach.

No system is perfectly secure. You protect your side by keeping your wallet, your devices and your order IDs safe. Ghostex will never ask for your seed phrase or private keys.

Depending on where you live, you may have the right to access, correct or delete personal data, to restrict or object to its processing, and to complain to a data-protection authority.

Because we do not know who you are, we can only find data by order ID. To make a request, email us the order ID. We may ask you to show that the order is yours, for example with the deposit transaction hash or a message signed by the refund address or by the address your deposit was sent from. Data we must keep for legal reasons cannot be deleted until that obligation ends, and blockchain data cannot be deleted at all.

You can delete the data stored on your device at any time by clearing this site’s data in your browser.

The service is not intended for anyone under 18, and we do not knowingly process data about children.

We may update this policy from time to time. The date at the top of this page shows when it last changed. If a change materially affects how order data is handled, it will be visible on the site before it applies.

Questions and requests about privacy can be sent by email. Include the order ID if your request concerns an order. We will never ask for your seed phrase, private keys or identity documents.