Privacy policy — kiki

1. In short

The Service is used without registration: there is no account, no login and no personal profile.
We do not ask for your name, passport, address or any identity document.
We process a limited set of data — the details of your order and basic technical information — only to execute that order and to keep the Service working.
We do not sell data, do not build advertising profiles and do not use third-party analytics or tracking pixels.
Order-related data is stored on our servers for no longer than seven days, after which it is deleted or irreversibly anonymised.
We operate in accordance with the legislation of the country in which the Service is registered.

2. No account, no identity verification

No registration. The Service works in a single visit: you choose an asset, enter the amount, receive a deposit address and a receipt. There is nothing to sign up for and no password to keep.
No client cabinet. We do not create user profiles, do not keep order history inside an account and do not link separate orders to a single person.
No identity verification for standard orders. We do not request a passport, a selfie, a proof of address or a bank statement in the normal course of an exchange.
Anonymous by design. Each order is identified by a public order number (for example KIKI-261112-0001) and by the deposit address issued for that order. That number is the only key needed to find an order — no personal identifier is attached to it.
Honest limitation. “Anonymous” describes our side of the process. We cannot control your internet provider, the public blockchain record, or the records kept by the payment provider you choose to use. A blockchain transfer is public by nature, and a bank transfer follows banking rules.

3. What we process and why

We keep the data set as small as the exchange mechanics allow. Everything below is needed for one of three purposes: executing your order, paying you correctly, and keeping the Service secure.

a) Order details

Order number, date and time of creation.
Direction (buy or sell), asset, network, amount and the rate applied.
Status of the order: created, awaiting payment, paid, paid out, cancelled.
Why: to execute the exchange, to produce your receipt and to answer you if you contact us about a specific order.

b) Payout details

For a sale into fiat: the card number or phone number you enter, and the bank you select.
For a purchase or a payout in crypto: the wallet address you enter.
Why: we cannot send money to a destination we do not know. These details are used exclusively to make your payout and are stored in masked form wherever the full value is not required.

c) Deposit addresses

Every order receives a separate deposit address, generated from our wallet infrastructure.
The address is linked to the order, not to a person, and expires automatically after the period shown in your receipt.
Why: a unique address lets the payment robot identify your transfer with certainty and credit the right order.

d) Technical information

IP address, browser and operating-system identifier, interface language, and the page you opened — this is the information any web server receives when a browser connects to it.
Why: to protect the Service from abuse, automated address harvesting and denial-of-service attempts, and to diagnose technical faults.
We do not collect your geolocation, screen parameters, device fingerprints, contact list, clipboard or anything else from your device. No scripts on this website read data from your computer.

e) Payment status

From our payment and blockchain partners we receive the fact of a transfer, its amount, its status and its identifier — not your full card details.
Why: to confirm that the money has arrived and to release the counterpart of the exchange.

4. How payments are matched

A unique payment method. The Service uses its own payment flow: for each order the system generates a dedicated deposit address and an exact amount, and payment is confirmed by a robot that watches the blockchain and our payment partner's notifications.
Matching by amount and address. The robot compares the incoming transfer with the expected amount on the expected address. This is why the receipt asks you to send the exact amount: a different amount may not be matched automatically.
No manual processing of your data. Order data is passed to the robot as structured fields. Nobody reads your messages or your receipts by hand unless you contact support about a specific order.
Automated reporting. The same data is used to compile an internal report on order execution: what was ordered, what arrived, what was paid out and when. The report exists to prove that the exchange was performed correctly.

5. How long we keep data

No longer than seven days. Order data and technical logs are kept on our servers for a maximum of seven days from the moment the order is completed or abandoned. After that they are deleted or anonymised so that they can no longer be linked to an order or a device.
In your browser. The active order number is stored locally in your browser so that the receipt survives a page reload. It is removed when you close the order or clear the browser data, and it is never sent anywhere except our own backend.
Exceptions. Data may be kept longer only where the law of our jurisdiction requires it, or where it is necessary to resolve a specific dispute, a chargeback or an unlawful-use investigation. In such a case the data is kept for the period required and no longer, and access is limited to those who need it.

6. Partners and auxiliary services

The Service relies on the auxiliary infrastructure of its partners. Each partner receives only the minimum needed to perform its function, and none of them receives a right to use your data for its own advertising.

Hosting and content delivery. The website and its backend run on third-party cloud infrastructure, which technically processes requests to the site.
Payment partners. Fiat payments are handled by a payment provider that receives the payment amount and status.
Blockchain data providers. Public nodes and explorers are queried to confirm crypto transfers. Blockchain data is public by definition.
Notification channel. Internal order notifications are delivered through a private messaging channel used by the operators of the Service.
No selling, no advertising. We do not sell, rent or trade data, and we do not share it with advertising networks or data brokers.

7. Legal compliance, AML and KYC

No KYC. The Service does not carry out identity verification: no documents, no selfies, no proof of address.
Partial AML. Anti-money-laundering screening is applied in a limited form: incoming transfers are checked automatically for risk signals, and an order that shows signs of fraud or money laundering may be refused, suspended or held until the circumstances are clarified.
The Service operates in accordance with the legislation of the country in which it is registered, and applies that legislation to every order.
We may refuse, suspend or reverse an exchange where there are reasonable grounds to believe that it is connected to fraud, money laundering, terrorist financing, stolen funds or any other unlawful activity.
We may disclose information to a competent authority where we are legally obliged to do so. Where the law allows, we will tell you about such a request.
We do not knowingly provide the Service to persons in jurisdictions where the Service would be unlawful, or to persons under the applicable legal age.

8. Security

The website is served over HTTPS; traffic between your browser and the Service is encrypted.
Deposit addresses are signed cryptographically, so an address cannot be altered or its lifetime extended.
Keys controlling the funds are held on the server side and are never transmitted to the browser.
Request rate limits protect the address-issuing endpoint from automated harvesting.
Access to order data is limited to the operators who need it to execute exchanges and answer support requests.

9. Cookies and local storage

We do not use advertising cookies, third-party trackers, or analytics that identify you.
Browser local storage is used for exactly one purpose: remembering your active order so that the receipt can be reopened after a reload.
The hosting provider may set strictly functional cookies required for delivery and protection of the website.
You can clear this data at any time in your browser settings; the only consequence is that an open receipt will no longer be restored.

10. Your choices

Close the order. Closing a receipt in the interface removes the local copy of that order from your browser.
Ask for deletion. Write to the address in section 14 with the order number and ask us to delete the data. We will do so unless a legal obligation requires us to keep it.
Ask what we hold. You may request a description of the data linked to a specific order number.
Simply wait. Because retention is limited to seven days, order data disappears on its own.

11. Risks you should know about

Volatility. Crypto rates change continuously; the rate applied to your order is the one shown in your receipt and is valid for the period stated there.
Irreversible transfers. A crypto transfer cannot be recalled once it is confirmed on the network.
Wrong network. Sending an asset over a network other than the one shown in the receipt can result in the permanent loss of funds.
Third-party outages. Blockchain nodes, payment providers and hosting may be temporarily unavailable; in that case processing of an order may be delayed.
No investment advice. The Service performs exchanges; it does not provide financial, investment or tax advice.

12. Children

The Service is not intended for persons below the age of majority in their jurisdiction, and we do not knowingly process their data.

13. Changes to this policy

We may update this policy as the Service develops. The current version is always published on this page, with the date of the last update in the heading.
A change of the retention period or of the purposes of processing will be reflected here before it takes effect.

14. Contact

Questions about this policy, a deletion request, or a question about a specific order: dtryvergo2@gmail.com.
Please include the order number (KIKI-…) in the subject line — it is the only identifier we need.