Privacy policy · last updated September 30, 2026
Privacy at AYEDEX
What AYEDEX collects, why, how long it keeps it, and who else sees it. In short: we collect what an exchange needs to keep your money and your account safe and to meet the law, we sell nothing, we run no advertising trackers, and we delete what we no longer need on a fixed schedule.
1 · Who we are
AYEDEX (ayedex.com) is operated by Distributed Ledger Technologies, a Wyoming company ("DLT", "we", "us"). Questions and privacy requests: [email protected]. Legal notices: Registered Agents Inc, 30 N Gould St, Ste R, Sheridan, WY 82801, USA.
2 · What we collect
| What | Details |
|---|---|
| Account | Your email address; your password and trading PIN, stored only as one-way hashes we cannot reverse; your hardware security keys (their public key, the maker and model the key reports, the names you give them, when they were last used). |
| Identity details | Your legal name, ID number, date of birth and citizenship, required before you trade or withdraw, together with the time you gave them, your age and the IP address you used. They are permanent: they are how you prove the account is yours if you ever lose every key, so they cannot be changed or deleted afterwards. |
| Activity | Your balances, orders, trades, deposits and withdrawals (including the addresses you withdraw to), and a record of every change to your balance. |
| Sign-in and device | For each sign-in: your IP address, your browser's user agent and the device type (for example "desktop, macOS"). Counts of failed sign-ins per email address, and when sign-in codes were sent and to which IP address. |
| Account recovery | Only if you lose every security key: your identity details typed again, and three photos (your ID front and back, and you holding it). The photos are stripped of location data and encrypted in your browser so that only an offline key, never stored on our servers, can open them. We also keep the case's IP address and browser. |
| Email we send you | A copy of each message (codes, sign-in alerts, deposit and withdrawal notices). One-time codes are wiped from it as soon as the message is sent. |
| Currency requests | Which currency you asked us to list next, and when. Not your IP address, country or email. Only totals are ever shown publicly. |
We do not collect phone numbers or postal addresses, we ask for no ID photos outside account recovery, and we run no advertising or analytics trackers. Our pages load their fonts from our own server, not from Google.
3 · Why we use it
- To run your account: sign-in, trading, deposits, withdrawals, and the emails that go with them.
- To keep it secure: spotting sign-ins from new places, stopping guessing attacks, holding withdrawals after security changes, and recovering an account whose keys are lost.
- To meet the law: keeping records of who held what and when, and not serving sanctioned countries or people.
We never sell your data, share it for advertising, or use it to build marketing profiles.
4 · Who else receives it
| Who | What and why |
|---|---|
| Resend | Delivers our emails, so it receives your email address and the message. Addresses in our emails are shortened. |
| Cloudflare | Carries all traffic to ayedex.com and protects it from attacks, so it sees your IP address and the pages you request. |
| The Stellar network | USDC deposits and withdrawals are payments on a public ledger: the amount, the accounts involved and the deposit memo (your AYEDEX customer number) are visible to anyone, permanently. |
| The xCoin blockchain | XID deposits and withdrawals are public on the chain in the same way. |
| The community chat | The chat box (chat.ayedex.com) is a separate service with its own sign-in; AYEDEX shares no account data with it. |
| Authorities | When the law requires it, for example a valid court order, or to report sanctions violations or fraud. |
5 · How long we keep it
| Data | Kept |
|---|---|
| Sign-in sessions | At most 30 days (24 hours if unused), then deleted. |
| Sign-in codes | 15 minutes. Records of codes sent: 24 hours. Failed sign-in counters: about an hour after the last attempt. |
| Copies of emails | 90 days. One-time codes are wiped the moment the email is sent. |
| Recovery photos and typed details | Deleted 30 days after the case ends (at once if you stop before sending them). |
| IP addresses | 12 months, then removed from our records. The one exception is the IP address stored with your identity details, which stay as given (see above). |
| Server logs | Up to 12 months. Email addresses, passwords, codes and identity details are removed from every log line. |
| Account, identity and trading records | For as long as your account exists, and afterwards for as long as the law requires us to keep financial records. |
| Backups | Encrypted copies of the whole database: about one day on the server, and 90 days on an offline computer. Only an offline key can open them. |
6 · How we protect it
Hardware security keys are required for every account; passwords and PINs are stored only as one-way hashes; every connection is encrypted; backups are encrypted to a key that never touches our servers; recovery photos are encrypted before they leave your computer. No system is perfectly secure, and we will tell you promptly if a breach affects your data.
7 · Cookies and browser storage
AYEDEX uses no cookies that need your consent, which is why it shows no cookie banner. Everything below is strictly necessary to sign you in, keep the site secure, or remember a setting you chose. One cookie: __Host-ayedex_s, your sign-in session (30 days at most, readable only by our server). Your browser also remembers where you put the chat box. No advertising or analytics cookies. Cloudflare may set its own short-lived security cookies to tell people from bots. If AYEDEX ever adds analytics or any other cookie that is not strictly necessary, it will ask your consent first.
8 · Your rights
- A copy of your data: email [email protected] from your account's address and we will send it within 30 days.
- Correction: we can correct your email address. Your identity details cannot be changed (section 2).
- Closing your account and deletion: withdraw your balance and ask us to close the account. We delete what the law allows; identity, account and trading records stay as long as the law requires.
- Where you live may give you more rights (for example in the European Union, the United Kingdom or California): to object, to restrict use, or to complain to your data-protection authority. Write to us and we will honour them.
9 · Age, location and transfers
AYEDEX is for adults (18 or older). Our servers are in the United States, so your data is processed there. AYEDEX is not available in sanctioned countries (see the Terms).
10 · Changes
We will post any change here with a new date, and email you first if a change affects how we use data we already hold.
AYEDEX is operated by Distributed Ledger Technologies, a Wyoming company. Questions: [email protected] · Terms of service · How it works