Privacy Policy

Swaplo is operated by the platform operator (“we”, “us”). For privacy requests, contact us via in-app Support.

If we appoint a formal legal entity or DPO contact, we will update this page.

Account data: email address (if used), Telegram user id and username (if linked), public nickname, optional avatar image, role preferences, and account timestamps.

Security data: wallet PIN hash, recovery-phrase hash (not the phrase itself after confirmation), session cookies, and related security events.

Financial/ops data: USD ledger balances and transactions, LTC top-up addresses and indices, cashout requests and addresses, loan records, collateral descriptions, signatures/deal acceptance records, and admin action history needed to settle deals.

Communications: support tickets, peer messages, and notification content. Message threads may be reviewed by admins for disputes and abuse.

Technical data: IP address, device/browser type, and basic logs from hosting providers as needed for security and reliability.

To create and secure accounts, authenticate sessions, and recover access (PIN / recovery / email magic links).

To operate the marketplace: listings, funding, collateral windows, repayment, fees, cashouts, and admin review.

To notify you about deals, security, and support (in-app, email, and/or Telegram when linked).

To prevent fraud, enforce Terms, and comply with law.

To improve product reliability and user experience (aggregated or de-identified where practical).

Counterparties see your nickname, avatar (if set), and deal-related public fields — not your email or Telegram id.

Service providers process data on our behalf (for example hosting, database, email delivery, Telegram Bot API). They may only use data to provide those services.

We may disclose information if required by law, to protect rights and safety, or in connection with a business transfer, with appropriate safeguards.

We do not sell your personal information.

We use an httpOnly session cookie to keep you signed in after magic-link or Telegram web login.

We may store non-sensitive preferences in local storage (for example theme, client session helpers). Clearing site data signs you out of client helpers; session cookies follow browser rules.

We retain account, ledger, and loan records for as long as needed to operate the service, resolve disputes, and meet legal/accounting requirements.

Support and message records may be kept for dispute and safety review.

You may request deletion of your account where feasible; we may retain records required for compliance, fraud prevention, or open financial obligations.

We use industry-standard measures such as hashed PINs, hashed recovery phrases, signed session cookies, and restricted server credentials.

No method of transmission or storage is 100% secure. Protect your devices, email, Telegram, PIN, and recovery phrase.

You can update nickname, email, and avatar in Profile settings (PIN may be required for sensitive changes).

Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. Contact Support to exercise rights.

You may stop using Swaplo and request account closure subject to open loans or Pending balances.

Infrastructure and processors may be located in different countries. By using Swaplo you understand your information may be processed outside your home country with appropriate contractual or operational safeguards where required.

Swaplo is not directed to children under 18 (or the age of majority in your jurisdiction). We do not knowingly collect data from children.

We may update this Privacy Policy by posting a new version with an updated date. Material changes will be highlighted where practical.

Privacy requests: in-app Support (/support).

Also see Terms (/legal/terms) and Refund & Settlement (/legal/refund).