Privacy Policy

1. Introduction

Huzzah Labs Limited ("Company", "HYPX", "we", "us", or "our") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you access or use our platform, services, website, and applications (collectively, the "Services").

By using the Services, you acknowledge that you have read and understood this Privacy Policy and our Terms of Service. If you do not agree with our practices, you should not use the Services.

This Privacy Policy applies to all users of the Services, including visitors to our website and registered account holders ("Users", "you", or "your"). We may update this Privacy Policy from time to time by posting a revised version on our Platform. Continued use of the Services after changes constitutes acceptance of the updated policy.

2. Overview of Our Services

HYPX provides software tools for cryptocurrency trading automation, including strategy configuration, bot management, execution infrastructure, analytics, and related features. The Services integrate with third-party cryptocurrency exchanges and blockchain networks to facilitate automated trade execution based on user-defined parameters.

This Privacy Policy covers data collected through the Services, including our web application, mobile apps, APIs, and any related communications. It does not apply to third-party services, websites, or platforms that may link to or integrate with the Services—those are governed by their own privacy policies.

3. Information We Collect

We collect several categories of information to provide, maintain, improve, and secure the Services.

3.1 Account and Contact Information

When you register for an account, we collect:

• Email address
• Username or display name
• Account credentials (passwords are hashed and encrypted)
• Profile information you choose to provide
• Communication preferences

3.2 Identity Verification Data

For compliance with anti-money laundering (AML), know-your-customer (KYC), and other legal obligations, we may collect:

• Government-issued identification documents (e.g., passport, driver's license)
• Proof of address documents
• Date of birth and nationality
• Photographs or biometric data (as required for verification)
• Tax identification numbers (where required)

3.3 Financial and Transaction Information

To process payments and provide Services, we may collect:

• Billing name and address
• Payment method details (processed by third-party payment providers—we do not store full credit card numbers)
• Subscription and billing history
• Transaction records and invoices

3.4 Exchange and Trading Data

When you connect third-party exchange accounts, we collect:

• API keys and secrets (encrypted at rest and in transit)
• Exchange account identifiers
• Trading history, positions, and order data
• Wallet addresses and balances (as provided by exchanges)
• Strategy configurations and automation settings

3.5 Usage and Analytics Data

To understand how you interact with the Services and improve user experience, we collect:

• Pages viewed, features used, and actions taken
• Session duration, frequency of use, and access times
• Click patterns, navigation paths, and interaction data
• Performance metrics and error logs
• Referral sources and campaign attribution

3.6 Technical and Device Information

We automatically collect technical data when you access the Services:

• IP address and geolocation data (city/country level)
• Device type, operating system, and browser type
• Device identifiers (e.g., mobile device IDs, advertising IDs)
• Network information and connection type
• Language and timezone settings

3.7 Communications and Support

When you contact us for support or otherwise communicate with us, we collect:

• Your messages, inquiries, and feedback
• Support ticket history and correspondence
• Any information you voluntarily provide in communications

3.8 Cookies and Tracking Technologies

We use cookies, pixels, web beacons, and similar tracking technologies to enhance your experience and collect usage data. For details, see Section 4 and our Cookie Policy.

4. Cookies and Tracking Technologies

We and our third-party service providers use cookies, pixels, local storage, and similar technologies ("Tracking Technologies") to collect data about your browsing behavior and interactions with the Services.

4.1 Types of Tracking Technologies We Use

Strictly Necessary: Essential for the Services to function. These enable core features like authentication, security, and session management. We do not need your consent to use these.

Functional: Enhance your experience by remembering preferences (e.g., language, display settings) and providing personalized features.

Analytics and Performance: Help us understand how users interact with the Services, measure performance, identify errors, and improve functionality. We use tools like Google Analytics, Mixpanel, or similar services.

Advertising and Marketing: Used to deliver relevant ads and measure campaign effectiveness. Third-party ad networks may place cookies to track your activity across websites and serve targeted ads.

4.2 Managing Cookies and Tracking Preferences

You can manage cookie preferences through your browser settings. Most browsers allow you to:

• Block all cookies
• Accept only first-party cookies
• Delete cookies after each session
• Receive notifications when cookies are set

Note that disabling certain cookies may limit your ability to use some features of the Services. For more information, see our Cookie Policy.

To opt out of interest-based advertising, visit: NAI Opt-Out | DAA Opt-Out | EDAA (EU)

5. How We Use Your Information

We use your personal information for the following purposes, based on legitimate business interests, contractual necessity, legal compliance, or your consent (where required):

6. How We Share Your Information

We do not sell your personal information. We may share your data with third parties in the following circumstances:

6.1 Service Providers and Business Partners

We share data with third-party vendors who perform services on our behalf, including:

• Cloud hosting and infrastructure providers (e.g., AWS, Google Cloud)
• Payment processors (e.g., Stripe, PayPal)
• Analytics and monitoring services (e.g., Google Analytics, Sentry)
• Customer support platforms
• Email and communication services
• Identity verification and KYC providers

These providers are contractually obligated to use your data only as necessary to provide their services and in compliance with applicable privacy laws.

6.2 Third-Party Exchanges and Blockchain Networks

When you connect exchange accounts or wallets, we transmit API keys and trade instructions to the respective exchanges as necessary to execute your automated strategies. These exchanges have their own privacy policies and data handling practices.

6.3 Legal and Regulatory Requirements

We may disclose your information to government authorities, regulators, law enforcement, or legal parties when:

• Required by law, regulation, subpoena, court order, or legal process
• Necessary to comply with AML, KYC, sanctions screening, or tax reporting obligations
• Requested by law enforcement for investigations or public safety
• Needed to protect our rights, property, or safety, or that of users or the public

6.4 Business Transfers

If we undergo a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar corporate transaction, your personal information may be transferred to the acquiring entity or successor. You will be notified of any such change via email or prominent notice on our Platform.

6.5 With Your Consent

We may share your information for other purposes with your explicit consent or at your direction.

7. Marketing and Communications

With your consent (where required by law), we may send you promotional emails, product updates, newsletters, and marketing communications about the Services or related offerings. We may also share your information with trusted marketing partners for co-branded promotions or relevant third-party offers.

Opting Out: You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in the email or by contacting us at support@hypx.app. Note that you may still receive transactional or service-related emails (e.g., account notifications, security alerts) even after opting out of marketing communications.

8. International Data Transfers

HYPX operates globally, and your personal data may be transferred to, stored in, or processed in countries other than your own, including the United States, the European Economic Area (EEA), or other jurisdictions where our service providers operate.

When we transfer personal data outside the EEA or UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding Corporate Rules or other legally recognized mechanisms

By using the Services, you acknowledge and consent to the transfer of your personal data as described in this Privacy Policy.

9. Data Retention

We retain your personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, enforce our Terms, and fulfill the purposes described in this Privacy Policy.

Retention periods vary based on data type and legal requirements:

• Account data: Retained while your account is active, plus a reasonable period after closure for legal compliance
• Transaction records: Typically retained for 5-7 years for accounting, tax, and regulatory purposes
• KYC/AML data: Retained as required by applicable financial regulations (typically 5-7 years)
• Marketing data: Retained until you unsubscribe or request deletion
• Usage and analytics data: Typically retained for 12-24 months unless required for longer-term analysis

After the retention period, we securely delete or anonymize your data. Some data may be retained in backups for a limited time but will not be actively used or accessible.

10. Data Security

We take data security seriously and implement reasonable technical, administrative, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Secure storage of API keys and credentials in encrypted vaults
• Access controls and role-based permissions for internal systems
• Regular security audits, penetration testing, and vulnerability assessments
• Multi-factor authentication (MFA) for account access
• Incident response and breach notification procedures

However, no system is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for any activity on your account. Please notify us immediately at security@hypx.app if you suspect unauthorized access or a security breach.

11. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include:

11.1 Access and Portability

You have the right to request a copy of the personal information we hold about you and, in some cases, to receive it in a portable, machine-readable format.

11.2 Correction

You may request that we correct inaccurate or incomplete personal information. You can update most account information directly through your account settings.

11.3 Deletion

You may request deletion of your personal information, subject to certain exceptions (e.g., legal obligations to retain financial records, ongoing disputes, or security investigations). Account deletion can be initiated through your account settings.

11.4 Restriction and Objection

You may request that we restrict processing of your data or object to certain processing activities, such as direct marketing.

11.5 Withdraw Consent

Where processing is based on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing prior to withdrawal.

11.6 Lodge a Complaint

If you believe we have not handled your personal information appropriately, you have the right to lodge a complaint with a supervisory authority in your jurisdiction (e.g., the Information Commissioner's Office (ICO) in the UK, or your local data protection authority in the EU).

Exercising Your Rights: To exercise any of these rights, please contact us at privacy@hypx.app with your request. We will respond within the timeframes required by applicable law (typically 30 days). We may require verification of your identity before processing your request.

12. Children's Privacy

The Services are not intended for individuals under the age of 18 (or the age of majority in your jurisdiction, whichever is higher). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@hypx.app, and we will take steps to delete such information.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request deletion of your personal information (subject to certain exceptions)
• Right to Opt-Out of Sale: We do not sell personal information. If our practices change, we will provide an opt-out mechanism
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, contact us at privacy@hypx.app or toll-free at [PLACEHOLDER: California toll-free number]. You may also designate an authorized agent to make requests on your behalf.

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and equivalent laws, including:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your personal data is detailed in Section 5. To exercise your rights or for questions about our GDPR compliance, contact our Data Protection Officer at dpo@hypx.app.

15. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or Services. The "Last updated" date at the top of this page indicates when the policy was last revised. We will notify you of material changes by email or through a prominent notice on the Platform.

Continued use of the Services after changes become effective constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Huzzah Labs Limited
Email: privacy@hypx.app
Data Protection Officer: dpo@hypx.app
Security Issues: security@hypx.app
General Support: support@hypx.app

Last modified: 24 February 2026