Sky Exchange Privacy Policy

This policy applies to every visitor and registered user of Skyexch, whether you access the Platform through the website, mobile browser or the official app.

It applies to all personal data collected in connection with your use of the Platform, including data collected during registration, login, verification, transactions, support interactions and general browsing.

Skyexch is strictly meant for users aged 18 and above. We do not knowingly collect personal data from minors. If we discover that a minor has provided data, we will delete it promptly.

Directly from you — when you register, log in, complete KYC, contact support, or interact with the Platform.

Automatically — through your device and browser when you use the Platform (for example, IP address, session logs and cookies).

From authorised third parties — such as verification partners and payment service providers, to the extent required to deliver our services.

To create and manage your sky exchange account.

To verify your identity and age, and to comply with KYC and anti-fraud obligations.

To process deposits, withdrawals and other financial actions.

To provide customer care and resolve your queries.

To detect, prevent and investigate fraud, abuse, and violations of our Terms.

To operate, maintain, monitor and improve the Platform.

To send you service-related communications (transaction alerts, security notices, policy updates).

To send marketing communications where permitted by law, which you can opt out of at any time.

To comply with legal, regulatory and law-enforcement obligations.

To enforce our Terms and protect the rights and safety of users and the Platform.

With trusted service providers — such as KYC partners, payment processors, cloud hosting and communication providers — under strict confidentiality and data-protection obligations.

With regulatory, tax and law-enforcement authorities — when required by law, court order or lawful request.

In connection with fraud prevention — with industry bodies and partners where necessary to protect users and the Platform.

In connection with a corporate transaction — such as a merger, acquisition or reorganisation, subject to appropriate confidentiality and legal safeguards.

With your consent — for any additional sharing not covered above.

We retain your personal data only as long as needed for the purposes described in this policy, or as required by applicable law.

Account and KYC data is generally retained for the duration of your account and for a further period after closure, in line with legal, tax and anti-fraud requirements.

Transaction records are retained for the periods required by applicable financial and regulatory laws.

Support conversation records are retained for a reasonable period to allow follow-up, dispute resolution and quality improvement.

When personal data is no longer required, it is deleted or anonymised through documented processes.

Skyexch uses cookies and similar technologies for essential functions (such as keeping you logged in), security (such as detecting suspicious sessions), preferences (such as remembering your language) and analytics (such as understanding aggregate usage patterns).

You can control non-essential cookies through your browser settings or, where offered, through our on-site cookie preferences panel. Disabling essential cookies may affect core Platform functionality.

Right to access — You can request confirmation of what personal data we hold about you and receive a copy in a readable form.

Right to correction — You can request that inaccurate or incomplete data be corrected or updated.

Right to erasure — You can request deletion of personal data that is no longer necessary, subject to legal and regulatory retention requirements.

Right to withdraw consent — Where processing is based on consent, you can withdraw it at any time.

Right to grievance redressal — You can raise a complaint with our grievance officer and expect a timely, documented response.

Right to nominate — You may nominate another individual to exercise your rights in the event of your death or incapacity, as permitted under the DPDP Act.

All data transmitted between your device and our servers is encrypted using industry-standard protocols.

Passwords are stored in hashed form and are never viewable in plain text, even by our internal teams.

Access to production data is restricted on a strict need-to-know basis, with logging and periodic review.

We use anti-fraud, anti-bot and intrusion-detection systems that operate continuously in the background.

Physical, technical and administrative safeguards are reviewed and updated regularly to keep pace with evolving threats.

Despite these measures, no system on the internet is 100% secure. You play an important role by keeping your credentials confidential, using strong passwords, and enabling two-factor authentication.

Skyexch is strictly for users aged 18 and above.

We do not knowingly collect personal data from anyone under 18.

If you believe a minor has provided personal data to us, please contact the grievance officer immediately. We will investigate and delete the data promptly.

Where any of our service providers process data outside India, such transfers are carried out only in a manner consistent with applicable Indian law and only where equivalent protection is available.

We enter into appropriate contractual safeguards with such providers to ensure your data continues to be protected to the standards described in this policy.

We may update this policy from time to time to reflect operational, legal or regulatory changes.

The latest version will always be available on this page, with the effective date updated at the top.

Where changes are material, we will bring them to your attention through the Platform or your registered contact details.