Privacy Policy

1. Introduction

Luno Official ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our crypto trading platform. By using our services, you agree to the practices described in this policy.

2. Information We Collect

We collect information necessary to provide and improve our services:

• Account data: Name, email address, and password (hashed) when you register
• Profile data: UID, account level, and preferences
• Financial data: Balance, transaction history, and withdrawal requests
• Bank details: Only when you add withdrawal information (stored securely)
• Usage data: Login times, IP address, and device information for security

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Process trades, deposits, and withdrawals
• Send notifications about your account and platform updates
• Prevent fraud and ensure platform security
• Comply with legal and regulatory requirements
• Improve our services and user experience

4. Data Security

We implement industry-standard security measures to protect your data. Passwords are hashed using bcrypt. We use HTTPS for all communications. Sensitive data is stored in secure databases with access controls. We do not store your raw password or share your bank details with third parties for marketing.

5. Cookies and Session

We use session cookies to keep you logged in and maintain your preferences. These are essential for the platform to function. We do not use third-party advertising cookies. You can clear cookies in your browser, but you will need to log in again.

6. Third-Party Services

We use Google OAuth for optional sign-in. When you use "Continue with Google", Google shares your email and name with us as per their privacy policy. We use MongoDB Atlas for database hosting and Vercel for hosting. These providers have their own security and privacy commitments.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent where we rely on it

To exercise these rights, contact us through the support option in your dashboard or via the email provided in your account settings.

8. Data Retention

We retain your data for as long as your account is active and as required by law for financial records. After account closure, we may retain certain data for legal, regulatory, or dispute-resolution purposes.

9. Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe we have collected such data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform. Continued use after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or requests, contact us through the support section in your dashboard or at the contact details provided on our platform.