Privacy Policy

SPLEXX ("we", "us", or "our") is committed to protecting your privacy and handling your personal data transparently and responsibly. This Privacy Policy explains what information we collect, how we use and share it, and the rights you have over it when you use our websites, applications, and services (collectively, the "Services").

This Policy applies to all users worldwide and is designed to align with global data-protection frameworks, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA). By using the Services, you acknowledge the practices described here.

We use personal data to provide, maintain, and improve the Services; to process transactions and manage your account; to communicate with you about updates, security, and support; to personalize your experience; and to detect, prevent, and address fraud, abuse, or security incidents.

We also use aggregated and de-identified data for analytics and research. We do not sell your personal data, and we do not use it for purposes that are incompatible with those described in this Policy without informing you.

Where the GDPR applies, we process personal data on one or more of the following legal bases: performance of a contract with you; your consent; compliance with a legal obligation; and our legitimate interests in operating and improving the Services, provided those interests are not overridden by your rights.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

We use cookies and similar technologies to operate the Services, remember your preferences, measure performance, and understand how the Services are used. You can control cookies through your browser settings and, where required, through our consent banner.

Some features may not function correctly if you disable certain cookies. We honor recognized opt-out signals, such as Global Privacy Control, where legally required.

We share personal data only as needed: with trusted service providers who process data on our behalf under contractual safeguards; with affiliates within our corporate group; to comply with law or valid legal requests; and in connection with a merger, acquisition, or asset sale, subject to this Policy.

All third parties are bound by confidentiality and data-protection obligations and are permitted to use the data only for the purposes we specify.

We operate globally, and your personal data may be transferred to and processed in countries other than your own. Where we transfer data internationally, we implement appropriate safeguards — such as the European Commission's Standard Contractual Clauses or equivalent mechanisms — to ensure your data remains protected.

We retain personal data only for as long as necessary to fulfil the purposes set out in this Policy, to comply with legal, accounting, or reporting obligations, and to resolve disputes. When data is no longer needed, we securely delete or anonymize it.

The Services are not directed to children under 16 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will provide notice — for example, by posting the updated Policy with a new effective date or by other appropriate means. We encourage you to review this Policy periodically.