Privacy policy

1. General

This policy describes what data ROVEN exchange receives when you use the website, the Telegram bot and the Mini App, why it is needed, how long it is kept and what rights you have. We collect as little as possible: exchanging requires no registration, documents or phone number.

2. What data we process

• Order data: direction, amounts and rate, payout address and memo, payment address, transaction hashes, order status and history.
• Contact details — an email or Telegram handle, if you entered one in the order. This is optional.
• Technical data: the IP address an order or review came from, site language, date and time of actions.
• Telegram data — when you use the bot or Mini App: ID, username, first and last name from your profile, language and profile photo, if they are public in Telegram.
• Reviews: the name, rating and text you entered yourself.
• AML information — only if requested in the exceptional cases described in the AML/KYC policy.
• Support correspondence — messages and attachments you sent.

We never receive or ask for your private keys, seed phrases or wallet passwords.

3. Why we need this data

• to complete the exchange: find your transfer, send the payout and show the order status;
• to contact you about the order and send status notifications;
• to resolve unusual situations: late payment, wrong amount or network, refunds;
• to run AML checks and comply with the law;
• to protect the service from abuse: limit the rate of orders and reviews and detect fraud;
• to publish the reviews you left.

We don’t sell data, use it for advertising or share it with ad networks.

4. Cookies and browser storage

• Session and form-protection cookies — needed for the site to work and to protect against request forgery. Without them an order can’t be created.
• The list of your recent orders is kept in your browser’s storage (localStorage) so you can quickly return to your order. It is not sent to the server; you can remove it by clearing the site data in your browser.

The site doesn’t use third-party advertising or analytics cookies.

5. Who data may be shared with

• The blockchain. Addresses, amounts and transaction hashes are public by the nature of the blockchain and visible to anyone in block explorers — this doesn’t depend on us.
• Technical providers: the hosting the site runs on; Cloudflare, which carries traffic and protects the site from attacks; Telegram — if you use the bot or Mini App.
• Blockchain analytics services — for AML screening of transactions and addresses.
• Competent authorities — only upon a lawful request and to the extent required by law.

6. How long we keep data

• order data and related technical data — as long as needed for record-keeping, dispute resolution and compliance with anti-money-laundering requirements (usually up to 5 years after the order);
• information obtained during an AML check — for the same period;
• reviews — while they are published or until you ask us to delete them;
• server logs — for the limited time needed for diagnostics and protection.

7. How we protect data

The site works over HTTPS only, order data is accessible only to operators, and sensitive settings are stored encrypted. An order page opens via a unique link that only you know, so don’t share it publicly. If you suspect your link or contact details have reached others, contact support.

8. Your rights

• find out what data about you is stored and get a copy;
• correct inaccurate data — for example, your contact details;
• ask us to delete data that no longer needs to be kept by law or to complete an exchange;
• stop Telegram notifications — just stop the bot;
• withdraw consent to publish your review.

To exercise these rights, contact support with your order number or the contact details we can find you by. We may ask you to confirm that the data belongs to you.

9. Changes to this policy

We may update this policy, for example when new features are added. The current version is always published on this page. Questions about data are handled by support — see the Contacts page.