Definitions
"We", "the platform": Senerum as a service operated for your jurisdiction. "Personal data": information relating to an identified or identifiable natural person, i.e. you. "Processing": any operation on that data: storing, reading, combining, deleting.
Personal data we collect
The platform collects: first and last name; email address; phone number; the content of your support requests. For verification (KYC): the identity document you upload and, where applicable, a proof of address and a short selfie or liveness video. For account operation: transaction history, sign-in logs, device and browser information, IP address.
Usage data
Using the site records standard technical data: pages visited, approximate location derived from the IP, device type, browser, referrer and timestamps. This data serves security (detecting anomalous access), statistics (aggregated, anonymised) and troubleshooting.
Cookies
Essential cookies keep your session signed in and protected. Preference cookies remember interface choices. Analytics cookies, if active, aggregate usage statistics. You can reject non-essential cookies without losing functionality; essential ones cannot be switched off because the service cannot operate without them.
Controller and processors
Senerum is the controller of the data described here: it decides why and how it is processed. Third parties acting under our instructions (KYC providers, hosting, email delivery) are processors: they process data only for the purposes we define, by contract.
Collection and use
Data is used to: create and protect your account; verify your identity; provide and support the trading service; process deposits and withdrawals; answer your requests; meet legal obligations, including AML record-keeping; maintain security logs; and, with your consent, send relevant marketing. Each purpose uses the minimum data it requires.
Legal bases
Contract: the processing necessary to provide the service you registered for (account, transactions, support). Legal obligation: identity verification, transaction records, applicable fiscal or judicial requirements. Legitimate interest: security monitoring, fraud prevention, service improvement. Consent: marketing communications and non-essential cookies, given explicitly and withdrawable at any time.
Data retention
Account and transaction data: for the life of the account, plus the legally required archive period after closure. KYC documents: for the period required by applicable AML rules, then deleted. Support correspondence: up to three years. Security logs: up to two years. Analytical aggregates: kept without personal identifiers.
Data sharing
Recipients are limited to: KYC/verification providers; IT and hosting providers; group affiliates where the service requires it; payment processors; and regulators, courts or other authorities where the law requires disclosure. Data is never sold or shared for third-party advertising.
Disclosure
We may disclose personal data where the law requires it, to enforce the Terms of Use, to protect the rights and safety of users or the platform, or in connection with a corporate reorganisation, in which case the recipient assumes the obligations of this policy.
Security
Data is encrypted in transit and at rest; access follows the principle of least privilege; every access to sensitive records is audited. Details of the technical and organisational measures are on the Security page. No system is perfectly secure, but the measures match the sensitivity of the data they protect.
Your rights
You have the right to: access your data and receive a copy; rectify inaccurate data; erase data not subject to a legal retention duty; restrict processing while a dispute is resolved; object to processing based on legitimate interest; withdraw marketing consent at any time; and receive your data in a portable format. To exercise any right, write to [email protected]; we respond within the legal deadline applicable in your jurisdiction.
Service providers
The platform relies on processors for hosting, email delivery, KYC verification and payment processing. Each is contractually bound to process data only under our instructions, with equivalent security measures, and is audited or certified according to the sensitivity of the data it touches.
Analytics
Aggregated usage statistics help us understand which pages help users and which confuse them. Analytics output contains no direct identifiers, and raw event data is pseudonymised and rotated. Marketing analytics, where used, is activated only with your consent.
Advertising and retargeting
If you give consent, retargeting pixels may measure how visitors who arrived from an advert use the site. Withdrawing consent stops future measurement; it does not delete historical aggregated reports that contain no identifiers.
Links to third-party sites
The site links to external services (payment providers, exchanges) whose privacy practices are their own. This policy covers only data processed by the platform; read the policies of the services you use separately.
Minors
The service is strictly for adults. No accounts are created for anyone under 18, and any account found to belong to a minor is closed immediately, deleting data beyond what the law requires us to keep about the closure itself.
Changes to this policy
The policy may be updated to reflect legal or service changes. The current dated version is the one published on this page; material changes are announced on the site before taking effect. Continued use after the effective date implies acceptance of the updated version.
Contact
Privacy questions and rights requests: [email protected]. We respond on business days, normally within the first hour.