PRIVACY POLICY

Information you provide: We do not require you to create an account or provide personal information to use KaraFx. We do not collect names, email addresses, or government-issued ID unless you voluntarily contact us.

Automatically collected information:

• Browser type and version
• Device type and operating system
• IP address (anonymized or not stored beyond session)
• Pages visited and time spent on the interface
• Referring URLs

Blockchain data: When you connect your wallet and execute transactions, your public wallet address and transaction details are recorded permanently on the public blockchain. This information is publicly available and outside our control.

We use the limited information we collect to:

• Operate and improve the KaraFx interface
• Detect and prevent fraud, abuse, and security incidents
• Comply with applicable legal obligations
• Analyze aggregate usage patterns (non-personal, anonymized)

We do NOT use your information to build advertising profiles, sell to third parties, or make automated decisions that affect your rights.

KaraFx uses minimal cookies strictly necessary for the interface to function (e.g., remembering your preferred chain or slippage settings). We do not use advertising cookies, cross-site tracking pixels, or fingerprinting technologies.

We may use privacy-respecting, cookieless analytics (such as aggregated page view counts). No personally identifiable data is collected through analytics.

KaraFx integrates with the following third-party services, which have their own privacy policies:

• Alchemy — RPC provider for blockchain access
• WalletConnect — Wallet connection protocol
• Binance API — Public market data (no account required)
• DeFiLlama — Public DeFi analytics data

When you interact with these services, their privacy policies apply. We recommend reviewing them at their respective websites.

We retain server logs for a maximum of 30 days for security and debugging purposes, after which they are deleted. We do not maintain long-term records of user activity beyond aggregate, anonymized analytics.

Under Canadian privacy law (PIPEDA and Alberta's Personal Information Protection Act), you have the right to:

• Know what personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent to data collection (where applicable)
• Request deletion of your personal information (subject to legal retention requirements)

To exercise these rights, contact us at privacy@karafx.exchange. We will respond within 30 days.

We implement reasonable technical and organizational measures to protect information against unauthorized access, disclosure, alteration, or destruction. However, no internet transmission is completely secure. You are responsible for maintaining the security of your own wallet and private keys.

KaraFx is not directed at persons under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us personal information, contact us immediately.

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last Updated" date. Your continued use of KaraFx after changes constitutes your acceptance of the updated policy.

For privacy-related inquiries:

Privacy Officer — 1817168 AB Ltd
Alberta, Canada
Email: privacy@karafx.exchange