1. Scope of Privacy Policy

This Privacy Policy describes how the SpaceXStock Investment Portal (the "Portal", "we", or "us") collects, uses, and secures your personal information when you create an account, log in, or interact with the platform.

2. Information We Collect

We collect personal and transactional information to provide secure access and manage investment accounts. This includes:

• Identity Information: Your full name, email address, password hashes, and profile settings.
• KYC Documents: Documents submitted for account verification (e.g., identity cards, utility bills).
• Payment & Billing Data: Submitted payment screenshots, transaction receipts, bank names, bank account numbers and cryptocurrency wallet addresses.
• Activity Logs: IP addresses, login timestamps, device metadata, and access attempts logged in our security audit trail.

3. How We Use Your Information

We use the collected information for the following specific purposes:

• To authenticate users and verify eligibility to trade SPCX shares.
• To manually verify bank wires and cryptocurrency deposits against submitted receipts.
• To log administrative activities, audit role promotions, and maintain platform security.
• To trigger security fraud alerts (e.g. suspicious login attempts, IP address discrepancies).

4. Data Storage and Security

All data, database records, and uploaded payment proof files are stored on secure servers with bank-level encryption. Access is restricted to authorized platform administrators and super admins.

Uploaded screenshots or PDF files containing transfer proofs are saved on private server storage and are only used for review purposes.

5. Cookies and Tracking

We use secure cookies to keep you logged in to your account. These cookies do not track you across third-party websites and are deleted automatically when you log out or when the session expires.

6. Sharing of Personal Data

We do not sell, trade, or share your personal information, KYC files, or payment proofs with third-party advertising companies. Data is only shared with database host providers (such as Neon Postgres) solely to run the platform.