Privacy Policy

Effective date: 1 January 2026

Data We Collect

Bobabrewery collects the information needed to run a compliant cryptocurrency exchange: full name, email address, government-issued ID for KYC, wallet addresses, and trading history.

Device and browser data — IP address, browser type, session timestamps — are logged automatically when you access the platform. This data supports fraud detection and platform stability.

How We Use Your Data

Your data is used to verify your identity, process trades and withdrawals, detect suspicious activity, and communicate account updates. Bobabrewery does not sell your personal data to third parties for marketing purposes.

Cookies

Bobabrewery uses session cookies to keep you logged in and functional cookies to remember your chart preferences and trading layout. These cannot be disabled without affecting platform functionality.

Analytics cookies — used to measure page load times and feature usage — can be opted out of via the cookie settings panel in your account dashboard. Opting out does not affect trading functionality.

Data Sharing

We share data with KYC verification providers, payment processors, and regulatory authorities when legally required. All third-party processors are contractually bound to handle your data under terms no less protective than this policy.

Security Measures

All personal and financial data is encrypted at rest using AES-256 and in transit using TLS 1.3. Access to production databases is restricted to a named list of 6 engineers with logged audit trails.

Bobabrewery undergoes annual third-party security audits. The most recent audit completed in March 2026 found no critical vulnerabilities in user data handling.

Your Rights

You have the right to access, correct, or delete your personal data at any time. Submit a request to info@bobabrewery.com and expect a response within 5 business days. info@bobabrewery.com Deletion requests are completed within 30 days.

Third-Party Links

The platform links to external services including TradingView and blockchain explorers. Bobabrewery has no control over those sites' privacy practices and recommends reviewing their policies independently.

Data Retention

Transaction records are retained for 7 years to meet financial compliance requirements. Personal account data is deleted within 60 days of a verified account closure request, except where retention is legally mandated.

Policy Updates

Changes to this Privacy Policy will be posted on this page with an updated effective date. If changes are material, registered users will receive an email notification at least 14 days in advance.