Privacy Policy

This Privacy Policy applies to data collected when the User:

• visits the CarryLane website
• creates or uses an account
• accesses the account dashboard
• deposits or withdraws funds
• activates an automated trading strategy
• contacts support
• subscribes to communications
• completes account recovery or additional identity verification
• interacts with Platform security features
• participates in promotions, referral programs or Platform activities.

This Policy should be read together with the Terms of Use, User Agreement, Risk Disclosure, AML/KYC Policy, Refund Policy, the "Cookies and Tracking Technologies" section of this Policy, and other legal documents published on the Platform.

CarryLane may collect different types of data depending on how the User uses the Platform.

2.1 Account Data

When an account is created, we may collect:

• email address
• password or encrypted password hash
• account identifier
• registration date
• account status
• security settings
• notification preferences.

2.2 Profile and Contact Data

Where applicable, we may collect:

• name
• username
• country or region
• telephone number
• contact preferences
• preferred language
• support request history.

2.3 Identity Verification and Recovery Data

KYC is not mandatory by default, but it may be required for account recovery, security checks, legal compliance or risk management.

If identity verification or recovery is required, we may collect:

• full name
• date of birth
• country of residence
• government-issued identity document
• selfie or liveness check
• proof of address
• source-of-funds information
• proof of account ownership
• recovery-phrase verification data
• additional documents needed for the review.

CarryLane never asks Users to provide their full 12-word recovery phrase through support channels.

2.4 Transaction and Wallet Data

When deposit, withdrawal, balance or strategy features are used, we may collect:

• deposit and withdrawal records
• transaction identifiers or blockchain hashes
• wallet addresses
• selected blockchain network
• type of cryptocurrency
• transaction amount
• transaction status
• internal balance movements
• strategy activation records
• profit credit records
• withdrawal address allowlist data.

2.5 Strategy and Platform Activity Data

We may collect data related to Platform use, including:

• activated strategies
• investment amounts
• strategy status
• strategy activation and completion times
• reinvestment or term extension settings
• profit history
• account dashboard actions
• reward history
• referral activity
• partner rank and turnover data
• use of Platform features.

2.6 Security and Device Data

To protect accounts and the integrity of the Platform, we may collect:

• IP address
• device type
• browser type
• operating system
• device identifiers
• login timestamps
• session data
• location signals based on IP address
• failed login attempts
• authentication events
• indicators of suspicious activity
• device fingerprint data
• security logs.

2.7 Communications and Support Data

When the User contacts CarryLane, we may collect:

• messages sent to support
• email correspondence
• support request details
• screenshots or attachments provided by the User
• descriptions of issues
• response history
• feedback and ratings.

2.8 Marketing Data and Website Analytics

When the User visits the website or interacts with communications, we may collect:

• pages visited
• referral source
• campaign source
• click activity
• browsing behavior
• approximate location
• device and usage analytics
• email opening or click data, where permitted.

These data may be collected using cookies, pixels, analytics tools or similar technologies.

CarryLane may use collected data to:

• create and manage User accounts
• provide access to the Platform
• process deposits and withdrawals
• activate and manage automated trading strategies
• credit profits and rewards
• calculate referral rewards and partner ranks
• provide analytics in the account dashboard
• respond to support requests
• assist with account recovery
• protect accounts against unauthorized access
• detect suspicious or fraudulent activity
• perform AML, fraud, security and risk checks
• enforce the Terms of Use and Platform rules
• improve Platform functionality and User experience
• send service, security and account notifications
• send marketing communications where permitted
• comply with legal, regulatory and operational obligations.

Where applicable law requires a legal basis for processing personal data, CarryLane may process data on the basis of:

• contractual necessity — to provide the Platform and services requested by the User
• legitimate interests — to secure the Platform, prevent fraud, improve services, operate rewards and referral systems, and maintain business operations
• legal obligations — to meet AML, sanctions, tax, accounting and regulatory requirements or law-enforcement requests
• consent — where required for marketing communications, cookies, additional identity verification or particular processing activities
• protection of vital or public interests — in applicable exceptional cases.

CarryLane may process personal data to protect Users and the Platform.

This includes:

• detecting unauthorized access
• monitoring suspicious behavior
• reviewing unusual deposits or withdrawals
• preventing referral program abuse
• preventing manipulation of rewards
• detecting abuse involving multiple accounts
• operating withdrawal address allowlist and payment-password controls
• supporting 2FA and recovery procedures
• investigating security incidents.

Security checks may be automated, manual or a combination of both.

Although KYC is not mandatory by default, CarryLane may request identity verification or additional information in specific circumstances, including:

• account recovery
• suspicious activity
• withdrawal review
• large transactions
• suspected fraud
• AML review
• a regulator's request
• sanctions screening
• verification of account ownership.

Data collected for identity verification, AML or compliance may be used to establish identity, prevent abuse, protect Users and fulfill applicable obligations.

For more information, please read the CarryLane AML/KYC Policy.

CarryLane does not sell Users' personal data to third parties.

We may share data only where necessary with:

• infrastructure and hosting providers
• payment processors
• blockchain analytics providers
• wallet infrastructure providers
• identity verification and compliance providers
• fraud prevention services
• customer support tools
• analytics providers
• email and notification providers
• legal advisers
• auditors
• regulators, courts or law-enforcement agencies where required
• business partners or service providers acting on our behalf.

Service providers are expected to process data only for authorized purposes and to apply appropriate security measures.

CarryLane may use or integrate third-party services, including blockchain networks, payment processors, wallet providers, exchange APIs, analytics tools, identity verification providers, hosting services and communications platforms.

Third-party services may collect and process data in accordance with their own privacy policies.

CarryLane is not responsible for the data practices of third-party websites, wallets, networks or services that CarryLane does not control.

CarryLane may process, store or transfer data in countries other than the User's country of residence.

When personal data is transferred internationally, CarryLane aims to apply appropriate safeguards where required by applicable law.

By using CarryLane, the User understands that their data may be processed in jurisdictions whose data-protection laws differ from those of their own location.

CarryLane retains personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• account status
• legal or regulatory requirements
• AML and compliance obligations
• tax and accounting obligations
• security and fraud-prevention needs
• dispute resolution
• Platform recordkeeping
• support request history
• transaction history
• enforcement of legal documents.

Some data may be retained after account closure where required by law, compliance obligations, fraud-prevention purposes or legitimate business interests.

CarryLane applies reasonable technical, administrative and organizational safeguards designed to protect personal data.

Security measures may include:

• encryption
• secure communication protocols
• access controls
• password hashing
• monitoring and logging
• restricted internal access
• security reviews
• account protection tools
• infrastructure controls.

Nevertheless, no digital Platform, blockchain service or internet-based system can guarantee complete security.

Users are responsible for protecting their own credentials, devices, email access, security settings and recovery data.

CarryLane may use cookies, pixels, local storage and similar technologies to:

• enable website functions
• remember preferences
• maintain sessions
• improve performance
• analyze website usage
• support security features
• personalize content
• measure marketing effectiveness.

Users may manage cookies through browser settings where available.

For more information, please see the "Cookies and Tracking Technologies" section of this Policy.

CarryLane may send marketing communications, Platform updates, promotion information, news or educational content where permitted by law.

Users may unsubscribe from marketing emails using the unsubscribe link or by changing notification preferences where available.

Even after opting out of marketing messages, CarryLane may continue to send important service, legal, transactional or security-related messages.

Depending on their jurisdiction, Users may have certain rights concerning their personal data, including:

• access to their personal data
• correction of inaccurate data
• deletion of certain data
• restriction of processing
• objection to processing
• data portability
• withdrawal of consent
• filing a complaint with a data-protection authority.

These rights may be limited by legal, AML, security, fraud-prevention, accounting or operational requirements.

To exercise their rights, Users should contact CarryLane support using the contact details below.

The CarryLane Platform is not intended for persons under 18 or below the age of majority in their jurisdiction.

We do not knowingly collect personal data from minors.

If we discover that a minor has provided personal data or created an account, we may delete the data and restrict access to the account.

Users may request account closure by contacting CarryLane support.

After account closure, CarryLane may retain certain data where required or permitted for:

• legal compliance
• AML and fraud prevention
• transaction recordkeeping
• tax and accounting obligations
• dispute resolution
• security investigations
• enforcement of the Terms of Use
• legitimate business purposes.

Deletion requests may not apply to data that must be retained under applicable law or operational requirements.

CarryLane may update this Privacy Policy from time to time to reflect changes in Platform services, legal requirements, security practices, data-processing activities or business operations.

The updated version will be posted on the Platform with a new date in the "Last updated" field.

Continuing to use CarryLane after changes have been made means that the User accepts the amended Privacy Policy.

If Users have questions about this Privacy Policy or wish to exercise their privacy rights, they should contact:

CarryLane Support

Email: [email protected]

Website: carrylane.net