1. Introduction
This Policy sets out the rules and procedures that apply to the collection, storage, use, and transmission of personal data by SIVA LLC ("SIVA", "we", "us"). It applies to all users of the platform and services.
2. Data Controller
SIVA LLC is the party responsible for processing personal data collected through the platform. Contact: info@sivasiva.io, United States.
3. Guiding Principles
We process personal data under the following principles:
- Lawfulness — processing complies with applicable law.
- Purpose — data is collected for specific, legitimate purposes.
- Choice — the user is informed and, where required, consents.
- Accuracy — data is kept complete and up to date.
- Transparency — users may obtain information about their data.
- Security — appropriate safeguards protect the data.
- Confidentiality — data is handled with strict confidentiality.
4. Purposes of Processing
Personal data is collected and used to:
- Verify user identity through KYC procedures.
- Enable virtual asset on-ramp, off-ramp, and exchange operations.
- Manage requests, support, and complaints.
- Comply with legal, regulatory, and AML / KYC obligations.
- Send service-related communications.
- Perform statistical analysis and improve the service.
- Maintain the security and integrity of operations.
5. Sensitive Data
Where any sensitive data is requested, providing it is optional and the user may decline without losing access to essential services, except where its collection is required by law or regulation (for example, identity verification obligations).
6. Your Rights
Subject to applicable law, users may:
- Access the personal data we hold about them.
- Request correction or updating of inaccurate data.
- Request proof of the consent given, where applicable.
- Request deletion, subject to legal retention requirements.
- Object to or restrict certain processing.
- File a complaint with the competent authority.
7. How to Exercise Your Rights
Requests may be sent to info@sivasiva.io with proof of identity and a clear description of the request. Our compliance / data protection team will address requests within the timeframes required by applicable law.
8. International Transfers
Where personal data is shared with third-party service providers, we require adequate protection guarantees, appropriate contractual safeguards, and, where required, the user's prior consent.
9. Information Security
SIVA LLC implements technical, administrative, and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or misuse.
10. Data Retention
Personal data is retained for the duration of the contractual relationship and for as long as required by applicable law and regulation. After that, data is securely deleted or anonymized.
11. Changes to this Policy
SIVA LLC may update or modify this Policy at any time. Changes take effect once published on the platform.
12. Governing Law and Authority
This Policy is governed by applicable U.S. federal and state privacy law. Questions or complaints may be addressed to info@sivasiva.io.