Privacy Policy

Last updated: 7 May 2026

Updates.This privacy policy is in force as of 7 May 2026. Material changes will be communicated by email and reflected on this page. For data-handling questions, contact privacy@hashlock.markets.

Who we are

Hashlock Markets is operated by Hashlock Corp (“we”, “us”), a Delaware C-Corporation (registration #10561489). The platform serves institutional and AI-agent users worldwide via hashlock.markets.

What we collect

  • Account data — email, password hash, optional KYC attributes provided during identity verification.
  • Wallet data — public blockchain addresses you connect (Ethereum, Bitcoin, SUI). We do not custody, store, or have access to private keys.
  • Trade and platform data — RFQs, quotes, settlement transactions, and on-chain identifiers associated with your activity.
  • Technical data — IP address (anonymised before storage), user-agent, timestamps, and similar request metadata in operational logs.
  • Analytics data — page views, navigation paths, device class, and approximate region. Set only with your consent. See the Cookies Policy for the full list.

Why we collect it

  • To provide and operate the exchange (contract performance).
  • To meet legal and regulatory obligations including KYC/AML.
  • To prevent fraud, abuse, and protect the integrity of trades.
  • To improve the platform via aggregated analytics (with consent).

Third-party processors

We use a small set of trusted vendors to operate the platform. Each handles only the data needed for their function:

  • Google Analytics 4— usage analytics. Loaded only after you grant analytics consent. IP anonymisation is enabled. EU/UK traffic is handled under Google’s EU SCCs.
  • Identity verification provider — KYC/AML attribute verification when you elevate above the AGENT_SANDBOX tier (see Account Tiers in our Terms of Service). The provider receives only what is necessary for the check.
  • Infrastructure — cloud hosting, monitoring, error tracking. These vendors process request metadata and operational logs.

Your rights

If you are in the EU, UK, or another jurisdiction with comparable rules, you can request access, correction, deletion, restriction, portability, or object to processing. To do so, email privacy@hashlock.markets. You can withdraw consent for analytics any time on the privacy settings page.

Retention

Account and trade data are retained for as long as required by applicable financial regulations (typically 5 years after account closure). Analytics data is retained for 14 months. Operational logs are retained for 30 days.

Contact

Privacy inquiries: privacy@hashlock.markets.