Privacy Policy

Identity and verification data: your name, date of birth, nationality, government-issued ID, address and, where required, a photograph or short video for liveness checks.

Account and transaction data: your account balance, gold holdings, deposits, withdrawals, buy and sell instructions, fees and statements.

Technical data: IP address, device identifiers, browser type, log files and analytics events.

Communications: messages you send to our support team and records of our calls with you.

To open and operate your account, execute your instructions and settle your transactions.

To meet our legal and regulatory obligations, including anti-money-laundering, counter-terrorist-financing and tax-reporting requirements.

To prevent fraud, detect security incidents and protect the integrity of the platform.

To improve our services, develop new features and communicate with you about your account.

We process your data on the basis of contract performance, legal obligation, our legitimate interests in operating a secure and compliant platform, and, where required, your consent.

We share data with trusted service providers who help us run the platform, including identity-verification providers, custodians, payment institutions, cloud-hosting providers and professional advisors.

We also share data with regulators, law-enforcement agencies and tax authorities where we are legally required to do so.

We do not sell your personal data.

USGCX operates internationally. Where your data is transferred outside your country of residence, we rely on appropriate safeguards such as standard contractual clauses and equivalent protections.

We retain your personal data for as long as your account is active and for a further period required by law (typically a minimum of five years from the closure of your account) for tax, regulatory and audit purposes.

Depending on your jurisdiction, you have the right to access, correct, delete, restrict or port your personal data, and to object to certain processing. You also have the right to lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact privacy@usgcx.com.

We use encryption in transit and at rest, hardware security modules for sensitive credentials, strict access controls and continuous monitoring. No system is perfectly secure; please use a strong password and enable two-factor authentication.

Questions about this Privacy Policy can be sent to privacy@usgcx.com.