Privacy Policy
Last updated: August 2026
This Privacy Policy describes how CryptoCash, operated by Aura Solutions (CNPJ 65.946.272/0001-24) ("we", "us"), collects, uses, stores and protects your personal data, in compliance with the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018).
1. What data we collect
| Category | Examples | When we collect it |
|---|---|---|
| Identification data | Full name, CPF (Brazilian individual taxpayer number), date of birth, photo ID | During the KYC process, before the first transaction |
| Contact data | Phone/WhatsApp, e-mail, Telegram username | When you contact us |
| Financial data | Bank details of the account used for payment, transfer receipts | During transactions |
| Transaction data | Wallet addresses, transaction history, amounts and dates | During transactions |
| Browsing data | IP address, device type, pages visited, cookies and analytics identifiers | When you visit the website |
2. How we use your data
- Execution of transactions: processing your crypto asset purchases and sales (legal basis: performance of a contract);
- Compliance with legal obligations: KYC/AML procedures, record keeping and reporting to authorities when required by law (legal basis: legal obligation);
- Customer support: answering your questions and requests through our channels (legal basis: performance of a contract and legitimate interest);
- Website improvement and marketing: traffic analysis, campaign measurement and communications about our services (legal basis: legitimate interest and/or consent, as applicable);
- Fraud prevention: protecting our clients and our operation (legal basis: legitimate interest and credit protection).
3. Cookies and analytics tools
Our website uses third-party cookies and similar technologies for traffic analysis and advertising campaign measurement, including:
- Google Analytics: website usage statistics;
- Meta Pixel: campaign measurement on Facebook and Instagram;
- TikTok Pixel: campaign measurement on TikTok.
These tools may collect identifiers from your browser and browsing data. You can manage or block cookies in your browser settings. Blocking cookies does not prevent you from using the website, but it may affect measurement features.
4. Who we share your data with
We do not sell your personal data. We share data only when necessary, with:
- Public authorities and regulatory bodies (e.g., COAF, Brazil's financial intelligence unit, and the Receita Federal do Brasil, the Brazilian Federal Revenue Service), when required by law;
- Service providers essential to our operation (e.g., hosting providers, analytics tools), which act as processors under our instructions;
- Legal and accounting advisors, bound by a duty of confidentiality.
Some providers (e.g., Google, Meta, TikTok, hosting providers) may process data outside Brazil. In such cases, the international transfer complies with the requirements of the LGPD.
5. How long we keep your data
- Identification and transaction data: kept for at least 5 (five) years after the end of the relationship, in accordance with Brazilian AML and tax law requirements, and may be kept longer where there is a legal obligation or for the regular exercise of rights;
- Browsing data and cookies: retention periods defined by the settings of the analytics tools and by your browser.
6. Data security
We adopt technical and organizational measures to protect your data, including encrypted communication (HTTPS), access controls and restricted storage. No system is 100% secure; in the event of a security incident posing a relevant risk, we will notify you and the ANPD (Brazil's National Data Protection Authority) as required by the LGPD.
7. Your rights as a data subject
Under Article 18 of the LGPD, you may request at any time:
- Confirmation of the existence of processing and access to your data;
- Correction of incomplete, inaccurate or outdated data;
- Anonymization, blocking or deletion of unnecessary data or data processed in non-compliance with the law;
- Data portability, as provided by regulation;
- Information about data sharing carried out;
- Withdrawal of consent, where processing is based on it.
Please note: data whose retention is required by law (e.g., transaction records for AML purposes) cannot be deleted before the legal retention period expires, even upon request.
8. How to exercise your rights
Send your request to intermediacao@aurasolutions.biz with the subject line "LGPD: Data Subject Rights". We will respond within the timeframes set by the applicable regulations. For your security, we may request proof of identity before fulfilling the request.
9. Children and adolescents
Our services are intended exclusively for persons over 18 years of age. We do not knowingly collect data from minors.
10. Changes to this Policy
This Policy may be updated at any time. The current version will always be available on this page, with the date of the last update. Significant changes will be highlighted through our channels.
11. Data Protection Officer (DPO) and contact
For matters related to this Policy and the processing of personal data, contact: intermediacao@aurasolutions.biz.