Pennvest Agency ("Pennvest", "we", "our", or "us") is dedicated to safeguarding your personal data, investment privacy, and financial confidentiality. This Privacy Policy details our practices concerning the collection, utilization, storage, and protection of information across our multi-asset trading platform, copy trading ecosystems, and related services.

---

1. Information We Collect

To provide institutional-grade trading execution, automated portfolio management, and to satisfy international regulatory compliance (including AML and CTF frameworks), we collect the following categories of information:

• Personal Identification Information: Legal full name, date of birth, residential address, nationality, contact telephone number, and official email address.
• Verification & KYC Documentation: High-resolution government-issued identification (passport, national ID, or driver’s license), facial biometric selfies, utility statements for proof of address, and tax residency identifiers.
• Financial & Transactional Data: External wallet addresses (BTC, ETH, USDT, LTC), banking details, deposit and withdrawal histories, trading volume, order logs, and copy-trading subscription allocations.
• Technical & Telemetry Data: IP addresses, browser types, device fingerprints, login session timestamps, and localized geolocation metrics utilized strictly for account security and intrusion prevention.

2. How We Utilize Your Information

We collect and process personal data under lawful bases, including contractual necessity, regulatory compliance, and our legitimate commercial interests:

• Account Administration: Creating, authenticating, and maintaining your trading accounts, balance ledgers, and profile security credentials.
• Order Execution & Copy Trading: Routing buy and sell market orders, calculating real-time profit and loss metrics, and executing automated daily profit distributions for copy-trading subscribers.
• Regulatory Adherence: Complying with statutory Anti-Money Laundering (AML), Counter-Terrorist Financing (CTF), and Know Your Customer (KYC) legal obligations.
• Communications & Alerts: Delivering real-time transactional email notifications (deposits, trade confirmations, withdrawal statuses, and security updates).
• Platform Integrity: Detecting and mitigating malicious login attempts, unauthorized wallet integrations, and illicit financial transactions.

3. Data Security & Encryption Architecture

Security is the foundational pillar of Pennvest Agency. We deploy enterprise-grade technological and organizational measures to prevent unauthorized data access, disclosure, or alteration:

• Cryptographic Encryption: All client data in transit is protected via TLS 1.3 with 256-bit AES encryption. Sensitive database fields at rest are encrypted with salted hashing standards.
• Cold Storage Vaults: Digital asset reserves and client custody funds are partitioned into multi-signature, offline cold storage vaults isolated from internet threats.
• Role-Based Access Control (RBAC): Administrative access to client verification documents is strictly segregated and auditable on a least-privilege protocol.

4. Information Sharing & Third Parties

Data is shared strictly with trusted institutional service providers when necessary to execute services:

• Tier-1 banking clearing houses and verified blockchain payment gateway providers for capital settlements.
• Licensed identity verification and AML watchlist screening vendors.
• Competent legal, regulatory, or judicial authorities only when explicitly compelled by lawful subpoena, statutory warrant, or binding court order.

5. Cookies & Tracking Technologies

Our web application utilizes essential session cookies and technical security tokens to maintain authorized user sessions, prevent Cross-Site Request Forgery (CSRF), and remember interface preferences (e.g., chart layouts). You can adjust your browser cookie settings at any time, though disabling essential session cookies may impair portal functionality.

6. Your Rights & Regulatory Protections

Depending on your jurisdiction (including GDPR, CCPA, and international financial privacy frameworks), you maintain statutory rights regarding your personal information:

• Right to Access: Request a full, machine-readable export of the personal information we hold about you.
• Right to Rectification: Update or correct inaccurate or incomplete biographical details directly through your account settings.
• Right to Restriction / Erasure: Request the deletion of non-statutory data, subject to mandatory financial record retention laws.
• Right to Object: Opt-out of non-essential platform notices and marketing announcements.

7. Retention of Records

In accordance with global financial regulatory mandates, transactional ledgers, trade histories, and identity verification proofs are retained for the legally prescribed statutory period (typically 5 to 7 years following account closure) to prevent fraud and satisfy compliance audits.

8. Contact Our Data Protection Officer

For inquiries regarding this Privacy Policy, data privacy requests, or regulatory audits, contact our Data Protection Office directly: