Effective date: 30 September 2026
This Privacy Policy explains what information may be processed when you create an exchange order, contacts support or uses xmr-exchange.com. It is written for the XMR Exchange service and should be read together with the AML Policy and Disclaimer.
XMR Exchange is focused on outbound Monero exchanges. The service needs certain order and technical data to create a quote, process an exchange, review support requests and meet operational or compliance requirements.
When an order is created, the service may process the asset you send, payout asset, amount, payout address, payout network, order ID, transaction ID and order status.
For XMR deposits, the order uses a Monero deposit address generated for that specific exchange request. For payouts, the destination address and network are used to send the selected asset to you-provided destination.
When you contacts support, the service may process the email address, message content, order ID, TXID, payout address, exchange information and any files or details voluntarily included in the request.
Do not send seed phrases, private keys, wallet passwords or unrelated identity documents unless a compliance review specifically requires additional information through an approved process.
The website may process technical data needed for security, abuse prevention, diagnostics and site operation. This can include IP address, browser information, device information, timestamps, pages viewed and basic log records.
Cookies or analytics tools should only be used according to the actual site implementation. If additional analytics, advertising or consent tools are added, this policy should be updated to reflect those tools.
Order data is used to create and process an exchange, show order status, calculate order terms, send payouts and handle support questions.
Compliance-related data may be used for risk review, fraud prevention, prohibited activity checks, sanctions screening or manual review when an order triggers risk controls.
Order, support and compliance records are kept only as long as needed for operational, security, legal, accounting or dispute-resolution purposes. Exact retention periods should follow the approved internal process for the service.
If you requests deletion or correction, the request can be reviewed through the privacy contact. Some records may need to be retained where required for compliance, security or transaction history.
Data may be shared with service providers or infrastructure tools only where needed to operate the exchange, secure the website, process support requests or perform risk review.
Blockchain transaction data can be publicly visible on the relevant network depending on the asset and chain. XMR Exchange cannot remove data that has already been recorded on an external blockchain.
For privacy questions or data requests, contact [email protected]. Include enough information to identify the relevant order or support request.
For order-specific help, use the contacts page. For risk review topics, use the compliance contact listed in the AML Policy.
This policy may be updated when the service, data model, tools, processors or compliance process changes. The effective date shows the latest approved version.