Privacy Policy

Effective [시행일] · Draft (pending legal review)

This document is a draft for legal review. It has no legal effect until reviewed by counsel and finalized, and the bracketed items ([ ]) such as the legal entity name, governing law, contact, and retention period still need to be confirmed and filled in.

1. Information We Collect

Coperral (the "Company") collects the following. Required: email address, exchange UID, and authentication identifiers (including social-login identifiers). Optional: Telegram handle and the USDT wallet address and network you provide to receive payouts. Automatically collected: access logs, device and browser information, IP address, and usage statistics. The Company applies a data-minimization principle and collects only what is needed to operate the Service. The Company does not collect your exchange password, private keys, or trading-account credentials, and does not request access to your funds.

2. Purposes of Collection and Use

The Company uses personal data to: identify and authenticate members and manage accounts; process accrual, settlement, and USDT payouts and provide transaction records; perform anti-money-laundering (AML) and sanctions screening and prevent fraud and abuse; provide customer support and send notices and alerts; and improve the Service and produce aggregated statistics. The Company does not sell personal data. AML, sanctions, and fraud-prevention processing is carried out to meet legal and compliance obligations and to protect the integrity of the Service.

3. Third-Party Sharing and Processors

The Company may share the minimum necessary information with: partner exchanges to verify accrual; screening providers to conduct AML and sanctions checks; and blockchain and payout infrastructure to deliver USDT rebates. For operations the Company uses processors such as [cloud / database / analytics providers], who are required to process data securely and only on the Company's instructions. The Company shares data with authorities only where required by law or to respond to a valid legal request. The Company does not share personal data for third-party marketing without consent.

4. International Transfers

Some processors and infrastructure may be located outside your country of residence, and personal data may be transferred and processed abroad. Where this occurs, the Company applies the safeguards required by applicable law (for example, contractual protections and processing restrictions) to ensure an adequate level of protection. By using the Service you acknowledge that your data may be processed in jurisdictions other than your own.

5. Retention and Deletion

The Company deletes personal data without undue delay once the purpose of collection and use has been achieved. Where applicable law (e-commerce, tax, and AML/CFT rules) requires retention, the Company keeps the relevant data for the period required ([retention period]) and then deletes it. AML records and transaction logs may be retained for the period mandated by applicable financial-regulation and record-keeping laws even after account closure.

6. Your Rights

You may request access to, correction of, deletion of, or restriction of the processing of your personal data, and you may withdraw consent at any time by contacting [contact email]. The Company will respond within the period required by applicable law. Some information may be exempt from deletion where the Company has a legal retention obligation or where the data is needed for settlement, dispute resolution, or AML compliance. You may also lodge a complaint with your competent data-protection authority.

7. Security, Cookies, and Contact

The Company applies technical and administrative safeguards, including access control (row-level security), separation of privileges, encryption in transit and at rest, and data minimization. The Company uses cookies and similar technologies to maintain sessions and analyze usage; you may refuse them in your browser settings, though some features may then be limited. Data Protection Officer / contact: [name, title, contact]. Operating entity: [legal entity name and registration details]. Effective date: [effective date].

Coperral is an independent affiliate partner of the exchanges, not an exchange itself. Payback is a marketing cashback, not a deposit, interest, or investment service. Leveraged trading carries the risk of losing your principal.