Privacy Policy

This Privacy Policy describes how personal information may be collected, used, disclosed, protected, retained and deleted when you use the GroveXC mobile application and related GroveX services.

Information we may collect

• Account identifiers, UID, email address and telephone information
• Identity verification and KYC information
• Country, residency and jurisdiction information
• IP address and security-related network information
• Wallet, deposit, withdrawal, order, trading and transaction information
• Device, authentication, security and notification information
• Application usage, diagnostic and customer-support information
• Documents, images or camera information used for identity verification

How we use information

• Provide and maintain GroveXC accounts and supported services
• Authenticate users and protect accounts
• Provide eligible wallet, trading, deposit, withdrawal, staking and reward services
• Perform KYC, AML, sanctions and fraud-prevention checks
• Meet security, legal and regulatory obligations
• Provide customer support and service communications
• Detect suspicious or unauthorised activity
• Maintain and improve GroveXC reliability and functionality

Sharing of information

Information may be shared where necessary with service providers involved in identity verification, KYC and AML screening, hosting, infrastructure, security, communications, customer support and technical operations.

Information may also be disclosed when required by applicable law, regulation, legal process or lawful government request, or where necessary to protect users, GroveX or the integrity and security of the service.

Security

GroveXC uses technical and organisational measures intended to protect personal and sensitive information. These may include encrypted communications, authentication controls, access restrictions, monitoring and account-security controls.

Data retention

Personal information is retained only as long as reasonably necessary for the purposes described in this policy and to satisfy applicable legal, regulatory, security, fraud-prevention, accounting and compliance obligations.

Certain identity-verification, KYC, AML, transaction, deposit, withdrawal, order, trading and security records may need to be retained after an account is closed where required by applicable legal or regulatory requirements.

Account deletion

GroveXC users can request deletion of their account and associated personal data through the GroveXC Account Deletion page.

Personal information eligible for deletion will be deleted or de-identified following completion of the account-deletion process. Information subject to mandatory legal, regulatory, security or fraud-prevention retention requirements may be retained for the applicable required period.

International processing

GroveXC and service providers may process information in countries other than the user's location, subject to applicable legal and contractual requirements.

Age and eligibility

GroveXC services are intended only for users who satisfy the applicable minimum age and service-eligibility requirements in their jurisdiction.

Changes to this policy

This Privacy Policy may be updated to reflect changes to GroveXC services, technology, legal requirements or data-handling practices.

Contact

Privacy and personal-data enquiries may be sent to yg@grovex.com.au.

GroveXC · GroveX Pty Ltd · Last updated 7 September 2026