Last updated: 25 September 2026

GPT Token ("GPT Token", "we", "us", or "our") operates the website gpt-token.app and the application at buy.gpt-token.app (together, the "Platform"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices you have.

By using the Platform, creating an account, or submitting identity verification documents, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account information: name, email address, password (stored encrypted), and account activity.

Identity verification (KYC) information: to comply with anti-money-laundering (AML) and know-your-customer (KYC) obligations, we collect your first and last name, date of birth, gender, phone number, country, state, city, postal address, a government-issued identification document (passport, national ID card, or driver's license), and a photograph of you holding that document.

Transaction information: the cryptocurrency wallet address you send funds from, the wallet address you provide to receive tokens, the amount and currency of each contribution, and transaction status.

Technical information: IP address, browser type, device information, and standard log data collected automatically when you use the Platform.

2. How We Use Your Information

• To create and manage your account and process token purchases.
• To verify your identity and screen for prohibited jurisdictions or sanctioned individuals, as required by law.
• To send account-related emails (confirmations, password resets, KYC status updates, and important notices about the token sale).
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with legal obligations, including record-keeping requirements related to financial transactions.

We do not sell your personal information to third parties.

3. How We Share Information

We share information only where necessary to operate the Platform:

• Service providers: our email delivery provider (for transactional emails), our hosting provider, and, where applicable, payment processors, each of whom is contractually bound to protect your information and use it only to provide services to us.
• Legal and compliance: we may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of GPT Token, our users, or others.
• Business transfers: if GPT Token is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

4. Data Retention

We retain account and KYC information for as long as your account is active and for a reasonable period afterward as required to meet our legal, accounting, and regulatory obligations, resolve disputes, and enforce our agreements. Identity verification documents are stored securely and access is restricted to authorized personnel only.

5. Data Security

We use industry-standard technical and organizational measures — including encrypted connections (HTTPS), access controls, and restricted storage for identity documents — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, contact us using the details below. Note that some information (particularly KYC records) may need to be retained even after a deletion request in order to comply with our legal obligations.

7. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used. You can control cookies through your browser settings; disabling them may affect some features of the Platform.

8. International Data Transfers

Your information may be processed and stored in countries other than your own. Where required, we take steps to ensure such transfers comply with applicable data protection laws.

9. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have done so, we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at support@gpt-token.app.