Privacy Policy

Last updated: 3 May 2026

This Privacy Policy explains how Qredax ("we") collects, uses, and discloses your personal information when you visit qredax.com or send us a claim evaluation request.

1. Information we collect

When you submit a claim evaluation request through our website, we collect:

• Name - your legal name as registered with the FTX claims agent
• Email address - for communication regarding your claim
• Unique Customer Code - your Kroll-issued identifier for the FTX claim
• Approximate claim value - for offer calculation
• Country of residence - so we can account for the rules where you live

If we proceed to a transaction, we additionally collect:

• Government-issued identification (passport scan or equivalent) - Federal Rule of Bankruptcy Procedure 3001(e) requires it before we can file a Sale and Assignment of Claim with Kroll
• Cryptocurrency wallet address - for payment delivery
• Signed Sale and Assignment of Claim agreement - for legal title transfer

We also automatically collect technical data when you visit our website:

• IP address (anonymized, retained 30 days)
• Browser type and version
• Referring URL and exit page
• Pages viewed and time spent

2. How we use information

We use collected information solely to:

• Evaluate your claim and prepare a firm price
• Execute the Sale and Assignment of Claim ("SAC") agreement
• File the SAC with the FTX claims agent (Kroll) on the public bankruptcy docket
• Process payment to the wallet address you provide
• Communicate with you about the transaction
• Meet the legal and regulatory requirements that apply to us
• Improve our website and services

3. Information sharing

We share personal information only with:

• Kroll Restructuring Administration LLC - the FTX claims agent. SAC filings include claimant name and Unique Customer Code as required by Federal Rule of Bankruptcy Procedure 3001(e). Anyone can read these filings: they go on the public FTX bankruptcy docket.
• Legal counsel - for SAC drafting and review (subject to attorney-client privilege)
• Compliance and sanctions screening providers - for OFAC and similar regulatory checks
• Government and regulatory authorities - only when required by law or court order

We also rely on the following third-party service providers ("data processors") to operate the website and process requests. Submitting a form, using the chat assistant, or browsing the site may transfer data to them:

• Cloudflare, Inc. (USA) - website hosting, CDN, and database (Cloudflare D1). Receives IP address and technical request logs.
• Telegram FZ-LLC (UAE) - internal notification of new claim requests and of every message sent through the AI chat. Receives form data (name, email, customer code, message) and, for the chat, your email address, interface language and the text of each message.
• Formspree, Inc. (USA) - backup processing of form submissions. Receives form data (name, email, message).
• OpenRouter, Inc. and Anthropic, PBC (USA) - power the website AI chat assistant. Receive chat messages and, if provided, your email address. See Section 8.

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not share your information with other claim buyers, brokers, or competitors.

4. Data retention

We keep personal information only as long as we need it, so we can:

• Finish the transaction and everything tied to it (usually 7 years, because tax and audit rules say so)
• Sort out any dispute that comes out of the transaction
• Meet our legal obligations (the period differs by country; up to 10 years for AML records)

Once that period runs out, we delete the personal information or strip it of anything identifying.

5. Your rights

If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) applies to our processing of your personal information. The data controller is Qredax. Our legal bases for processing are: performance of a contract (evaluating and executing a claim sale), compliance with legal obligations (AML, sanctions, tax records), consent (analytics cookies and session recording - see Section 8), and legitimate interest (operating and securing the website). You may lodge a complaint with your local data protection authority.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access - request a copy of personal information we hold about you
• Rectification - request correction of inaccurate or incomplete information
• Erasure - ask us to delete your information (except what the law says we must keep)
• Restriction - request that we restrict processing of your information
• Data portability - receive your information in a machine-readable format
• Objection - object to certain types of processing
• Withdraw consent - for processing that relies on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

6. Data security

We protect personal information with reasonable technical and organizational measures:

• TLS 1.3 encryption for all data in transit
• Encrypted storage for sensitive documents (passport scans, signed agreements)
• Only staff who need personal data for their work can reach it
• Regular security reviews and updates

No system is perfectly secure. If you believe your information has been compromised, contact us immediately at [email protected].

7. International transfers

We process information in countries that may not be the one you live in. When you send a claim evaluation request, you agree to that transfer. Where it applies, we use standard contractual clauses and safeguards of equal strength.

8. Cookies, analytics, and AI chat

Our website uses essential cookies for functionality (language preference, form session). We do not use advertising cookies and do not sell data to advertisers.

Claim prefill. If you look up a claim in our calculator, we store that Customer Code and its estimated value in your browser's local storage for 30 days, so the request form comes back pre-filled on your next visit. This data stays on your device and is not sent to us unless you submit the form. You can remove it at any time by clearing your browser storage.

Analytics. With your consent, we use two analytics services:

• Google Analytics 4 (Google LLC, USA) - measures traffic and visitor behaviour. Loaded only after you click "Accept All" in the cookie banner. IP anonymization is enabled.
• Yandex Metrika (Yandex LLC) - measures traffic and behaviour. It includes Webvisor, which records anonymized session activity (clicks, scrolls, and form interaction). Loaded only after you click "Accept All".

If you click "Reject All", neither analytics service is loaded. You can change your choice by clearing your browser's site data.

AI chat assistant. The website chat runs on an AI model that we reach through OpenRouter, Inc. and Anthropic, PBC (both USA). Messages you send - and your email address if you provide it - are transmitted to these providers for processing. Your conversation history is stored locally in your browser (localStorage) until you clear it. Do not enter passwords, full identification documents, or other highly sensitive data into the chat.

9. Children's privacy

Our services are not for anyone under 18. We do not knowingly collect personal information from minors. If you think we picked up a minor's information by accident, write to us at [email protected].

10. Changes to this policy

We update this Privacy Policy from time to time. The "Last updated" date at the top of this page tells you which version you are reading. We announce material changes on the website before they take effect.

11. Contact

If you have a privacy question, or you want to use any of your rights:

Email: [email protected]

This Privacy Policy is governed by the laws of the jurisdiction in which Qredax is registered.