Legal
Privacy Policy
What GCX Exchange collects, why, how long it keeps it, and who else sees it.
Last updated: August 26, 2026
1. Who processes your data
GCX Exchange operates the platform at https://gcx-exchange.com/ and decides what is collected there and why. Questions about this policy, and any request concerning your own data, go to support@gcx-exchange.com.
This policy describes what the platform actually holds. It does not promise anything the platform does not do.
2. What we collect
Your account. First name, last name, email address and phone number, which you give when you register, and your password. The password is stored only as an irreversible hash: we cannot read it or recover it. If your account belongs to a company, we also hold the company name and the fact that the account is a company account rather than a personal one.
Systems you connect. If you link an external system to your account, we store the name you give it, the identifier you supply and any details sent with it. Revoking a link does not delete the record: the history of connections is what settles a later argument about who placed an order.
Orders. Product, side, price, currency, quantity, unit, shipment week, the delivery points you accept, the delivery basis under Incoterms and, where the basis requires one, the mode of transport, whether you allow a partial fill and the smallest size you accept for one, the quantity filled and when, and the state of the order, including whether it matched, was withdrawn or expired.
Trades. The trade record itself, including the delivery basis and mode of transport carried onto it at the match, and which two accounts stand on its sides, the confirmations, the paperwork proposed and agreed, the deposit held from each side and what became of it, the fee charged, and the exchange rate applied to a trade priced in another currency.
Documents. The files you and your counterparty exchange on a trade, together with the original file name, size, type and checksum, who uploaded each file and when, and the rounds of submission, acceptance and return.
Money on the platform. Your platform account, its balance and the part of it held against open trades, and every entry of the ledger — top-ups credited, fees charged, deposits forfeited, corrections made by the operator. For a top-up we also store our payment number, the identifier the cashier gives it, the amount, its status and the cashier's notification in full, which is the only evidence available if a payment is later disputed.
Notifications. Everything the platform told you — in the notification centre and, where the message needs a move from you or moves your money, by email.
Technical records. The web server and the application write operational logs, which can contain your IP address, the time of a request and what it asked for. They exist to find faults and to investigate abuse.
We do not collect passport or identity-document data, we do not ask for bank card details, and we run no advertising or analytics trackers.
3. Why we may process it
- To perform the agreement with you — to keep your account, match your orders, record the resulting trade, charge the fee, hold and release the deposit, and pass your documents to the other side of the trade.
- To meet legal obligations — accounting and tax records of the payments the exchange receives.
- Our legitimate interest — keeping the platform secure, preventing fraud and abuse, and holding evidence of what was agreed, since a trade is a binding obligation between you and your counterparty.
4. Your documents
The files you attach to a trade are shown to the two parties of that trade and to nobody else. No administrator can reach them through the platform: the administrative interface has no list of documents and no way to download one, and a request for a document from anyone who is not a party to that trade is refused. This is a deliberate decision of the operator, and you are entitled to know it before you upload a contract.
The consequence is equally deliberate: the exchange does not read your documents, does not verify them and does not judge their contents. A dispute about what a document says is between you and your counterparty.
Files are stored outside the web root and are served only after an access check, never from a guessable link. The name you uploaded a file under never becomes part of its path on disk.
5. How long we keep things
Document files: one year after the trade closes. A trade is closed once no deposit is held on it any longer — whether it ended with the documents accepted or with a deposit forfeited. A year after that, the files are deleted from disk. The record of the correspondence — which round was submitted, accepted or returned, by whom and when — is kept: it is the evidence if the trade is disputed later.
Notifications: 90 days once read. Notifications you have read are removed 90 days after the event they reported. Unread notifications are not removed at all, however old: an unread warning that a deadline was about to run out is the only proof that you were warned.
Orders, trades, deposits, fees and payments are kept. They are the record of binding obligations and of money that moved, and they remain after a trade ends and after an account is closed.
Your sign-in cookie expires by itself and you sign in again. The access token behind it is removed when you sign out, not by the passage of time. See the section on cookies below.
6. Who else sees your data
Your counterparty. Once your orders match, the other side sees the trade and everything you put into it: the delivery basis and mode of transport carried onto it and the documents you attach with their comments. It does not see your name, email address, phone number or company details — the platform identifies each of you only as the buyer or the seller, before the match and after it. Whatever else your counterparty learns about you, you tell them yourself, in the documents you exchange.
Platform administrators. Through the administrative interface they can see your account details — name, email address, phone number, company — and your platform account with its statement, because a payment cannot be corrected without them. That interface has no list of your orders, your trades or your documents.
Brevo delivers our email. It receives the address we send to and the contents of the message.
The payment cashier (currently RollyPay, or another provider we connect) handles top-ups. We send it our payment number, the amount, the currency and a description of the payment — not your name, email address or phone number. Card details are entered on the cashier's own pages and never reach us: we never receive them and never store them. The cashier processes what you enter there under its own privacy terms.
The Bank of Russia publishes the daily fixing we use to convert trades priced in another currency, and GeoNames supplies the list of places used for delivery points. We take data from both; no personal data goes to either.
We do not sell your data and do not pass it to anyone for advertising. We disclose it otherwise only where the law requires it.
7. Your rights
You can see most of what we hold about you without asking: your profile, your orders, your trades and their documents, your account statement and your notification history are all in the terminal.
For anything else — a copy of your data, a correction, or deletion — write to support@gcx-exchange.com. There is no self-service form for changing your name, email address or phone number, or for closing an account: these are done by the operator on request.
Two limits are worth stating plainly. We cannot delete what a trade record consists of while the obligation or its evidence still matters — trades, ledger entries and the history of document rounds stay. And we cannot delete anything from your counterparty's side of a trade: what you sent them is part of their record too.
If you believe we handle your data wrongly, tell us first at support@gcx-exchange.com; you may also complain to the data-protection authority in your country.
8. Security
Passwords are stored only as an irreversible hash. The browser never holds your access token in a form a script can read: it lives in a cookie the page's own JavaScript cannot reach, and requests to the trading interface are made server-side.
Document files are kept outside the web root, are served only after an access check, and are accepted only as PDF, JPEG, PNG, DOCX or XLSX, with the type determined from the contents of the file rather than its name.
No system is beyond compromise. If a breach affects you, we will tell you what happened and what it touched.
9. Cookies and local storage
The platform sets one cookie, gcx_token, which keeps you signed in. It is httpOnly — JavaScript on the page cannot read it — and it expires 30 days after it is issued; signing out clears it immediately. There are no advertising cookies and no analytics cookies.
Your choice of light or dark theme is kept in your browser's local storage under gcx-theme and is never sent to us.
10. Changes to this policy
When the platform changes what it collects or what it does with it, this page changes with it, and the date at the top changes too. The current version is always the one published here. This policy is executed in Russian; the translations are provided for convenience, and in case of divergence the Russian version prevails.
11. Contact
- Operator
- GCX Exchange
- support@gcx-exchange.com
- Website
- https://gcx-exchange.com/
See also the User Agreement and How GCX works.