Privacy Policy • Version 1.0
🔒 PRIVACY FIRST • NON-CUSTODIAL • CHAIN AGNOSTIC

Privacy Policy for GhostUSD

GhostUSD is committed to protecting your privacy while providing a secure, transparent and chain-agnostic cryptocurrency swap aggregation platform. This Privacy Policy explains what information we collect, why we collect it, how it is processed, how it may be shared with integrated third-party exchange providers, and the rights available to you under applicable privacy laws.

Effective

July 2026

Version

1.0

Platform

GhostUSD.xyz

Model

Non-Custodial Aggregator

1

Introduction

Welcome to GhostUSD ("GhostUSD", "we", "our", or "us"). We respect your privacy and are committed to protecting your personal information while providing a privacy-first, non-custodial cryptocurrency swap aggregation platform.

This Privacy Policy explains how GhostUSD collects, uses, stores, shares, transfers, and protects information obtained when you access or use our website, applications, APIs, widgets, products, services, or any feature operated under the GhostUSD brand.

GhostUSD is designed around one simple principle: collect as little information as reasonably possible while providing secure cryptocurrency routing services.

Privacy by Design

GhostUSD does not operate as a cryptocurrency exchange. GhostUSD does not hold customer funds. GhostUSD does not custody digital assets. GhostUSD does not execute cryptocurrency swaps. GhostUSD provides a technology platform that aggregates multiple third-party exchange providers and displays available routes according to user-selected preferences.

Your use of GhostUSD constitutes acceptance of this Privacy Policy together with our Terms & Conditions. If you disagree with any part of this Privacy Policy, you should discontinue use of GhostUSD immediately.

Important Notice GhostUSD integrates external cryptocurrency service providers. When you decide to proceed with a swap, certain information is transmitted directly to the selected provider so the requested transaction can be processed. Those providers maintain independent privacy policies and terms of service which also apply to your transaction.
2

About GhostUSD

GhostUSD is a chain-agnostic cryptocurrency swap aggregation platform that connects users with multiple integrated exchange providers through secure API connections.

GhostUSD itself is not an exchange. GhostUSD is not a broker. GhostUSD is not a money transmitter. GhostUSD is not a custodian. GhostUSD does not purchase, sell, trade, store, receive or transfer cryptocurrencies on behalf of users.

Instead, GhostUSD acts solely as a technology layer between users and independent third-party exchange providers.

How GhostUSD Works

  • User selects the cryptocurrency to send.
  • User selects the cryptocurrency to receive.
  • GhostUSD queries integrated provider APIs.
  • Providers return available routes.
  • GhostUSD ranks responses according to the selected sorting method.
  • User chooses one route.
  • The provider generates the deposit address.
  • The provider receives the funds.
  • The provider executes the swap.
  • The provider delivers funds to the destination wallet.

Neutral Aggregation Policy

GhostUSD does not intentionally manipulate provider rankings. Provider responses are processed algorithmically. GhostUSD does not artificially promote, suppress or modify returned exchange quotes.

Chain Agnostic Infrastructure

GhostUSD supports multiple blockchain ecosystems through independent providers. The platform is blockchain-neutral and does not prioritize one blockchain over another. Supported networks may include, but are not limited to:

  • Bitcoin
  • Ethereum
  • BNB Chain
  • Polygon
  • Solana
  • Avalanche
  • Arbitrum
  • Optimism
  • Base
  • Tron
  • Litecoin
  • Dogecoin
  • TON
  • Sui
  • Aptos
  • Cosmos
  • Near
  • and additional supported blockchain networks.
3

Scope of this Privacy Policy

This Privacy Policy applies to all users accessing GhostUSD through:

  • GhostUSD.xyz
  • Application interfaces
  • Swap widgets
  • API integrations
  • Partner integrations
  • Future desktop applications
  • Future mobile applications
  • Public APIs
  • Documentation portals
  • Customer support channels

This Privacy Policy applies regardless of whether you browse GhostUSD without initiating a transaction or complete one or more cryptocurrency swaps using integrated providers.

Separate privacy policies belonging to integrated providers govern information processed after your transaction has been submitted to the selected exchange provider. GhostUSD cannot modify those provider privacy practices.

Third-Party Privacy Policies Integrated providers may independently collect additional information for AML, KYC, fraud prevention, sanctions screening, transaction monitoring, customer support, dispute resolution, regulatory compliance, or legal obligations. GhostUSD does not control those independent processing activities.
4

Definitions

Unless otherwise stated, the following definitions apply throughout this Privacy Policy.

Core Definitions

  • Aggregator means GhostUSD's technology platform that collects and displays cryptocurrency swap quotes from multiple providers.
  • API means Application Programming Interface used to exchange information between GhostUSD and integrated providers.
  • Blockchain means a decentralized distributed ledger.
  • Bridge means infrastructure enabling transfers between separate blockchain networks.
  • Custody means possession or control over customer digital assets.
  • DEX means decentralized exchange.
  • CEX means centralized exchange.
  • Exchange Provider means an independent third-party responsible for executing cryptocurrency swaps.
  • Wallet Address means a public blockchain address capable of receiving digital assets.
  • Gas Fee means blockchain transaction fees paid to validators or miners.
  • Quote means estimated exchange information returned by providers.
  • Fixed Rate means a provider-supported route where exchange output may be locked for a limited period subject to provider rules.
  • Floating Rate means a variable exchange rate determined during execution.
  • Best Rate means the highest estimated output amount returned during quote retrieval.
  • Fastest Route means the route estimated by available information to complete in the shortest expected time.
  • AML means Anti-Money Laundering procedures.
  • KYC means Know Your Customer verification.
  • OFAC means Office of Foreign Assets Control.
  • FATF means Financial Action Task Force.
  • PEP means Politically Exposed Person.
  • Personal Data means information capable of identifying an individual directly or indirectly.

GhostUSD Definition

Throughout this Privacy Policy, "GhostUSD" refers exclusively to the technology platform that aggregates provider APIs and presents routing information. GhostUSD should not be interpreted as the legal operator of cryptocurrency exchanges or the executor of cryptocurrency transactions.

5

Information We Collect

GhostUSD is built around a privacy-first philosophy. Unlike traditional exchanges, GhostUSD does not require users to create an account before viewing exchange quotes or using supported cryptocurrency swap services. We intentionally minimize the amount of information collected while maintaining platform security, service integrity, fraud prevention, legal compliance where applicable, and reliable communication with integrated third-party exchange providers.

Privacy First Principle

GhostUSD is engineered to minimize personal data collection. If certain information is not required for providing our services, improving platform security, preventing fraud, or complying with applicable legal obligations, GhostUSD aims not to collect or permanently retain such information.

Information You Voluntarily Provide

Depending upon your interaction with GhostUSD, you may voluntarily provide information including but not limited to:

  • Receiving wallet addresses.
  • Refund wallet addresses.
  • Destination blockchain selection.
  • Selected cryptocurrencies.
  • Swap amount.
  • Preferred exchange route.
  • Support requests.
  • Email address when contacting support.
  • Attachments submitted during customer support.
  • Transaction identifiers.
  • Provider order identifiers.

Information Automatically Collected

Certain technical information may be collected automatically whenever you access GhostUSD.

  • IP address.
  • Approximate geographic region.
  • Browser type.
  • Browser version.
  • Operating system.
  • Device type.
  • Screen resolution.
  • Language preference.
  • Time zone.
  • Referral source.
  • Visited pages.
  • Interaction timestamps.
  • Anonymous performance metrics.
  • Diagnostic logs.
  • Error reports.
  • Security event logs.
No Account Required GhostUSD currently does not require user registration in order to browse available cryptocurrency routes or obtain exchange quotations.

Wallet Information

Wallet addresses entered into GhostUSD are used solely for processing requested exchange routes. Wallet addresses may be shared with the selected exchange provider responsible for executing the transaction. GhostUSD never requests or stores:

  • Private keys.
  • Seed phrases.
  • Recovery phrases.
  • Wallet passwords.
  • Hardware wallet PINs.

Important Security Notice

GhostUSD employees, contractors, support representatives, moderators, administrators, affiliates, or automated systems will never ask you for your private keys, seed phrases, recovery phrases, wallet passwords, or authentication codes. Anyone requesting this information should be considered fraudulent.

6

Information We Do NOT Collect

GhostUSD intentionally avoids collecting unnecessary personal information whenever reasonably possible.

  • Government-issued identification documents.
  • Passport copies.
  • Driving licenses.
  • National identity cards.
  • Biometric identifiers.
  • Facial recognition information.
  • Bank account credentials.
  • Debit card numbers.
  • Credit card numbers.
  • PIN codes.
  • Private cryptocurrency keys.
  • Wallet recovery phrases.
  • Wallet passwords.
  • Social Security Numbers.
  • Tax identification numbers.
  • Personal photographs (unless voluntarily submitted to support).
  • Contacts stored on your device.
  • SMS messages.
  • Phone call recordings.
  • Microphone recordings.
  • Camera recordings.
  • Clipboard contents.
Provider Verification If identity verification (KYC), AML verification, sanctions screening, or source-of-funds verification becomes necessary, these procedures are generally performed directly by the selected third-party exchange provider, not GhostUSD.
7

Blockchain Transparency

Blockchain transactions are inherently public. Whenever cryptocurrency is transferred through any supported blockchain network, transaction details become permanently recorded on decentralized public ledgers.

GhostUSD cannot modify, erase, conceal, encrypt, anonymize, or remove publicly available blockchain information.

  • Wallet addresses may be publicly visible.
  • Transaction hashes are public.
  • Token transfers are public.
  • Amounts transferred may be publicly visible.
  • Block confirmations remain permanently recorded.
  • Smart contract interactions are publicly accessible.

Blockchain Disclaimer

GhostUSD cannot guarantee anonymity on public blockchain networks. While GhostUSD promotes privacy-focused routing and minimizes centralized data collection, blockchain networks themselves remain transparent by design. Users are responsible for understanding the privacy characteristics of every blockchain they use.

8

Cookies, Local Storage & Similar Technologies

GhostUSD may use cookies, browser storage technologies, session storage, local storage, cache objects, and similar technologies to improve platform functionality, remember preferences, enhance security, and optimize user experience.

Examples include

  • Remembering selected language.
  • Remembering selected theme.
  • Preventing abuse.
  • Rate limiting.
  • Fraud prevention.
  • Session continuity.
  • Security tokens.
  • Anonymous analytics.
  • Performance optimization.
  • Error diagnostics.

GhostUSD does not intentionally use advertising cookies for behavioral advertising.

Users may disable cookies through browser settings. Certain platform functionality may become unavailable if cookies are disabled.

9

Analytics & Platform Diagnostics

GhostUSD may collect anonymous operational analytics solely for improving platform stability, performance, reliability, security, and user experience.

  • Page loading performance.
  • API response times.
  • Error frequencies.
  • Failed quote requests.
  • Swap completion statistics.
  • Anonymous browser statistics.
  • Platform uptime.
  • Service availability.
  • Infrastructure monitoring.
  • Security monitoring.

No Sale of Personal Data

GhostUSD does not sell personal information to advertisers, advertising networks, or unrelated third parties for marketing purposes.

10

Third-Party Exchange Providers

GhostUSD operates as a technology platform that aggregates cryptocurrency exchange routes from independent third-party exchange providers ("Providers") through secure Application Programming Interfaces ("APIs").

GhostUSD itself does not execute cryptocurrency exchanges. GhostUSD does not receive customer deposits. GhostUSD does not temporarily hold customer assets. GhostUSD does not become the custodian of cryptocurrencies involved in any swap.

Technology Platform Only

GhostUSD provides technology infrastructure that discovers available cryptocurrency swap routes from integrated providers. The selected provider remains solely responsible for processing, executing, confirming, completing, delaying, rejecting or refunding the transaction.

Integrated Providers

GhostUSD may integrate one or more independent exchange providers, including but not limited to:

  • Husher
  • RocketX
  • HoudiniSwap
  • Future integrated liquidity providers
  • Future decentralized routing providers
  • Future centralized exchange providers
  • Future bridge providers

The list of providers may change at any time without prior notice. GhostUSD may add, remove, disable or temporarily suspend providers for technical, legal, operational or security reasons.

Independent Privacy Policies Every integrated provider operates under its own Privacy Policy, Terms of Service, AML Policy and Compliance Rules. Users are responsible for reviewing those documents before initiating transactions.
11

Information Shared With Providers

When a user selects a route and initiates a cryptocurrency swap, GhostUSD may transmit limited information to the selected provider for transaction execution.

Only the information reasonably required for processing the requested transaction is transmitted.

Information May Include

  • Receiving wallet address.
  • Refund wallet address.
  • Selected blockchain.
  • Selected cryptocurrency pair.
  • Input amount.
  • Destination amount estimate.
  • Transaction identifier.
  • Referral identifier where applicable.
  • Blockchain network selection.
  • Order identifier.
  • Technical metadata necessary for fraud prevention.
  • IP address where required for compliance or security.

GhostUSD does not knowingly transmit unnecessary personal information.

Once information is received by the selected provider, that provider becomes independently responsible for processing such information in accordance with its own legal obligations.

Provider Independence

GhostUSD cannot control how an independent provider stores, processes, transfers, retains or secures information once transmitted through the provider's API.

12

How We Use Information

GhostUSD processes collected information solely for legitimate operational purposes.

  • Displaying exchange quotes.
  • Querying provider APIs.
  • Generating transaction requests.
  • Improving platform reliability.
  • Maintaining service security.
  • Preventing abuse.
  • Fraud prevention.
  • Monitoring infrastructure health.
  • Improving quote accuracy.
  • Improving response times.
  • Troubleshooting technical issues.
  • Responding to customer support requests.
  • Complying with applicable legal obligations.
  • Protecting GhostUSD against fraud and malicious activity.
No Marketing Profiles GhostUSD does not intentionally build advertising profiles, behavioral profiles or marketing dossiers about users.
13

Legal Basis for Processing (GDPR)

Where the General Data Protection Regulation ("GDPR") applies, GhostUSD processes personal information under one or more lawful bases.

  • Performance of a requested service.
  • User consent.
  • Legitimate interests.
  • Compliance with legal obligations.
  • Protection against fraud and abuse.
  • Protection of network and information security.

Where consent is required by applicable law, users may withdraw consent at any time. Withdrawal of consent does not affect processing that occurred before withdrawal.

14

CCPA Privacy Rights

If you are a resident of California, you may have rights under the California Consumer Privacy Act (CCPA) or the California Privacy Rights Act (CPRA), including rights to:

  • Know what information is collected.
  • Request access to collected information.
  • Request deletion of eligible information.
  • Correct inaccurate information.
  • Limit certain uses where applicable.
  • Receive equal service regardless of exercising privacy rights.

No Sale of Personal Information

GhostUSD does not sell personal information as defined by the California Consumer Privacy Act.

15

International Data Transfers

GhostUSD operates on the internet and integrated providers may operate from multiple jurisdictions. Information necessary for processing cryptocurrency swaps may therefore be transferred internationally.

By using GhostUSD you acknowledge that information required for providing requested services may be processed in jurisdictions outside your country of residence.

  • Provider infrastructure.
  • Cloud infrastructure.
  • Content delivery networks.
  • Security monitoring services.
  • Fraud prevention services.
  • Disaster recovery systems.
Cross-Border Processing Different jurisdictions may provide different levels of privacy protection. GhostUSD takes commercially reasonable measures to work with providers implementing appropriate security safeguards where reasonably practicable.
16

Data Retention

GhostUSD retains information only for as long as reasonably necessary to:

  • Provide requested services.
  • Resolve disputes.
  • Protect against fraud.
  • Maintain security.
  • Comply with legal obligations.
  • Enforce agreements.
  • Improve platform reliability.

Retention periods vary according to the type of information involved and applicable legal requirements. Information that is no longer reasonably necessary may be securely deleted, anonymized or aggregated.

Data Minimization

GhostUSD seeks to retain the minimum amount of information reasonably necessary for legitimate operational and legal purposes.

17

Security & Information Protection

GhostUSD implements commercially reasonable administrative, technical and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, destruction or misuse. Although no internet-connected system can be guaranteed completely secure, GhostUSD continuously works to improve the confidentiality, integrity and availability of its infrastructure.

Security Measures

  • HTTPS encryption across supported services.
  • TLS encrypted API communication.
  • Secure server infrastructure.
  • Firewall protection.
  • Continuous vulnerability monitoring.
  • Rate limiting against abuse.
  • Distributed denial-of-service (DDoS) mitigation.
  • Infrastructure monitoring.
  • Access control policies.
  • Authentication for administrative systems.
  • Security logging.
  • Fraud monitoring.
  • Routine security reviews.
  • Incident response procedures.

Security Disclaimer

No website, application, API, blockchain network, internet connection, cloud provider or electronic storage system can guarantee absolute security. Users acknowledge that they use GhostUSD and blockchain technologies at their own risk.

18

AML, KYC & Compliance

GhostUSD itself is designed as a technology aggregation platform. Identity verification requirements generally originate from the independent exchange provider selected by the user.

Depending upon transaction characteristics, blockchain risk analysis, sanctions screening, source-of-funds requirements or applicable regulations, an integrated provider may independently require:

  • Identity verification.
  • Government identification.
  • Proof of address.
  • Source of funds.
  • Source of wealth.
  • Enhanced Due Diligence.
  • Transaction explanations.
  • Additional compliance documentation.
Independent Provider Compliance GhostUSD does not control when an independent provider requests AML or KYC verification. Such decisions are made independently by the provider in accordance with its own legal obligations and compliance policies.

Where reasonably necessary for processing your transaction, GhostUSD may facilitate communication between you and the provider. GhostUSD cannot override compliance decisions made by independent providers.

19

Sanctions & Restricted Jurisdictions

GhostUSD reserves the right to restrict or refuse access where required by applicable law, sanctions programs, legal obligations or security considerations.

Integrated providers may independently prohibit access from certain jurisdictions or block transactions involving sanctioned persons, entities or blockchain addresses.

  • OFAC sanctions.
  • United Nations sanctions.
  • European Union sanctions.
  • United Kingdom sanctions.
  • Applicable local regulations.
  • Fraud prevention systems.
  • Blockchain intelligence providers.

Users are solely responsible for ensuring that their use of GhostUSD complies with the laws applicable in their jurisdiction.

20

Your Privacy Rights

Subject to applicable law, you may have one or more of the following rights regarding your personal information.

  • Right to access.
  • Right to correction.
  • Right to deletion.
  • Right to restrict processing.
  • Right to object.
  • Right to data portability.
  • Right to withdraw consent.
  • Right to lodge a complaint with a supervisory authority.

Certain rights may not apply where GhostUSD is legally required to retain information, protect security, investigate fraud or comply with legal obligations.

Blockchain Limitation

Information permanently recorded on public blockchains cannot generally be modified, deleted or erased by GhostUSD. Your privacy rights apply only to information controlled by GhostUSD and do not affect immutable blockchain records.

21

Children's Privacy

GhostUSD is intended exclusively for individuals who have reached the legal age of majority in their jurisdiction. GhostUSD does not knowingly collect personal information from children.

If you believe a minor has submitted personal information through GhostUSD, please contact us so appropriate measures may be taken.

22

Changes To This Privacy Policy

GhostUSD may modify this Privacy Policy from time to time to reflect legal, regulatory, operational or technological developments.

Whenever material changes occur, the "Effective Date" and version number displayed at the beginning of this Privacy Policy will be updated. Continued use of GhostUSD after publication of an updated Privacy Policy constitutes acceptance of the revised version.

23

Contact Information

Questions regarding this Privacy Policy or privacy-related requests may be submitted through our official communication channels.

Website https://ghostusd.xyz
Email mukundkumarofficial@gmail.com
Privacy Requests mukundkumarofficial@gmail.com
Platform GhostUSD.xyz

Final Statement

GhostUSD was designed with privacy, transparency and decentralization in mind. Our goal is to provide users with a secure, chain-agnostic cryptocurrency swap aggregation platform while collecting the minimum amount of information reasonably necessary for operating, protecting and improving the platform.