Skip to content

Privacy Policy

Last updated: August 20, 2026

1. Who We Are

AEXI is a non-custodial crypto aggregator providing AI-powered cross-chain swaps, bridges, and a Stablecoin Exchange. This Privacy Policy explains how we collect, use, and protect information when you use our Platform, website, or related services.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the practices described herein. If you do not agree, you must not use the Platform.

2. Scope

This Privacy Policy applies to:

  • The AEXI website at aexi.cc and all subdomains.
  • Swap & Bridge services powered by AI routing across 80+ networks.
  • Stablecoin Exchange services (USDT/USDC conversions via CEX and DEX liquidity).
  • Support channels including Telegram (@aexisupport) and email ([email protected]).

This policy does not apply to third-party websites, wallets, or services that you access through the Platform. Each third party has its own privacy policy.

3. Information We Collect

AEXI is designed to minimize data collection. We may collect the following categories of information:

  • Public wallet data: Your public wallet address and on-chain transaction data that is publicly available on the blockchain. This is not personally identifying in itself and is not created or controlled by AEXI.
  • Exchange request data: For Stablecoin Exchange, we process the payment address you provide, the token pair, amount, source/destination networks, and the status of your exchange (including underpayment/overpayment/wrong-token classifications).
  • Technical data: IP address, browser and device information, referring/exit pages, operating system, and basic usage patterns, used for security and performance.
  • Essential cookies: Small text files required for session management and security (see our Cookie Policy).
  • AML/KYC data: For Stablecoin Exchange, wallet address, transaction amount, IP address, and contact information provided in the exchange request may be shared with our AML screening partner (amlbot.com). See Section 11 for details.
  • Support communications: Messages, emails, or Telegram messages you send to our support team. We retain these to resolve issues and improve service quality.

4. Information We Never Collect

  • Your private keys, seed phrase, mnemonic phrase, or wallet credentials. Never share these with anyone, including us.
  • Government-issued identification or KYC documents for Swap & Bridge. AEXI requires no account, email, phone number, or identity verification to swap.
  • Personal identifying information such as your name, physical address, or date of birth — unless voluntarily provided in support communications or required for Stablecoin Exchange compliance.
  • Biometric data, facial recognition, or voice recordings.

Never provide your private keys or seed phrase to any website, form, email, or person claiming to be AEXI support.

5. How We Use Your Information

  • To provide, operate, and improve the Swap & Bridge and Stablecoin Exchange services.
  • To monitor blockchain payments, detect deposits, classify exact/under/overpayments, and process exchanges automatically.
  • To conduct AML screening of deposit wallets via our compliance partner, ensuring payouts are clean and compliant.
  • To ensure security: identify irregular behavior, prevent fraud, and protect the Platform and its users.
  • To analyze aggregated, anonymized usage to improve performance and user experience.
  • To respond to your support requests and resolve disputes.
  • To comply with applicable laws, regulations, and legal processes.

We do not sell, rent, or monetize your personal data. Analytics, where used, are aggregated and anonymized.

6. Legal Basis for Processing

We process your data under the following legal bases:

  • Contractual necessity: Processing your wallet address and transaction data is necessary to provide the swap, bridge, or exchange service you request.
  • Legitimate interest: Technical data collection (IP, browser info) is necessary for security, fraud prevention, and platform integrity.
  • Legal obligation: AML/KYC data processing is required to comply with applicable anti-money laundering regulations.
  • Consent: Where required by law, we obtain your consent before processing non-essential data.

7. Data Recipients & Third Parties

The Platform relies on third-party services to function. We may share limited, non-sensitive data with:

  • Liquidity & bridge providers (e.g., LI.FI): Route and liquidity data to execute your swaps and bridges.
  • Wallet providers (e.g., MetaMask, Reown AppKit / WalletConnect, Coinbase Wallet): Public addresses to facilitate wallet connection and transaction signing.
  • AML screening partner (amlbot.com): Wallet addresses, transaction amounts, IP addresses, and contact information for compliance risk scoring. Data is shared on a transaction-by-transaction basis.
  • Blockchain explorers and infrastructure providers: Public transaction data and RPC access.
  • Competent authorities: Where required by law, court order, or legal investigation, on a need-to-know basis and only upon confirmation of an open criminal case.

Blockchains are transparent and decentralized. As an inherent result of using blockchains, your transactions and wallet addresses are stored on-chain and are publicly accessible to anyone.

8. International Data Transfers

AEXI operates globally. Your data may be processed in countries other than your own, including through our third-party service providers. These transfers are protected by:

  • Standard contractual clauses or equivalent safeguards where required by applicable data protection laws.
  • Data processing agreements with all third-party service providers.
  • Technical and organizational measures to ensure data security during transfer.

By using the Platform, you acknowledge that your data may be transferred to and processed in jurisdictions with different data protection laws than your own.

9. Data Retention

We retain data only as long as necessary for the purposes described in this policy:

  • Swap & Bridge data: Transaction metadata is retained for the duration of the transaction and deleted shortly after completion, except for aggregated, anonymized data used for analytics.
  • Stablecoin Exchange data: Exchange request data is retained for service operation, dispute resolution, and compliance purposes.
  • AML/KYC data: Retained for three (3) years from the date of submission. You may request deletion after one (1) year from the date of payment, provided no pending requests or investigations exist. See Section 11.
  • Support communications: Retained for up to two (2) years to resolve issues and improve service quality.
  • Technical logs: IP addresses and browser data are retained for up to ninety (90) days for security purposes.

We securely delete or anonymize personal information when it is no longer required. Financial record-keeping and legal/regulatory requirements may require us to retain certain records for extended periods.

10. Security

  • Content Security Policy (CSP) headers to mitigate XSS and injection attacks.
  • Rate limiting on all API endpoints.
  • Zod validation on all inputs to reject malformed payloads.
  • Multi-factor authentication for sensitive operations.
  • Non-custodial architecture — we never hold user funds or keys.
  • Regular security audits and dependency reviews.
  • TLS encryption for all data in transit.
  • Encryption at rest for sensitive data.

While we take reasonable measures to protect data, no method of transmission or storage is 100% secure. You are responsible for protecting your wallet credentials and private keys.

11. AML/KYC Data Processing

For Stablecoin Exchange transactions, AEXI processes AML/KYC data in accordance with our AML/KYC Policy. Key points:

  • AML partner: AML screening is conducted by amlbot.com. All AML checks run through their service.
  • Data shared: Wallet address, transaction amount, IP address, and contact information provided in the exchange request.
  • Purpose: To assess wallet risk and ensure compliance with anti-money laundering regulations.
  • Retention: AML/KYC data is retained for three (3) years from the date of submission.
  • Deletion right: You may request deletion of your AML/KYC data after one (1) year from the date of payment, provided no pending requests or investigations exist regarding the associated transaction.
  • Confidentiality: AML checks are conducted confidentially. Data is not shared with unauthorized third parties.
  • Law enforcement: Data may be shared with competent authorities upon request with confirmation of an open criminal case.

You must conduct an AML check via amlbot.com no later than three (3) minutes before making a Stablecoin Exchange payment. Each check is individual, even for the same wallet.

12. Your Rights

Depending on your jurisdiction (including under the GDPR or similar frameworks), you may have the right to:

  • Request access to the personal data we hold about you.
  • Request correction or erasure of your personal data.
  • Object to or restrict the processing of your personal data.
  • Request data portability.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us via Telegram at t.me/aexisupport or by email at [email protected]. We may require proof of identity and will respond without undue delay, typically within four (4) weeks.

13. Children's Privacy

The Platform is not intended for use by anyone under the age of eighteen (18). We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately and we will take steps to delete such information.

14. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

  • Notify the relevant supervisory authority within seventy-two (72) hours of becoming aware of the breach, as required by applicable law.
  • Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
  • Document the breach, its effects, and the remedial action taken.

15. Cookies

We use only essential cookies for session management and security. We do not use tracking or advertising cookies. For full details, please read our Cookie Policy.

16. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top of this page reflects the latest revision. We will notify you of material changes by posting a notice on the Platform or, where required, by email. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

17. Contact

For privacy-related inquiries, contact us via Telegram at t.me/aexisupport or by email at [email protected].