Privacy Policy
Last updated: 3 May 2026
This Privacy Policy describes how Qredax ("we", "us", "our") collects, uses, and discloses personal information when you visit qredax.com or submit a claim evaluation request.
1. Information we collect
When you submit a claim evaluation request through our website, we collect:
- Name - your legal name as registered with the FTX claims agent
- Email address - for communication regarding your claim
- Unique Customer Code - your Kroll-issued identifier for the FTX claim
- Approximate claim value - for offer calculation
- Country of residence - for jurisdictional considerations
If we proceed to a transaction, we additionally collect:
- Government-issued identification (passport scan or equivalent) - required by Federal Rule of Bankruptcy Procedure 3001(e) for Sale and Assignment of Claim filings with Kroll
- Cryptocurrency wallet address - for payment delivery
- Signed Sale and Assignment of Claim agreement - for legal title transfer
We also automatically collect technical data when you visit our website:
- IP address (anonymized, retained 30 days)
- Browser type and version
- Referring URL and exit page
- Pages viewed and time spent
2. How we use information
We use collected information solely to:
- Evaluate your claim and prepare a binding offer
- Execute the Sale and Assignment of Claim ("SAC") agreement
- File the SAC with the FTX claims agent (Kroll) on the public bankruptcy docket
- Process payment to the wallet address you provide
- Communicate with you about the transaction
- Comply with applicable legal and regulatory requirements
- Improve our website and services
3. Information sharing
We share personal information only with:
- Kroll Restructuring Administration LLC - the FTX claims agent. SAC filings include claimant name and Unique Customer Code as required by Federal Rule of Bankruptcy Procedure 3001(e). These filings are public record on the FTX bankruptcy docket.
- Legal counsel - for SAC drafting and review (subject to attorney-client privilege)
- Compliance and sanctions screening providers - for OFAC and similar regulatory checks
- Government and regulatory authorities - only when required by law or court order
We also rely on the following third-party service providers ("data processors") to operate the website and process requests. Submitting a form, using the chat assistant, or browsing the site may transfer data to them:
- Cloudflare, Inc. (USA) - website hosting, CDN, and database (Cloudflare D1). Receives IP address and technical request logs.
- Telegram FZ-LLC (UAE) - internal notification of new claim requests and chat leads. Receives form data (name, email, customer code, message).
- Formspree, Inc. (USA) - backup processing of form submissions. Receives form data (name, email, message).
- OpenRouter, Inc. and Anthropic, PBC (USA) - power the website AI chat assistant. Receive chat messages and, if provided, your email address. See Section 8.
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not share your information with other claim buyers, brokers, or competitors.
4. Data retention
We retain personal information for as long as necessary to:
- Complete the transaction and any related obligations (typically 7 years for tax and audit compliance)
- Resolve any disputes that may arise from the transaction
- Comply with our legal obligations (varies by jurisdiction; up to 10 years for AML records)
After the retention period expires, we delete or anonymize personal information.
5. Your rights
If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) applies to our processing of your personal information. The data controller is Qredax. Our legal bases for processing are: performance of a contract (evaluating and executing a claim sale), compliance with legal obligations (AML, sanctions, tax records), consent (analytics cookies and session recording - see Section 8), and legitimate interest (operating and securing the website). You may lodge a complaint with your local data protection authority.
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access - request a copy of personal information we hold about you
- Rectification - request correction of inaccurate or incomplete information
- Erasure - request deletion of your information (subject to legal retention requirements)
- Restriction - request that we restrict processing of your information
- Data portability - receive your information in a machine-readable format
- Objection - object to certain types of processing
- Withdraw consent - for processing that relies on consent
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
6. Data security
We implement reasonable technical and organizational measures to protect personal information:
- TLS 1.3 encryption for all data in transit
- Encrypted storage for sensitive documents (passport scans, signed agreements)
- Access controls limiting personal data to authorized personnel only
- Regular security reviews and updates
No system is perfectly secure. If you believe your information has been compromised, contact us immediately at [email protected].
7. International transfers
We process information in jurisdictions that may differ from your country of residence. By submitting a claim evaluation request, you consent to the transfer of your information to these jurisdictions. We use standard contractual clauses and equivalent safeguards where applicable.
8. Cookies, analytics, and AI chat
Our website uses essential cookies for functionality (language preference, form session). We do not use advertising cookies and do not sell data to advertisers.
Analytics. With your consent, we use two analytics services:
- Google Analytics 4 (Google LLC, USA) - measures traffic and visitor behaviour. Loaded only after you click "Accept All" in the cookie banner. IP anonymization is enabled.
- Yandex Metrika (Yandex LLC) - measures traffic and behaviour. It includes Webvisor, which records anonymized session activity (clicks, scrolls, and form interaction). Loaded only after you click "Accept All".
If you click "Reject All", neither analytics service is loaded. You can change your choice by clearing your browser's site data.
AI chat assistant. The website chat is powered by an AI model accessed through OpenRouter, Inc. and Anthropic, PBC (both USA). Messages you send - and your email address if you provide it - are transmitted to these providers for processing. Your conversation history is stored locally in your browser (localStorage) until you clear it. Do not enter passwords, full identification documents, or other highly sensitive data into the chat.
9. Children's privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, contact us at [email protected].
10. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. Material changes will be communicated via the website prior to taking effect.
11. Contact
For privacy-related questions or to exercise your rights:
Email: [email protected]
This Privacy Policy is governed by the laws of the jurisdiction in which Qredax is registered.