Politique de confidentialité

Voltalix Privacy Policy

1. Introduction

This Privacy Policy explains how SyncWind LTD, operating the Voltalix platform, collects, uses, stores, shares, and protects personal data when users access https://voltalix.com, create an account, activate OPU contracts, use SCADA functionality, complete training or operational tasks, make deposits or withdrawals, participate in referral programmes, or contact support.

SyncWind LTD acts as the data controller for the personal data described in this Privacy Policy.

For the purposes of this Policy:

• “Voltalix,” “we,” “us,” and “our” refer to <a href="https://www.syncwindltd.com" target="_blank" rel="noopener noreferrer">SyncWind LTD</a> and the Voltalix platform;
• “user,” “you,” and “your” refer to any individual accessing or using Voltalix;
• “personal data” means information relating to an identified or identifiable individual;
• “processing” includes collecting, recording, organising, storing, using, disclosing, restricting, or deleting personal data.

This Policy should be read together with the Voltalix Terms and Conditions and Cookie Policy.

Under the GDPR, a privacy notice should explain the controller’s identity, processing purposes, legal bases, recipients, storage periods, user rights, international transfers, and any relevant automated decision-making.

2. Data controller

The controller responsible for the processing of personal data through Voltalix is:

SyncWind LTD Website: www.syncwindltd.com Privacy contact: [email protected]

Voltalix has not appointed a Data Protection Officer unless this is later required by applicable law or determined appropriate based on the nature and scale of processing.

Questions or requests concerning personal data may be submitted to [email protected].

3. Who may use Voltalix

Voltalix is intended only for individuals who are at least 18 years old.

We do not knowingly permit children to create accounts or use platform services. If we discover that personal data has been collected from a person under the minimum permitted age, we may close the relevant account and delete or restrict the data, subject to any applicable legal retention obligations.

4. Personal data we collect

The personal data collected depends on how a user interacts with Voltalix.

4.1 Account and identification data

When you register or maintain an account, we may collect:

• full name;
• email address;
• username or account identifier;
• country or jurisdiction;
• preferred language;
• account creation date;
• account status;
• referral identifier;
• profile information provided by the user;
• records of accepted policies and platform terms.

4.2 Authentication and security data

To authenticate users and protect the platform, we may collect or generate:

• password hashes;
• authentication tokens;
• JSON Web Tokens;
• session identifiers;
• the x-gen-session cookie;
• two-factor authentication status;
• login dates and times;
• failed authentication attempts;
• password-reset records;
• IP address;
• browser and device information;
• security alerts;
• account-access history;
• identifiers used to detect suspicious activity.

4.3 Identity-verification and KYC data

Where identity verification is required, we may collect:

• legal name;
• date of birth;
• nationality;
• country of residence;
• residential information where required;
• identity-document type and number;
• photographs or copies of identity documents;
• document expiry information;
• facial or verification images where required;
• verification results;
• information regarding the authenticity and validity of documents;
• additional information reasonably required to confirm identity or eligibility.

KYC data may be required before activating an OPU contract, accessing selected operational functionality, or completing a withdrawal.

Users must not submit another person’s identity documents or information.

4.4 OPU contract data

When you view or activate an OPU contract, we may process:

• selected OPU contract;
• activation amount;
• contract identifier;
• activation date and time;
• contract duration;
• contract status;
• allocated operational slot;
• displayed rate and schedule;
• contract eligibility data;
• distribution records;
• contract completion or expiration information;
• related account-history entries.

4.5 SCADA training and certification data

When you use training or certification functionality, we may collect:

• training modules accessed;
• module-completion status;
• assessment answers;
• assessment results;
• certification status;
• certification date;
• training progress;
• attempts and completion history;
• operational eligibility status.

4.6 SCADA task and operational data

When you participate in operational sessions, we may process:

• assigned tasks and interventions;
• the OPU contract associated with each task;
• task-window eligibility;
• task-opening and expiration times;
• submitted answers and selections;
• task completion time;
• task result;
• Passed, Failed, Expired, or Under Review status;
• validation records;
• task-reward information;
• operational progress;
• task and reward history;
• records of suspected task manipulation or unauthorised automation.

4.7 Deposit, balance, and transaction data

When you use Wallet functionality, we may collect:

• deposit amount;
• selected currency or supported digital asset;
• transaction identifier;
• payment status;
• deposit address or payment reference;
• blockchain transaction hash where applicable;
• confirmation status;
• credited balance;
• partial-payment status;
• overpayment information;
• duplicated-payment indicators;
• technical transaction logs;
• relevant payment correspondence.

Voltalix should not be sent unsupported assets, funds through unsupported networks, or payments from unauthorised sources.

4.8 Withdrawal data

When you request a withdrawal, we may collect:

• withdrawal amount;
• withdrawal currency or asset;
• selected withdrawal method;
• destination address or payment details;
• verification status;
• requested date and time;
• processing status;
• transaction identifier;
• network or processing fees;
• security-review information;
• withdrawal history;
• records related to rejected, cancelled, or completed withdrawals.

4.9 Referral and promotional data

When you participate in a referral or promotional programme, we may process:

• referral code or link;
• referring account;
• invited-account identifier;
• qualifying activity;
• eligibility status;
• reward calculation;
• reward status;
• promotional status;
• Founder eligibility;
• VX Founder badge status;
• Founder programme benefits;
• records used to detect self-referrals, duplicate accounts, or referral abuse.

4.10 Support and communication data

When you contact us, we may collect:

• name and email address;
• account identifier;
• the contents of your request;
• screenshots and attached documents;
• transaction or contract references;
• technical information relevant to the issue;
• support correspondence;
• complaint records;
• resolution history.

4.11 Technical and usage data

When you access Voltalix, our systems may automatically collect:

• IP address;
• browser type and version;
• operating system;
• device type;
• language setting;
• date and time of access;
• pages or platform sections accessed;
• request and server logs;
• session events;
• error reports;
• security events;
• diagnostic and performance information.

Voltalix currently uses these data for essential technical, security, and operational purposes rather than third-party advertising or behavioural tracking.

4.12 Cookie and local-storage data

Voltalix currently uses essential cookies and browser storage, including:

• the x-gen-session authentication cookie;
• a cookie storing the selected language;
• a language preference stored in localStorage;
• essential session and interface information.

Further details are provided in the Voltalix Cookie Policy.

5. How we obtain personal data

We may obtain personal data:

• directly from you when you create or use an account;
• from information and documents you submit;
• automatically from your browser, device, or platform activity;
• through transaction or blockchain records where relevant;
• through users participating in referral programmes;
• from security, authentication, or payment infrastructure used to complete a requested service;
• from public or lawful sources where necessary to investigate fraud, security issues, sanctions, or legal compliance.

When information is received from another source, we use it only where there is an appropriate purpose and legal basis.

6. Why we process personal data

We may process personal data for the following purposes.

6.1 Account creation and administration

We use account data to:

• register users;
• create and maintain accounts;
• provide account dashboards;
• manage preferences;
• authenticate access;
• communicate account information.

6.2 Providing Voltalix services

We use personal data to:

• provide access to the OPU Marketplace;
• process OPU contract activations;
• allocate active contracts to operational slots;
• display contract status and history;
• calculate and record applicable contract information;
• provide SCADA training and certification;
• determine operational eligibility;
• assign, validate, and record tasks;
• calculate and credit eligible task rewards;
• maintain Wallet and account records.

6.3 Deposits and withdrawals

We process transaction data to:

• identify and confirm payments;
• detect partial or duplicate transactions;
• credit eligible deposits;
• process withdrawals;
• apply applicable fees;
• investigate missing, incorrect, or disputed transactions;
• maintain financial and accounting records.

6.4 Identity verification and compliance

We process identity and account data to:

• verify the identity and age of users;
• prevent duplicate or fraudulent accounts;
• confirm eligibility;
• review suspicious transactions;
• prevent fraud, identity misuse, money laundering, sanctions evasion, and other unlawful activity;
• respond to lawful requests from competent authorities;
• satisfy applicable legal and compliance obligations.

6.5 Platform security

We use technical and security information to:

• protect accounts;
• prevent unauthorised access;
• operate two-factor authentication;
• detect malicious activity;
• investigate security incidents;
• prevent abuse of tasks, referrals, promotions, balances, and withdrawals;
• identify bots, automation, or attempts to exploit platform errors;
• maintain system integrity and availability.

Fraud prevention can constitute a legitimate interest where the processing is necessary and appropriately balanced against user rights.

6.6 Customer service and complaints

We use personal data to:

• respond to questions;
• investigate account or transaction issues;
• process complaints;
• communicate decisions;
• retain evidence concerning disputes;
• protect and exercise legal rights.

6.7 Referral and Founder programmes

We process referral and programme data to:

• attribute referrals;
• verify qualifying actions;
• calculate rewards;
• assign badges or status;
• prevent programme abuse;
• maintain participation records.

6.8 Legal claims and enforcement

We may process personal data to:

• enforce the Terms and Conditions;
• investigate contractual breaches;
• establish, exercise, or defend legal claims;
• respond to litigation, regulatory enquiries, or lawful authority requests;
• retain evidence concerning fraud, disputes, or unauthorised activity.

6.9 Service maintenance and improvement

We may use technical and aggregated operational information to:

• diagnose errors;
• repair functionality;
• improve security;
• test platform updates;
• assess performance;
• improve the usability and reliability of Voltalix.

We do not use personal data for unrelated purposes without establishing an appropriate legal basis and providing additional information where required.

7. Legal bases for processing

Depending on the purpose, Voltalix relies on one or more of the following legal bases.

7.1 Performance of a contract

Processing is necessary to enter into or perform the agreement between the user and Voltalix, including:

• creating and administering an account;
• providing OPU services;
• operating SCADA functionality;
• managing tasks and rewards;
• processing deposits and withdrawals;
• providing support requested by the user.

7.2 Compliance with legal obligations

Processing may be necessary to comply with obligations concerning:

• identity verification;
• accounting and transaction records;
• tax and corporate records;
• fraud prevention;
• responses to lawful authority requests;
• sanctions and financial-crime controls;
• consumer protection;
• record retention.

7.3 Legitimate interests

Voltalix may process personal data where necessary for legitimate interests, including:

• protecting accounts and platform infrastructure;
• preventing fraud and abuse;
• investigating suspicious activity;
• maintaining accurate operational records;
• improving platform security and reliability;
• enforcing contractual rights;
• defending legal claims.

Before relying on legitimate interests, Voltalix should assess whether those interests are overridden by the user’s rights and freedoms.

7.4 Consent

Where legally required, processing may be based on the user’s consent.

Where processing relies on consent, the user may withdraw it at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

GDPR Article 6 recognises consent, contractual necessity, legal obligations, and legitimate interests as distinct possible legal bases for processing.

8. Required and optional information

Some personal data is required to create an account or provide a requested service.

Failure to provide required data may prevent Voltalix from:

• registering or authenticating the user;
• approving KYC;
• activating an OPU contract;
• granting SCADA access;
• processing a deposit or withdrawal;
• confirming programme eligibility;
• responding to certain account requests.

Where information is optional, this should be indicated through the relevant interface where practical.

9. Automated processing and platform validation

Voltalix uses automated systems to support platform operations, including:

• authentication and session validation;
• contract eligibility checks;
• operational-slot allocation;
• task-window eligibility;
• task validation;
• reward calculations;
• duplicate-transaction prevention;
• security and fraud indicators.

Some activities may also be reviewed manually.

Voltalix does not intend to rely solely on automated processing to make decisions producing legal or similarly significant effects unless permitted by applicable law and accompanied by any required safeguards.

A user may contact [email protected] to request information or human review where a decision may have been materially affected by an automated process.

10. How we share personal data

Voltalix does not sell personal data to advertisers.

We may disclose personal data only where necessary to the following categories of recipients.

10.1 Service and infrastructure providers

Personal data may be processed by providers supporting:

• hosting and server infrastructure;
• databases and storage;
• email delivery;
• security and authentication;
• technical maintenance;
• payment or transaction processing;
• backup and disaster recovery.

These providers should process data only under appropriate contractual and confidentiality obligations.

10.2 Professional advisers

We may disclose relevant information to:

• lawyers;
• accountants;
• auditors;
• compliance advisers;
• cybersecurity specialists;
• insurers.

Disclosure will be limited to what is necessary for the relevant professional service.

10.3 Authorities and legal recipients

We may disclose personal data where required or permitted by law to:

• courts;
• law-enforcement authorities;
• regulatory authorities;
• tax authorities;
• data-protection authorities;
• other competent public bodies.

10.4 Business transfers

If Voltalix or its operations are involved in a merger, acquisition, restructuring, financing, asset transfer, or similar transaction, relevant personal data may be disclosed to professional advisers and prospective or actual participants, subject to suitable safeguards.

10.5 Other users

Limited information may be visible to other users where required for:

• referral attribution;
• network or rank functionality;
• platform activity displays;
• programme participation.

Voltalix should avoid publicly displaying sensitive identity, KYC, payment, contact, or security information.

11. International data transfers

Voltalix seeks to process personal data within the European Economic Area where reasonably possible.

However, technical or service providers may process data from other countries. Where personal data is transferred outside the EEA, Voltalix will use an appropriate transfer mechanism where required, such as:

• an adequacy decision;
• European Commission Standard Contractual Clauses;
• another lawful safeguard recognised under applicable data-protection law;
• a specific legal exception where applicable.

Users may contact [email protected] for further information about relevant transfer safeguards.

12. Data retention

Voltalix retains personal data only for as long as reasonably necessary for the purpose for which it was collected and for any additional period required to comply with legal obligations, resolve disputes, prevent fraud, and enforce agreements.

The following criteria may apply:

When data is no longer required, it may be deleted, anonymised, or securely restricted.

A deletion request does not necessarily require immediate removal of information that must be retained under law or is needed for legal claims, fraud prevention, or transaction integrity.

13. Data security

Voltalix applies technical and organisational measures designed to protect personal data against:

• unauthorised access;
• unlawful processing;
• accidental loss;
• alteration;
• destruction;
• disclosure;
• misuse.

Measures may include:

• encrypted connections;
• controlled access;
• password hashing;
• session management;
• JSON Web Token authentication;
• two-factor authentication;
• access logging;
• transaction validation;
• database and infrastructure protections;
• backup procedures;
• monitoring and incident response;
• role-based access restrictions.

No online service can eliminate every risk. Users must protect their credentials, email accounts, devices, private keys, authentication codes, and withdrawal details.

The GDPR requires personal data to be processed with appropriate security against unauthorised processing and accidental loss, using suitable technical and organisational measures.

14. Personal-data breaches

Where a security incident affects personal data, Voltalix will investigate the incident and take appropriate containment and remediation measures.

Where applicable law requires it, Voltalix will notify:

• the competent supervisory authority; and
• affected users where the incident is likely to create a high risk to their rights and freedoms.

Users should immediately report suspected account compromise or unauthorised activity to [email protected].

15. User rights

Subject to the conditions and limitations of applicable law, users may have the following rights.

15.1 Right of access

You may request confirmation of whether Voltalix processes your personal data and obtain a copy of relevant data together with information about its use.

15.2 Right to rectification

You may request correction of inaccurate personal data and completion of incomplete data.

15.3 Right to erasure

You may request deletion of personal data where there is no continuing lawful basis for retaining it.

This right may be limited where retention is required for legal obligations, fraud prevention, legal claims, transaction records, or another lawful purpose.

15.4 Right to restriction

You may request that processing be restricted in certain circumstances, including while the accuracy or lawfulness of processing is being assessed.

15.5 Right to data portability

Where processing is based on consent or contract and carried out by automated means, you may request relevant data in a structured, commonly used, machine-readable format.

15.6 Right to object

You may object to processing based on legitimate interests. Voltalix may continue processing where it demonstrates compelling legitimate grounds or where processing is required for legal claims.

15.7 Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time.

15.8 Rights regarding automated decisions

Where applicable, you may request human intervention, express your point of view, or challenge a decision based solely on automated processing that produces legal or similarly significant effects.

15.9 Right to lodge a complaint

You may lodge a complaint with the data-protection authority responsible for your habitual residence, place of work, or the location of an alleged infringement.

Users in Italy may contact the Garante per la protezione dei dati personali.

GDPR rights include access to the purposes, data categories, recipients, retention information, and relevant automated decision-making information.

16. Exercising your rights

Privacy requests may be submitted to:

[email protected]

The request should include:

• your full name;
• the email associated with your account;
• the right you wish to exercise;
• a clear description of the requested action;
• relevant account or transaction identifiers where necessary.

Voltalix may request additional information to verify the requester’s identity. This is intended to prevent unauthorised persons from obtaining, modifying, or deleting another user’s data.

Voltalix will respond within the period required by applicable law. Complex or multiple requests may require additional time where legally permitted.

Requests are generally handled without charge. A reasonable fee may be applied, or a request may be refused, where it is manifestly unfounded or excessive, subject to applicable law.

17. Account closure and data deletion

Users may request account closure by contacting [email protected].

Before closing an account, Voltalix may need to:

• confirm the user’s identity;
• resolve pending deposits or withdrawals;
• complete or close active OPU contracts;
• resolve disputes or security reviews;
• retain records required by law.

Closing an account does not automatically require the deletion of all transaction, contractual, KYC, security, and fraud-prevention information.

Data that no longer needs to identify the user may be anonymised where appropriate.

18. Cookies and similar technologies

Voltalix currently uses only essential cookies and browser-storage technologies needed for:

• authentication;
• security;
• session management;
• platform functionality;
• language preferences.

Voltalix does not currently use advertising, behavioural-profiling, or third-party analytics cookies.

Details are available in the separate Voltalix Cookie Policy.

19. External links

Voltalix may include links to external websites or services.

This Privacy Policy does not govern how independent third parties process personal data after a user leaves Voltalix. Users should review the privacy policies of those third parties before submitting information.

20. Changes to this Privacy Policy

Voltalix may update this Privacy Policy where:

• platform functionality changes;
• new services or technologies are introduced;
• processing purposes change;
• service providers change;
• legal or regulatory requirements change;
• clarification or correction is required.

The updated version will be published on the platform with a revised effective date.

Where a change materially affects the way personal data is processed, Voltalix may provide notice through the account interface or by email.

21. Contact

Questions, complaints, and data-protection requests may be sent to:

SyncWind LTD

Website: www.syncwindltd.com

Website: https://voltalix.com

Email: [email protected]