How Voltalix processes, protects, and manages account, identity, security, and operational information.
Official policy information
Voltalix Privacy Policy
1. Introduction
This Privacy Policy explains how SyncWind LTD, operating the Voltalix platform, collects, uses, stores, shares, and protects personal data when users access https://voltalix.com, create an account, activate OPU contracts, use SCADA functionality, complete training or operational tasks, make deposits or withdrawals, participate in referral programmes, or contact support.
SyncWind LTD acts as the data controller for the personal data described in this Privacy Policy.
For the purposes of this Policy:
“Voltalix,” “we,” “us,” and “our” refer to <a href="https://www.syncwindltd.com" target="_blank" rel="noopener noreferrer">SyncWind LTD</a> and the Voltalix platform;
“user,” “you,” and “your” refer to any individual accessing or using Voltalix;
“personal data” means information relating to an identified or identifiable individual;
“processing” includes collecting, recording, organising, storing, using, disclosing, restricting, or deleting personal data.
This Policy should be read together with the Voltalix Terms and Conditions and Cookie Policy.
Under the GDPR, a privacy notice should explain the controller’s identity, processing purposes, legal bases, recipients, storage periods, user rights, international transfers, and any relevant automated decision-making.
2. Data controller
The controller responsible for the processing of personal data through Voltalix is:
Voltalix has not appointed a Data Protection Officer unless this is later required by applicable law or determined appropriate based on the nature and scale of processing.
Questions or requests concerning personal data may be submitted to [email protected].
3. Who may use Voltalix
Voltalix is intended only for individuals who are at least 18 years old.
We do not knowingly permit children to create accounts or use platform services. If we discover that personal data has been collected from a person under the minimum permitted age, we may close the relevant account and delete or restrict the data, subject to any applicable legal retention obligations.
4. Personal data we collect
The personal data collected depends on how a user interacts with Voltalix.
4.1 Account and identification data
When you register or maintain an account, we may collect:
full name;
email address;
username or account identifier;
country or jurisdiction;
preferred language;
account creation date;
account status;
referral identifier;
profile information provided by the user;
records of accepted policies and platform terms.
4.2 Authentication and security data
To authenticate users and protect the platform, we may collect or generate:
password hashes;
authentication tokens;
JSON Web Tokens;
session identifiers;
the x-gen-session cookie;
two-factor authentication status;
login dates and times;
failed authentication attempts;
password-reset records;
IP address;
browser and device information;
security alerts;
account-access history;
identifiers used to detect suspicious activity.
4.3 Identity-verification and KYC data
Where identity verification is required, we may collect:
legal name;
date of birth;
nationality;
country of residence;
residential information where required;
identity-document type and number;
photographs or copies of identity documents;
document expiry information;
facial or verification images where required;
verification results;
information regarding the authenticity and validity of documents;
additional information reasonably required to confirm identity or eligibility.
KYC data may be required before activating an OPU contract, accessing selected operational functionality, or completing a withdrawal.
Users must not submit another person’s identity documents or information.
4.4 OPU contract data
When you view or activate an OPU contract, we may process:
selected OPU contract;
activation amount;
contract identifier;
activation date and time;
contract duration;
contract status;
allocated operational slot;
displayed rate and schedule;
contract eligibility data;
distribution records;
contract completion or expiration information;
related account-history entries.
4.5 SCADA training and certification data
When you use training or certification functionality, we may collect:
training modules accessed;
module-completion status;
assessment answers;
assessment results;
certification status;
certification date;
training progress;
attempts and completion history;
operational eligibility status.
4.6 SCADA task and operational data
When you participate in operational sessions, we may process:
assigned tasks and interventions;
the OPU contract associated with each task;
task-window eligibility;
task-opening and expiration times;
submitted answers and selections;
task completion time;
task result;
Passed, Failed, Expired, or Under Review status;
validation records;
task-reward information;
operational progress;
task and reward history;
records of suspected task manipulation or unauthorised automation.
4.7 Deposit, balance, and transaction data
When you use Wallet functionality, we may collect:
deposit amount;
selected currency or supported digital asset;
transaction identifier;
payment status;
deposit address or payment reference;
blockchain transaction hash where applicable;
confirmation status;
credited balance;
partial-payment status;
overpayment information;
duplicated-payment indicators;
technical transaction logs;
relevant payment correspondence.
Voltalix should not be sent unsupported assets, funds through unsupported networks, or payments from unauthorised sources.
4.8 Withdrawal data
When you request a withdrawal, we may collect:
withdrawal amount;
withdrawal currency or asset;
selected withdrawal method;
destination address or payment details;
verification status;
requested date and time;
processing status;
transaction identifier;
network or processing fees;
security-review information;
withdrawal history;
records related to rejected, cancelled, or completed withdrawals.
4.9 Referral and promotional data
When you participate in a referral or promotional programme, we may process:
referral code or link;
referring account;
invited-account identifier;
qualifying activity;
eligibility status;
reward calculation;
reward status;
promotional status;
Founder eligibility;
VX Founder badge status;
Founder programme benefits;
records used to detect self-referrals, duplicate accounts, or referral abuse.
4.10 Support and communication data
When you contact us, we may collect:
name and email address;
account identifier;
the contents of your request;
screenshots and attached documents;
transaction or contract references;
technical information relevant to the issue;
support correspondence;
complaint records;
resolution history.
4.11 Technical and usage data
When you access Voltalix, our systems may automatically collect:
IP address;
browser type and version;
operating system;
device type;
language setting;
date and time of access;
pages or platform sections accessed;
request and server logs;
session events;
error reports;
security events;
diagnostic and performance information.
Voltalix currently uses these data for essential technical, security, and operational purposes rather than third-party advertising or behavioural tracking.
4.12 Cookie and local-storage data
Voltalix currently uses essential cookies and browser storage, including:
the x-gen-session authentication cookie;
a cookie storing the selected language;
a language preference stored in localStorage;
essential session and interface information.
Further details are provided in the Voltalix Cookie Policy.
5. How we obtain personal data
We may obtain personal data:
directly from you when you create or use an account;
from information and documents you submit;
automatically from your browser, device, or platform activity;
through transaction or blockchain records where relevant;
through users participating in referral programmes;
from security, authentication, or payment infrastructure used to complete a requested service;
from public or lawful sources where necessary to investigate fraud, security issues, sanctions, or legal compliance.
When information is received from another source, we use it only where there is an appropriate purpose and legal basis.
6. Why we process personal data
We may process personal data for the following purposes.
6.1 Account creation and administration
We use account data to:
register users;
create and maintain accounts;
provide account dashboards;
manage preferences;
authenticate access;
communicate account information.
6.2 Providing Voltalix services
We use personal data to:
provide access to the OPU Marketplace;
process OPU contract activations;
allocate active contracts to operational slots;
display contract status and history;
calculate and record applicable contract information;
provide SCADA training and certification;
determine operational eligibility;
assign, validate, and record tasks;
calculate and credit eligible task rewards;
maintain Wallet and account records.
6.3 Deposits and withdrawals
We process transaction data to:
identify and confirm payments;
detect partial or duplicate transactions;
credit eligible deposits;
process withdrawals;
apply applicable fees;
investigate missing, incorrect, or disputed transactions;
maintain financial and accounting records.
6.4 Identity verification and compliance
We process identity and account data to:
verify the identity and age of users;
prevent duplicate or fraudulent accounts;
confirm eligibility;
review suspicious transactions;
prevent fraud, identity misuse, money laundering, sanctions evasion, and other unlawful activity;
respond to lawful requests from competent authorities;
satisfy applicable legal and compliance obligations.
6.5 Platform security
We use technical and security information to:
protect accounts;
prevent unauthorised access;
operate two-factor authentication;
detect malicious activity;
investigate security incidents;
prevent abuse of tasks, referrals, promotions, balances, and withdrawals;
identify bots, automation, or attempts to exploit platform errors;
maintain system integrity and availability.
Fraud prevention can constitute a legitimate interest where the processing is necessary and appropriately balanced against user rights.
6.6 Customer service and complaints
We use personal data to:
respond to questions;
investigate account or transaction issues;
process complaints;
communicate decisions;
retain evidence concerning disputes;
protect and exercise legal rights.
6.7 Referral and Founder programmes
We process referral and programme data to:
attribute referrals;
verify qualifying actions;
calculate rewards;
assign badges or status;
prevent programme abuse;
maintain participation records.
6.8 Legal claims and enforcement
We may process personal data to:
enforce the Terms and Conditions;
investigate contractual breaches;
establish, exercise, or defend legal claims;
respond to litigation, regulatory enquiries, or lawful authority requests;
retain evidence concerning fraud, disputes, or unauthorised activity.
6.9 Service maintenance and improvement
We may use technical and aggregated operational information to:
diagnose errors;
repair functionality;
improve security;
test platform updates;
assess performance;
improve the usability and reliability of Voltalix.
We do not use personal data for unrelated purposes without establishing an appropriate legal basis and providing additional information where required.
7. Legal bases for processing
Depending on the purpose, Voltalix relies on one or more of the following legal bases.
7.1 Performance of a contract
Processing is necessary to enter into or perform the agreement between the user and Voltalix, including:
creating and administering an account;
providing OPU services;
operating SCADA functionality;
managing tasks and rewards;
processing deposits and withdrawals;
providing support requested by the user.
7.2 Compliance with legal obligations
Processing may be necessary to comply with obligations concerning:
identity verification;
accounting and transaction records;
tax and corporate records;
fraud prevention;
responses to lawful authority requests;
sanctions and financial-crime controls;
consumer protection;
record retention.
7.3 Legitimate interests
Voltalix may process personal data where necessary for legitimate interests, including:
protecting accounts and platform infrastructure;
preventing fraud and abuse;
investigating suspicious activity;
maintaining accurate operational records;
improving platform security and reliability;
enforcing contractual rights;
defending legal claims.
Before relying on legitimate interests, Voltalix should assess whether those interests are overridden by the user’s rights and freedoms.
7.4 Consent
Where legally required, processing may be based on the user’s consent.
Where processing relies on consent, the user may withdraw it at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.
GDPR Article 6 recognises consent, contractual necessity, legal obligations, and legitimate interests as distinct possible legal bases for processing.
8. Required and optional information
Some personal data is required to create an account or provide a requested service.
Failure to provide required data may prevent Voltalix from:
registering or authenticating the user;
approving KYC;
activating an OPU contract;
granting SCADA access;
processing a deposit or withdrawal;
confirming programme eligibility;
responding to certain account requests.
Where information is optional, this should be indicated through the relevant interface where practical.
9. Automated processing and platform validation
Voltalix uses automated systems to support platform operations, including:
authentication and session validation;
contract eligibility checks;
operational-slot allocation;
task-window eligibility;
task validation;
reward calculations;
duplicate-transaction prevention;
security and fraud indicators.
Some activities may also be reviewed manually.
Voltalix does not intend to rely solely on automated processing to make decisions producing legal or similarly significant effects unless permitted by applicable law and accompanied by any required safeguards.
A user may contact [email protected] to request information or human review where a decision may have been materially affected by an automated process.
10. How we share personal data
Voltalix does not sell personal data to advertisers.
We may disclose personal data only where necessary to the following categories of recipients.
10.1 Service and infrastructure providers
Personal data may be processed by providers supporting:
hosting and server infrastructure;
databases and storage;
email delivery;
security and authentication;
technical maintenance;
payment or transaction processing;
backup and disaster recovery.
These providers should process data only under appropriate contractual and confidentiality obligations.
10.2 Professional advisers
We may disclose relevant information to:
lawyers;
accountants;
auditors;
compliance advisers;
cybersecurity specialists;
insurers.
Disclosure will be limited to what is necessary for the relevant professional service.
10.3 Authorities and legal recipients
We may disclose personal data where required or permitted by law to:
courts;
law-enforcement authorities;
regulatory authorities;
tax authorities;
data-protection authorities;
other competent public bodies.
10.4 Business transfers
If Voltalix or its operations are involved in a merger, acquisition, restructuring, financing, asset transfer, or similar transaction, relevant personal data may be disclosed to professional advisers and prospective or actual participants, subject to suitable safeguards.
10.5 Other users
Limited information may be visible to other users where required for:
referral attribution;
network or rank functionality;
platform activity displays;
programme participation.
Voltalix should avoid publicly displaying sensitive identity, KYC, payment, contact, or security information.
11. International data transfers
Voltalix seeks to process personal data within the European Economic Area where reasonably possible.
However, technical or service providers may process data from other countries. Where personal data is transferred outside the EEA, Voltalix will use an appropriate transfer mechanism where required, such as:
an adequacy decision;
European Commission Standard Contractual Clauses;
another lawful safeguard recognised under applicable data-protection law;
a specific legal exception where applicable.
Users may contact [email protected] for further information about relevant transfer safeguards.
12. Data retention
Voltalix retains personal data only for as long as reasonably necessary for the purpose for which it was collected and for any additional period required to comply with legal obligations, resolve disputes, prevent fraud, and enforce agreements.
The following criteria may apply:
Data category
General retention approach
Account data
Retained while the account remains active and afterwards where required for legal, security, or dispute purposes
Session cookie
Up to 24 hours unless ended earlier
Authentication and security logs
Retained for a period appropriate to security monitoring and incident investigation
KYC records
Retained while required for verification, compliance, fraud prevention, and applicable legal obligations
OPU contract records
Retained for the contract duration and afterwards as part of contractual, accounting, and dispute records
SCADA training and certification
Retained while relevant to operator eligibility and account history
Task submissions and results
Retained for operational history, validation, dispute handling, and fraud prevention
Deposit and withdrawal records
Retained according to accounting, transaction, compliance, and dispute requirements
Referral and promotional records
Retained while the programme is active and afterwards for validation and fraud-prevention purposes
Support correspondence
Retained until the matter is resolved and afterwards where necessary for evidence or service improvement
Language preferences
Retained until changed, cleared, deleted, or replaced
When data is no longer required, it may be deleted, anonymised, or securely restricted.
A deletion request does not necessarily require immediate removal of information that must be retained under law or is needed for legal claims, fraud prevention, or transaction integrity.
13. Data security
Voltalix applies technical and organisational measures designed to protect personal data against:
unauthorised access;
unlawful processing;
accidental loss;
alteration;
destruction;
disclosure;
misuse.
Measures may include:
encrypted connections;
controlled access;
password hashing;
session management;
JSON Web Token authentication;
two-factor authentication;
access logging;
transaction validation;
database and infrastructure protections;
backup procedures;
monitoring and incident response;
role-based access restrictions.
No online service can eliminate every risk. Users must protect their credentials, email accounts, devices, private keys, authentication codes, and withdrawal details.
The GDPR requires personal data to be processed with appropriate security against unauthorised processing and accidental loss, using suitable technical and organisational measures.
14. Personal-data breaches
Where a security incident affects personal data, Voltalix will investigate the incident and take appropriate containment and remediation measures.
Where applicable law requires it, Voltalix will notify:
the competent supervisory authority; and
affected users where the incident is likely to create a high risk to their rights and freedoms.
Users should immediately report suspected account compromise or unauthorised activity to [email protected].
15. User rights
Subject to the conditions and limitations of applicable law, users may have the following rights.
15.1 Right of access
You may request confirmation of whether Voltalix processes your personal data and obtain a copy of relevant data together with information about its use.
15.2 Right to rectification
You may request correction of inaccurate personal data and completion of incomplete data.
15.3 Right to erasure
You may request deletion of personal data where there is no continuing lawful basis for retaining it.
This right may be limited where retention is required for legal obligations, fraud prevention, legal claims, transaction records, or another lawful purpose.
15.4 Right to restriction
You may request that processing be restricted in certain circumstances, including while the accuracy or lawfulness of processing is being assessed.
15.5 Right to data portability
Where processing is based on consent or contract and carried out by automated means, you may request relevant data in a structured, commonly used, machine-readable format.
15.6 Right to object
You may object to processing based on legitimate interests. Voltalix may continue processing where it demonstrates compelling legitimate grounds or where processing is required for legal claims.
15.7 Right to withdraw consent
Where processing is based on consent, you may withdraw that consent at any time.
15.8 Rights regarding automated decisions
Where applicable, you may request human intervention, express your point of view, or challenge a decision based solely on automated processing that produces legal or similarly significant effects.
15.9 Right to lodge a complaint
You may lodge a complaint with the data-protection authority responsible for your habitual residence, place of work, or the location of an alleged infringement.
Users in Italy may contact the Garante per la protezione dei dati personali.
GDPR rights include access to the purposes, data categories, recipients, retention information, and relevant automated decision-making information.
relevant account or transaction identifiers where necessary.
Voltalix may request additional information to verify the requester’s identity. This is intended to prevent unauthorised persons from obtaining, modifying, or deleting another user’s data.
Voltalix will respond within the period required by applicable law. Complex or multiple requests may require additional time where legally permitted.
Requests are generally handled without charge. A reasonable fee may be applied, or a request may be refused, where it is manifestly unfounded or excessive, subject to applicable law.
Closing an account does not automatically require the deletion of all transaction, contractual, KYC, security, and fraud-prevention information.
Data that no longer needs to identify the user may be anonymised where appropriate.
18. Cookies and similar technologies
Voltalix currently uses only essential cookies and browser-storage technologies needed for:
authentication;
security;
session management;
platform functionality;
language preferences.
Voltalix does not currently use advertising, behavioural-profiling, or third-party analytics cookies.
Details are available in the separate Voltalix Cookie Policy.
19. External links
Voltalix may include links to external websites or services.
This Privacy Policy does not govern how independent third parties process personal data after a user leaves Voltalix. Users should review the privacy policies of those third parties before submitting information.
20. Changes to this Privacy Policy
Voltalix may update this Privacy Policy where:
platform functionality changes;
new services or technologies are introduced;
processing purposes change;
service providers change;
legal or regulatory requirements change;
clarification or correction is required.
The updated version will be published on the platform with a revised effective date.
Where a change materially affects the way personal data is processed, Voltalix may provide notice through the account interface or by email.
21. Contact
Questions, complaints, and data-protection requests may be sent to:
