XST Privacy Policy

Parent Company

Shenzhou Capital

Version 1.0 — 2025

1. Introduction

XST (“we”, “our”, “us”) values your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our platforms and services, including:

Hetian Jade Digital Asset Ecosystem
XST / JADE Token System
NFT Authentication Certificates
Web3 Wallet & Crypto Mastercard Program
Digital Payment & POS Network
Jade Recycling & Buyback System
Global Retail Store Network
Online Marketplace, AR Try-On, Metaverse Exhibits

By using our services, you agree to the practices described here.

2. Information We Collect

We collect personal and non-personal information in the following ways:

2.1 Personal Information

Full name, date of birth, contact information (email, phone, address)
Government-issued IDs for KYC/AML verification
Passport, driver’s license, or national ID copies
Bank account or payment details (only for in-person verification)
Wallet addresses, private/public key info (encrypted; stored securely)

2.2 Non-Personal Information

Device type, IP address, browser type
Cookies and analytics for website usage
Transaction history metadata (not including private keys)

2.3 User-Generated Content

NFT data submitted by users (artwork, jade documentation)
Feedback, support requests, messages

3. How We Use Your Information

Identity verification (KYC/AML compliance)
Processing face-to-face transactions for tokens, NFTs, or jade-backed assets
Maintaining and improving our platforms
Customer support and dispute resolution
Fraud detection, risk management, and compliance with laws
Analytics and aggregated reporting
Notifications about platform updates, services, or events

Important Face-to-Face Transaction Note: All financial transactions occur in person at XST’s physical locations. Any attempt to make online payments or transfers is not supported and is at the user’s risk. We only store information to facilitate verification or record-keeping for in-person transactions.

4. Legal Basis for Processing

Consent: You provide information voluntarily when using our services.
Legal Obligation: KYC/AML compliance requires processing identity information.
Legitimate Interests: Security, fraud prevention, and platform improvement.

5. How We Share Your Information

We do not sell your personal data. Information may be shared with:

Regulatory authorities or law enforcement if required by law
Shenzhou Capital (parent company) for corporate governance or compliance
Third-party service providers assisting in platform operations (e.g., secure storage, verification)

We ensure third-party partners comply with strict privacy and security standards.

6. Cookies and Tracking Technologies

6.1 Cookies We Use:

Essential Cookies: Necessary for website and platform functionality
Analytics Cookies: Help analyze user behavior for platform improvement
Functional Cookies: Remember preferences and settings
Advertising Cookies: Only for platform marketing purposes (no third-party sale of data)

6.2 User Control:

You can manage or disable cookies through your browser, but some platform features may be limited.

7. Data Storage and Security

All personal and wallet information is stored securely, encrypted at rest and in transit
Access is restricted to authorized personnel only
Regular security audits and penetration tests are conducted
Despite best efforts, no system is 100% secure; users are responsible for protecting private keys and credentials

8. Data Retention

Personal information for KYC/AML purposes is retained as required by law
Transaction and NFT metadata are retained for auditing, compliance, and dispute resolution
Non-essential data is deleted once no longer needed for business or legal purposes

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access your personal data
Correct or update inaccurate information
Request deletion of non-essential data
Withdraw consent for marketing communications
Object to processing for legitimate interests
Request data portability

Requests can be submitted to: privacy@xst.com

10. International Data Transfers

Data may be processed or stored in the UAE or other countries where XST/Shenzhou Capital operate. We take steps to ensure data protection laws are respected during international transfers.

11. Children’s Privacy

XST platforms are not intended for individuals under 18. We do not knowingly collect personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy at any time. Changes will be reflected on our website with the effective date. Continued use of the platform = acceptance of updated Privacy Policy.

13. Contact Information

XST – UAE

Email: privacy@xst.com

Parent Company: Shenzhou Capital