This Privacy Policy describes how Everest Market (“we”, “us”, or “our”) handles personal information when you access our website and services. It applies to visitors, registered users, and anyone who interacts with our platform. By using Everest Market, you acknowledge this policy. If you do not agree, please do not use the services. The operator name, legal entity, and primary place of business should be confirmed by your legal counsel and published alongside this document.
1. Information we collect
We may collect the following categories of information, depending on how you use Everest Market: • Account and profile: email address, name or display name, internal user identifiers, referral codes, account status, and verification flags. • Authentication and security: password hashes (we do not store plaintext passwords), optional two-factor authentication (2FA) secrets and backup codes, session data managed through NextAuth, and security-related logs where applicable. • Sign-in with Google: if enabled on our deployment, we may receive your Google account identifier, email, and name from Google when you choose that sign-in method. • Wallet, trading, and financial activity: wallet balances, ledger entries, deposits and withdrawals, trading and position records, funding requests, and related metadata needed to operate the platform. • Know Your Customer (KYC): information and documents you submit for identity verification as required by our processes. • Uploads: images you attach (for example funding proof images), which may be processed and stored using a third-party media service (e.g. Cloudinary). • Communications: in-app messages, notifications, charity donation notes (including optional anonymous donations), and support-related correspondence. • Technical data: IP address, device and browser type, approximate location derived from IP, cookies, and similar technologies as described below. We aim to collect only what is reasonably necessary to provide, secure, and improve the services.
2. How we use your information
We use personal information to: • Create and maintain your account and authenticate you. • Provide trading, wallet, funding, campaigns, AI investing, loans, and other product features you request. • Process transactions, detect fraud and abuse, enforce limits, and comply with legal obligations. • Send transactional and service emails (e.g. verification, security alerts, donation confirmations) using providers such as Resend or SMTP as configured. • Improve reliability, debug issues, and analyze aggregate usage (subject to this policy). • Communicate updates about the service where permitted by law. We do not sell your personal information as a product. We may use processors (subcontractors) strictly to help us deliver the service, as described under “Sharing and processors”.
3. Legal bases (where applicable)
If you are in the European Economic Area, the UK, or similar regions, we may rely on one or more of the following legal bases: performance of a contract with you, legitimate interests (such as security and fraud prevention, balanced against your rights), consent (where we ask for it explicitly), and legal obligation. Where consent is required for specific processing (e.g. certain marketing cookies), you may withdraw it without affecting the lawfulness of processing before withdrawal.
4. Sharing and processors
We may share personal information with: • Infrastructure and database: PostgreSQL databases operated on infrastructure we control (for example dedicated servers or a virtual private server), used to store application data. • Email delivery: Resend or SMTP providers that send messages on our behalf. • Media storage: Cloudinary (or similar) for hosting user-uploaded images. • Authentication: Google, if Google sign-in is enabled. • Hosting, CDN, and security: providers that route traffic or protect the service (e.g. Cloudflare), which may process technical data described in this policy. These parties act on our instructions where required by law and only to the extent needed to provide their service. We do not list every subprocessors change in real time; we will update this policy or a subprocessors page when appropriate.
5. Cookies, local storage, and similar technologies
We and our partners may use cookies and similar technologies for: • Session and authentication (e.g. session cookies for logged-in users). • Language preference (e.g. a locale cookie such as NEXT_LOCALE). • Theme or UI preferences stored in the browser (e.g. light/dark mode). • Security and performance (e.g. as part of hosting or analytics tools allowed by our Content Security Policy). You can control cookies through your browser settings. Blocking essential cookies may prevent parts of the service from working.
6. Data retention
We retain personal information for as long as your account is active and as needed to provide the services, comply with law, resolve disputes, and enforce our agreements. Backup copies may persist for a limited period. Some records (e.g. financial and compliance-related) may be retained longer where the law requires. When retention ends, we delete or anonymize data where feasible.
7. Security
We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit (HTTPS), access controls, and optional 2FA for accounts. No method of transmission or storage is 100% secure; we encourage you to use a strong password and enable 2FA when available.
8. Your rights and choices
Depending on your location, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. To exercise rights, contact us via the support or contact method published in the app (for example the email used for replies to transactional mail). We may need to verify your identity before fulfilling requests.
9. International transfers
Our servers and subprocessors may be located in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) or rely on adequacy decisions. Details can be provided upon request where applicable law requires.
10. Children
Everest Market is not directed at children under the age where they cannot lawfully enter into our terms (often 18, or higher where local law requires). We do not knowingly collect personal information from children. If you believe we have done so, contact us and we will take appropriate steps.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. For material changes, we may provide additional notice (e.g. email or in-app message) where required by law. Continued use after the effective date constitutes acceptance of the updated policy where permitted.
12. Contact
For privacy questions or requests, use the contact or support channel indicated in the application (for example the reply-to address on service emails or your account support area). Replace this section with your official legal entity name, registered address, and privacy contact email after legal review.
This policy is provided for transparency and forms part of the official legal terms and disclosures applicable to the product. Privacy and data protection laws may vary by country and region, including GDPR, UK GDPR, and other applicable regulations. For privacy-related requests, please contact us using the details available in your account area or through our support channels.