Privacy Policy
QUSD mint and redeem · QUANTVESTRIX, INC. · Last updated 18 September 2026
Controller
QUANTVESTRIX, INC., 2828 E Trinity Mills Road, Carrollton, Texas 75006, United States, is the controller of the data described here. Contact: support@quantvestrix.com.
The short version
- We never receive your private key, seed, or recovery phrase. It is not collected, so it cannot be stored or leaked by us.
- We hold what is needed to complete and account for a mint or redeem session. Most of it is already public on a blockchain.
- We do not sell your data, and we do not run advertising or third-party analytics trackers on the mint and redeem pages.
What we actually store
| Data | Why |
|---|---|
| Your ledger address (for example your XRP Ledger r... account) | To know who opened the session and where coins or funds are delivered |
| Session record: session id, kind (mint or redeem), state, amount, asset, destination tag, open time, expiry, opening ledger index | To run the session, expire it, and reconcile it afterwards |
| Delivery instruction you supply (delivery type, destination, routing reference) | To settle the dollar or asset leg you asked for |
| Transaction hashes and ledger indexes | Proof the deposit, delivery, or burn happened |
| Settlement identifiers generated for your transaction | To trace a payment end to end and answer a query about it later |
| Server logs of requests to the service, which include IP address, timestamp, and request path | Operations, abuse prevention, and incident investigation |
| Webhook notices received from Xaman about a signing request you initiated | To learn whether you signed, declined, or let it lapse |
| Your email address and message, if you write to support | To answer you |
If you use Sign in with Xaman, we receive your XRP Ledger account address and the confirmation that you controlled it at that moment. We do not receive your key, your device contents, your other accounts, or your Xaman account credentials.
What we do not collect
Private keys, seeds, recovery phrases, wallet PINs or biometrics; your contacts, photos, or files; browsing activity outside this service.
The public-ledger reality
Blockchains are public and permanent. Once a deposit, delivery, or burn is written to a ledger, the address, amount, destination tag, and timing are visible to anyone, forever, and neither you nor we can delete or edit that record. Our privacy obligations apply to the data we hold; they cannot apply to a public ledger.
Who else sees it
- Payment and settlement providers we route your chosen delivery leg through, limited to what that leg needs.
- XRPL Labs, operator of Xaman, when you sign or sign in through Xaman, under their own privacy policy.
- Infrastructure providers that host the service.
- Authorities, where we are legally required to disclose, or to establish or defend a legal claim.
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
Retention
Session, settlement, and compliance records are retained for the period required by applicable financial recordkeeping law, which is generally five years after the transaction, and longer where a legal hold applies. Server logs are retained for a shorter operational period. Support correspondence is kept as long as needed to resolve the matter and to evidence its resolution.
Your rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to processing, and to complain to your supervisory authority. Write to support@quantvestrix.com and we will respond within the time your law allows. Two limits are real and we will not pretend otherwise: we cannot erase a public blockchain record, and we cannot delete records we are legally required to retain.
Security and transfers
The service is served over TLS and access to session data is restricted. No system is perfectly secure, and we do not claim otherwise. Data is processed in the United States; if you are outside the United States, using the service involves transferring your data there.
Children
The service is not directed to, and may not be used by, anyone under 18.
Changes
We may update this policy; the effective date above changes when we do.