01What we collect
ROXAA is a wallet-first platform. An account is created the first time a wallet signs our login message, so the minimum we hold is:
- Your wallet address. This is your identity on the platform and the key every record is attached to.
- Your member code and referral relationship — who introduced you, and who you have introduced.
- Your activity — positions opened, earnings credited, deposits claimed and withdrawals requested.
- The IP address recorded at signup and at each login, used to detect duplicate accounts and abuse.
A display name and email address are optional. If you supply them, they are used to contact you about your account and nothing else.
We never hold your private key or seed phrase. Signing our login message proves you control the wallet. It costs no gas and authorises no transaction. Nobody at ROXAA can move funds out of your wallet, and any message asking you for a seed phrase is not from us.
02How your data is used
Your data is used to run the platform you signed up for:
- Calculating and crediting the income your plan entitles you to.
- Attributing direct, level and royalty income through your team.
- Verifying deposits on-chain and processing withdrawal requests.
- Answering your support tickets.
- Detecting fraud, duplicate accounts and abuse of the plan.
We do not sell your data, and we do not share it with advertisers.
03Who can see your data
Within your team, uplines can see a member’s code, join date, activity status and business volume — the figures their own income is calculated from. Wallet addresses and contact details are never exposed to other members, including through the referral-code lookup on the signup screen.
Our administrators can see account records in order to review deposits, release withdrawals and answer support tickets. Every privileged action an administrator takes is written to an audit trail with their identity, the record touched and the time.
Support staff can open a read-only view of a member’s dashboard to reproduce a problem. That session is technically incapable of buying, withdrawing or transferring on your behalf — the restriction is enforced by the server, not by hiding buttons.
04What is public on the blockchain
Deposits and withdrawals are USDT transfers on BNB Smart Chain (BEP-20). Blockchain transactions are public and permanent by design. Anyone can see the amount, the sending and receiving addresses and the time of any transfer, on ROXAA or anywhere else.
That is a property of the network, not a choice we made, and it is outside our control. If you want distance between your on-chain activity and your identity, consider which address you use.
05Anti-money laundering
ROXAA does not knowingly accept funds derived from criminal activity, and we monitor for patterns associated with laundering. We may:
- Request evidence of the source of funds before releasing a withdrawal.
- Hold, decline or reverse a transaction that appears connected to sanctioned parties, fraud or criminal proceeds.
- Suspend an account pending review, and withhold withdrawals for the duration of that review.
- Report activity to the relevant authorities where we are required to, without being permitted to tell you that we have done so.
Deposits are only ever credited from the wallet that made them. Third-party funding — depositing from a wallet that is not yours — is not permitted and may result in the funds being frozen.
Using ROXAA to layer, disguise or move the proceeds of crime will end your account and may end with a report to law enforcement. There is no appeal process for this.
06How your data is protected
Sessions are signed tokens with a limited lifetime; there is no password on a member account to be stolen or reused. Administrative and developer access sit behind separate credentials, so an operator account cannot reach the controls that govern platform economics.
No system is perfectly secure, and we will not pretend otherwise. What we can say is that a breach of our systems cannot move funds out of your wallet, because we hold nothing that would allow it.
07How long we keep it
Financial records — deposits, earnings, withdrawals and the ledger behind them — are kept for as long as we are required to keep them, and are not deleted on request. They are the record of money that moved, and both you and we may need them.
Optional details such as your display name and email can be removed from your profile at any time. Support conversations are retained while the ticket is open and for a reasonable period afterwards.
08Your choices
You can, at any time:
- See everything credited to you, and its source, from your dashboard.
- Change or remove the optional details on your profile.
- Ask us what we hold about you, through a support ticket.
- Stop using the platform and withdraw your available balance.
What you cannot do is erase the financial record of transactions that already happened, or remove data from the blockchain. Neither is within our power.
09Changes to this policy
If this policy changes materially we will post the update here and announce it on your dashboard. Continuing to use ROXAA after a change means you accept the updated policy.
Questions about anything on this page can be raised as a support ticket from your dashboard.