Mexas Wallet legal
Privacy Policy
Effective date: May 21, 2025
Thank you for using Mexas Wallet (the “Application”), developed and operated by Sixtant Incorporated (“Sixtant,” “we,” “us,” or “our”). Protecting your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you install or use the Application or interact with any related service (the “Policy”).
If you have questions or concerns, contact us at legal@mexaswallet.com.
1. Who we are (Data controller)
Sixtant is a company incorporated in the British Virgin Islands. For purposes of applicable data-protection laws—including the European Union General Data Protection Regulation (GDPR) and similar rules in other jurisdictions—Sixtant acts as the data controller for personal information collected through the Services.
2. Scope of this Policy
This Policy applies to personal information we collect through:
- The Mexas Wallet mobile application, including iOS, Android, and any other versions we publish;
- In-app analytics and diagnostics;
- Your direct communications with us, such as support requests sent by email; and
- Our official social-media channels or community forums when we direct you to this Policy.
This Policy does not apply to information collected by third-party websites, decentralized applications (dApps), or blockchain networks that you choose to use through the Application. Those third parties manage their own privacy practices.
3. Information we collect (minimally) and why we use it
The Application is designed as a non-custodial wallet: we do not collect or have access to your private keys, recovery phrases, or the contents of your on-chain transactions. We collect only the minimum data necessary to operate and improve the Application for the purposes described below.
| Category | Examples | Purpose |
|---|---|---|
| Diagnostic and usage data (automatic) | Device model, operating-system version, app version, language, timestamp, screens visited, anonymized crash logs, and approximate location (country or region) | App operation, troubleshooting, and performance analytics |
| Contact data (provided by you) | Email address, name if included, and the contents of messages you send us | Customer support and incident resolution |
| Push-notification tokens (optional) | Device notification token | Enabling optional push notifications |
| Aggregate metrics | Aggregate, anonymous statistics, such as the number of active wallets by version | Product planning |
We do not intentionally collect:
- Biometric identifiers, government-issued documents, or precise geolocation;
- Private keys, seed phrases, or raw blockchain transactions; or
- Sensitive personal information as defined by the GDPR, CCPA/CPRA, or similar regulations.
4. How we use your information
We use the limited information we collect to:
- Provide, operate, and maintain the Application and its services;
- Diagnose, troubleshoot, and correct errors or failures;
- Understand how the Application is used and improve features and the user experience;
- Communicate with you, including responding to questions or support requests;
- Send push or in-app notifications to which you voluntarily subscribe;
- Detect, prevent, and address fraud, security issues, or technical incidents; and
- Comply with legal obligations and enforce our Terms of Service.
We do not sell or rent your personal information to third parties.
5. Sharing and disclosure
We share information only in the following limited circumstances:
- Service providers. We may share your data with carefully selected third-party providers that perform services essential to our operations, such as cloud infrastructure and error diagnostics. These providers act as data processors under agreements that require confidentiality and appropriate protection of personal data in accordance with applicable law. These services include, without limitation, Google Firebase Crashlytics, Sentry, and Amazon Web Services (AWS).
- Legal compliance. We may disclose information when required by law, in response to valid legal requests such as court orders, to enforce our rights, to protect users, or to investigate fraud.
- Corporate transactions. If a merger, acquisition, reorganization, or asset sale occurs, your information may be transferred as part of the transaction—for example, to affiliates, subsidiaries, holding companies, or another resulting entity—subject to the commitments in this Policy.
- With your consent. We may share information with third parties when you expressly instruct us to do so.
6. International data transfers
Because we and our providers operate in multiple countries, your information may be transferred to and processed in jurisdictions other than your own, where data-protection laws may differ. When required, we use appropriate safeguards under applicable regulations—such as Standard Contractual Clauses approved by the European Commission—to protect those transfers.
7. Data security
We implement reasonable technical and organizational measures to protect information under our control against loss, misuse, and unauthorized access. These measures include encryption in transit (TLS), restricted access, the principle of least privilege, and periodic security reviews. However, no internet-based service can guarantee absolute security; you use the Application at your own risk.
8. Data retention
We retain personal information only for as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law, such as for tax or accounting obligations. Diagnostic data is retained for no more than 24 months and is then deleted or retained only in aggregate form. Support emails or tickets are retained for up to five years or until you request their deletion, whichever occurs first.
9. Your privacy rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access and portability: request a copy of the data we hold about you;
- Correction: request correction of inaccurate or incomplete data;
- Deletion: request deletion of your data (the “right to be forgotten”);
- Restriction or objection: restrict or object to certain processing;
- Withdrawal of consent: withdraw consent at any time when processing is based on consent; and
- Complaint: lodge a complaint with your local data-protection authority.
To exercise your rights, email legal@mexaswallet.com. We may ask you to verify your identity before processing the request.
10. Children’s privacy
The Application’s services are not directed to children under 16. We do not knowingly collect personal information from children. If we discover that we have collected a child’s data, we will delete it promptly. Parents or guardians who believe that we hold a child’s data may contact us.
11. Changes to this Privacy Policy
We may update this Policy periodically. We will publish the updated version in the Application and revise the “Effective date.” We may also notify you with a prominent notice or push notification. Your continued use of the services after an update constitutes acceptance of the changes.
12. Cookies, web beacons, and similar technologies
The Application may use tracking technologies. You can manage your acceptance of those technologies directly in your browser preferences. If you choose to block them, you may be unable to access some Application content.
13. Contact
If you have questions about this Privacy Policy or our data practices, contact our privacy team: