8.3 Data Usage

General Principles of Data Usage We are committed to using your data transparently and only for the purposes outlined in this policy. Our data usage practices are governed by the need to provide and maintain our services, ensure security and compliance, and continuously improve our platforms.

2. Data Usage on the GroveX Exchange For services provided by GroveX Pty Ltd, your personal and transactional data are used for the following purposes:

• To Provide Services: To create and manage your account, facilitate the buying, selling, and transfer of digital assets, and provide customer support.

• For Security and Fraud Prevention: To verify your identity, monitor for and prevent fraudulent activity, unauthorised access to your account, and other security breaches.

• For Legal and Regulatory Compliance: To fulfil our obligations for Know-Your-Customer (KYC), Anti-Money Laundering (AML), and other legal and reporting requirements under Australian and international law.

• To Improve and Personalise Services: To analyse user behaviour and platform usage in an aggregated and anonymised format to enhance our user interface, features, and overall service quality.

• For Communication: To send essential service-related updates, security alerts, and, with your explicit consent, marketing and promotional materials.

3. Data Usage on the GRX Chain Blockchain For services provided by GRXCHAIN limited, data usage is fundamentally different due to the public nature of the blockchain.

• On-Chain Data is Public: All transactions, including the sender's and receiver's wallet addresses, timestamps, and amounts, are permanently recorded on the GRX Chain blockchain and are publicly viewable via the block explorer (GRXscan.io). This is a core feature of the technology.

• Off-Chain Data: Any personal data you provide to GroveX, such as your identity documents for KYC, is stored securely off-chain and is not published on the GRX Chain. We do not use your private keys or have access to the funds in your non-custodial wallet.

4. Data Sharing We will only share your personal data with third parties when it is necessary to provide our services, for legal compliance, or to protect our users. This includes sharing with trusted service providers who assist with operations (e.g., payment processing, identity verification), and with regulators or law enforcement when legally required to do so.

5. Data Retention We will retain your personal information for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your account and for a period thereafter as required by law for record-keeping and compliance purposes.

6. Your Control You have the right to request access to your personal data, have it corrected if it is inaccurate, or request its deletion, subject to our legal and regulatory obligations to retain certain information.