Privacy policy
Last updated: 15 October 2026
1. Who is responsible
AsicProfit (asicprofit.com) is operated by CircleHash LLC, 701 Tillery Street, Unit 12 #2503, Austin, TX 78702, United States, a limited liability company organised under the laws of the State of Wyoming ("we"). We decide how your personal data is used (the "controller"). Privacy questions: privacy@asicprofit.com.
2. What we collect
- Account: your email address and, if you give it, your name.
- Verification (only if you apply): full name, company name, website, country, phone, your role, the company's legal name, registration number, registered address, VAT/tax ID, and documents you upload (for example a trade licence). We also keep the result of sanctions screening.
- Listings: what you publish as a Vendor (company profile, offers, hosting locations). Listings are public by design.
- Messages: what you send us through the contact form or by email, and our replies.
- Technical data: IP address, browser and device type, pages requested and times, recorded in server logs by our hosting provider for security and troubleshooting.
- Settings in your browser: your currency, electricity price, theme and language are stored in your browser's local storage only. They are not sent to us as personal data.
3. Cookies
We use one essential cookie, which keeps you signed in (HttpOnly, secure, 30 days). We do not use advertising or cross-site tracking cookies. We count visits with Cloudflare Web Analytics, which sets no cookies, does not track you across sites and builds no profile of you: it reports aggregate figures only (pages viewed, referring site, country, browser and device type). No consent banner is needed for it.
4. Why we use it, and on what legal basis
- Running your account and listings: to provide the service you asked for (contract).
- Verifying people and companies, screening against sanctions lists, preventing fraud and abuse, keeping an audit trail of admin decisions: our legitimate interest in a trustworthy marketplace, and legal obligations (U.S. sanctions law).
- Answering your messages and sending service emails (sign-in links, verification decisions, moderation notices): contract and legitimate interest.
- Product news or marketing emails: only with your consent, and you can unsubscribe at any time.
5. Who we share it with
- Service providers that process data for us under contract: Cloudflare, Inc. (hosting, database, content delivery, email sending), and SiteGround (our company email mailboxes).
- The public: your company profile and listings, once published.
- Authorities or courts, when the law requires it or to protect rights and safety.
- A buyer of our business, if AsicProfit is sold or merged, under the same protections.
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
6. International transfers
We are based in the United States and our providers may process data in the U.S. and other countries. Where EU/UK data protection law applies, transfers rely on the EU-U.S. Data Privacy Framework where the recipient is certified, or on Standard Contractual Clauses.
7. How long we keep it
- Account data: while your account exists, then deleted within 30 days of closure (except what we must keep, below).
- Verification data and documents: while you are a Vendor and for 24 months after the decision or after you stop listing, for fraud prevention and legal defence; sanctions-screening records as long as the law requires.
- Admin audit log: 36 months.
- Server logs: 30 days.
- Messages: 24 months.
8. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or California's CCPA/CPRA), you can ask us for access to your data, a copy in a portable format, correction, deletion, restriction, or object to processing based on legitimate interests, and withdraw consent at any time. Write to privacy@asicprofit.com; we answer within one month (45 days for California requests). We will not discriminate against you for using these rights. If you are in the EU/UK you may also complain to your data protection authority.
9. Security
Passwords are not used: you sign in with single-use links that expire after 30 minutes, or with your Google account. If you choose Google, we receive only your name and your verified email address from Google, and use them only to sign you in. Sessions use secure, HttpOnly cookies. Verification documents are only available to our administrators, and every administrative action is logged. No system is perfectly secure; report issues to security@asicprofit.com.
10. Children
AsicProfit is not intended for anyone under 18, and we do not knowingly collect their data.
11. Changes
We will post updates here and, for material changes, notify account holders by email.