Privacy Policy and Data Protection Framework – Redmont Vaultex Version 5.0 – Last updated: April 23, 2026

Article 1: Identification of the Data Controller These privacy policies describe the strict data processing protocols maintained by Redmont Vaultex ("the Platform", "we", "us" or "our"), with its head office at Dronning Eufemias gate 16, 0191 Oslo, Norway. We act as the data controller in accordance with the General Data Protection Regulation (EU GDPR) and the Norwegian Personal Data Act. To ensure absolute data integrity, we have appointed a dedicated Data Protection Officer (DPO) who can be contacted at [email protected].

Article 2: Categories of Personal Information Collected In accordance with the principle of data minimization, we collect:

Identity Metrics: Full legal name, date of birth, nationality, and publicly issued identification for mandatory KYC/AML verification.

Contact Information: Verified email address, active mobile number, and confirmed residential address.

Financial Telemetry: Source of wealth, digital asset wallet addresses, and transaction history.

Digital Footprint: IP addresses, device hardware specifications, and detailed interaction logs with our AI interface.

Article 3: Legal Basis for Processing Our collection and use of information is based on:

Contractual Necessity: Crucial for managing your account and delivering our services.

Legal Obligations: Compliance with the Norwegian Anti-Money Laundering Act and relevant financial regulations.

Legitimate Business Interests: Proactive fraud prevention and strengthening network security.

Explicit Consent: For personalized market insights and optional analytical cookies.

Article 4: Advanced Security and Sovereignty * Encryption: All stored data is secured using AES-256 cryptographic protocols.

Transfer: Secured via TLS 1.3 end-to-end encryption.

Hosting: Data is stored exclusively on redundant, secure servers within the EEA, guaranteeing full protection under European data sovereignty laws.

Article 5: Retention and Your Rights We retain identity and financial documentation for a minimum of five (5) to seven (7) years after account termination to meet requirements from Norwegian authorities. Under GDPR, you have the right to access, rectify, erase, and port your data. Requests can be sent to [email protected]. You also have the right to lodge a complaint with the Norwegian Data Protection Authority.