Privacy Policy

1. Introduction

This Privacy Policy ("Policy") explains how Metalium ("we," "us," "our," or "Metalium") collects, uses, stores, shares, and protects your personal data when you access or use the Metalium platform, including our website, mobile applications, and all related services (collectively, the "Platform"). Metalium is Pakistan's first peer-to-peer marketplace for trading physical Gold, Silver, and Copper.

By creating an Account or using any part of the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any part of this Policy, you must not access or use the Platform.

We believe in being straightforward about data. We collect only what we need to run the Platform, we never sell your data, and we do not track you across the internet.

2. Definitions

3. What We Collect and Why

3.1 Account Information

We collect your email address, phone number (+92 format), full legal name, date of birth, CNIC number, display username, and password. Your password is cryptographically hashed and is never stored or accessible in readable form.

Purpose: Account creation, authentication, login security, and enabling communication between trade counterparties.

3.2 Identity Documents

We require images of the front and back of your valid CNIC (Computerized National Identity Card) during the registration process. Accepted formats include JPEG, PNG, and WebP.

Purpose: Identity verification (KYC) and fraud prevention. This requirement ensures that every User on the Platform is a real, verified individual. This is a mandatory condition of Account registration and a core security safeguard of the Platform.

3.3 Location

We collect your selected city and area from a predefined list of locations across Pakistan. We do not collect GPS coordinates, precise geolocation data, or any data that tracks your physical movements.

Purpose: Matching you with buyers and sellers in your geographic vicinity.

3.4 Trade Activity

We record your Listings, Trades, trade confirmations, Credit Balance, and complete transaction history on the Platform.

Purpose: Core Platform functionality, including processing Trades, resolving Disputes, and keeping accurate records.

3.5 Messages

Communications sent through the Platform's in-app chat between trade counterparties are stored on our servers. Messages are limited in length per the Platform's operational parameters.

Purpose: Facilitating trade coordination and serving as evidence in the event of a Dispute.

3.6 Financial Information

We collect deposit amounts, payment screenshots (proof of bank transfer), Credit Balance transaction records, and withdrawal request details.

Purpose: Processing deposits, tracking Credit Balance, processing withdrawals of unallocated funds, and maintaining financial records as required by applicable law.

3.7 Referral Data

If you join the Platform through a referral link or code, we record the referral relationship between your Account and the referring User's Account.

Purpose: Administering the referral program and crediting referral bonuses to both parties.

3.8 Push Notification Tokens

If you enable push notifications, we store a device-specific notification token provided by your browser or operating system. This token does not identify you personally and cannot be used to track your browsing activity.

Purpose: Sending you real-time notifications about trade activity, disputes, and Account-related events.

4. What We Do Not Collect

Metalium does not collect, log, store, or process any of the following:

5. Email Communications

By creating an Account, you consent to receiving transactional emails from Metalium related to your Account activity, including but not limited to email verification codes, password reset links, trade notifications, dispute updates, and billing notices. These emails are essential to the operation of your Account and cannot be opted out of while your Account remains active.

From time to time, we may also send you re-engagement or informational emails if your Account is inactive or if you have not completed the identity verification process. These communications are sent to the email address associated with your Account and are intended to help you complete your registration or inform you of Platform updates. We do not share your email address with third parties for marketing purposes.

6. How Your Data Is Shared

5.1 With Trade Counterparties

When you enter an Active Trade, the following information is shared with the other party to facilitate coordination of the in-person exchange: your display username, phone number, and selected area. This information is shared only during an Active Trade and only with the counterparty to that specific Trade.

5.2 With Metalium Administrators

Metalium's authorized administrative personnel have access to trade details, in-app chat logs, Credit Balance transactions, and identity documents. This access is strictly limited to and used solely for the following purposes: Dispute resolution, fraud investigation and prevention, KYC verification, and general Platform operations and integrity maintenance.

5.3 With Law Enforcement and Regulatory Authorities

We may disclose your Personal Data to law enforcement, regulatory, or governmental authorities if: (a) we are required to do so by applicable Pakistani law, regulation, legal process, or enforceable governmental request; (b) we have a good-faith belief that disclosure is necessary to protect the safety, rights, or property of Metalium, our Users, or the public; or (c) we have a good-faith belief that disclosure is necessary to detect, prevent, or address fraud, security issues, or technical problems.

5.4 No Sale or Commercial Sharing

We do not sell, rent, license, lease, or otherwise share your Personal Data with any third party for marketing, advertising, profiling, data brokerage, or any commercial purpose. This is a core operating principle of Metalium and is not subject to change without prior notice to all affected Users.

5.5 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, bankruptcy, or similar corporate transaction involving Metalium, your Personal Data may be transferred to the successor entity as part of the transaction. In such event, we will notify you before your Personal Data becomes subject to a different privacy policy.

5.6 Aggregated and De-Identified Data

We may create aggregated, anonymized, or de-identified data derived from your Personal Data for internal analytics, research, and Platform improvement. Such data does not identify you individually and is not subject to the restrictions of this Policy.

7. Cookies

Metalium uses only essential, strictly necessary session cookies required to maintain your authenticated session state and keep you logged in. We do not use:

There is nothing to opt out of because there is nothing optional to opt into.

8. Data Security

We implement and maintain industry-standard technical and organizational security measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. All connections to the Platform are encrypted, and passwords are encrypted and never stored in readable form. Identity documents are stored with access restricted to authorized personnel only.

While we implement robust security measures, no method of electronic transmission or storage is perfectly secure. We cannot guarantee absolute security of your data. We are committed to responding swiftly and transparently in the unlikely event of a security incident, and we will notify affected Users as required by applicable law.

9. Data Retention

8.1 Active Accounts

Your Account data is retained for as long as your Account remains active and in good standing on the Platform.

8.2 Closed Accounts

Upon Account closure, we will delete your Personal Data within a reasonable timeframe, subject to the following exceptions:

8.3 Legal Requirements

Notwithstanding any request for deletion, we may retain Personal Data to the extent required by applicable law, regulation, or legal obligation, or to protect our legitimate interests in legal proceedings.

10. Your Rights

Subject to applicable law and the limitations set forth in this Policy, you have the following rights with respect to your Personal Data:

11. Children

Metalium is not intended for use by anyone under the age of eighteen (18). We do not knowingly collect, solicit, or store Personal Data from individuals under eighteen (18) years of age. If we become aware that a User is under eighteen (18), we will promptly suspend their Account and delete all associated Personal Data. If you believe a minor is using the Platform, please contact us immediately through our support channels.

12. International Data

The Platform is operated from Pakistan and is intended for use by residents of Pakistan. Your Personal Data is stored and processed within Pakistan. By using the Platform, you consent to the storage and processing of your data within Pakistan, subject to the applicable laws of Pakistan.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or operational processes. When we make material changes, we will notify you via email or a prominent notice on the Platform at least seven (7) days before the changes take effect. Your continued use of the Platform after the effective date of the revised Policy constitutes your acceptance of the updated Policy.

We encourage you to review this page periodically, but we will always make sure you are notified when something material changes.

14. Severability

If any provision of this Policy is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such invalidity shall not affect the remaining provisions, which shall remain in full force and effect.

15. Governing Law

This Policy is governed by and construed in accordance with the laws of Pakistan, without regard to its conflict of law principles.

16. Contact

For questions, concerns, or requests regarding this Privacy Policy or your Personal Data, please contact us through the Platform's official support channels.