Service rules

CORE (co-re.kz) is operated by ТОО «KORE FINANCE», Astana, Kazakhstan. By using the service you accept these terms.

What CORE does

CORE compares the rates of several external exchange providers, creates the exchange order with the chosen one, and shows you its status.

CORE does not receive or hold your coins, is not a party to the exchange, and does not exchange them itself. An external provider runs the exchange and is recorded on the deal. Your deposit goes to them directly.

The provider's terms

The provider running your exchange has its own terms. Pressing the confirm button accepts them; we record that acceptance and its version. We name the provider before you confirm where its terms require it, and on your request after the exchange.

The provider may ask for documents, pause the exchange, or send the coins back less the network fee. Those decisions are theirs, not CORE's.

What you check

Blockchain transactions are irreversible. A sent transfer cannot be recalled.

• the payout address and its network - sending to the wrong network is irreversible and the coins are lost;
• the memo or tag, if your wallet or exchange requires one;
• the refund address - it is optional, but without it a refund has to be sorted out with the provider by hand.

Rate and amount

The rate floats. The amount you see is the provider's estimate at the time of the request. The final amount is set when the provider receives your deposit and may differ.

CORE adds no markup on top of the provider's rate. We are paid by the provider, and that is already inside their rate.

Timing

CORE does not promise how long an exchange takes: that depends on the networks and on the provider's processing. The current stage is shown on the exchange page.

Refusal of service

We may refuse an exchange or suspend access - in particular where an account is marked blocked, or on clear signs of unlawful use.

Responsibility

CORE is responsible for its part: comparing offers, creating the order, recording the provider on the deal, and showing the status. Execution, payout and any deductions are the provider's responsibility under its own terms.

CORE is not responsible for coins lost to a wrong address, a wrong network, a missing memo, or the provider's actions.

Changes

We may change these terms. The effective date is shown above; continuing to use the service after a change accepts the new version.

Data is processed by ТОО «KORE FINANCE», Astana, Kazakhstan.

What we store

• exchange data: assets and networks, amounts, the payout address, the refund address if you gave one, the memo, status and timestamps;
• your email - only if you created an account;
• support conversations: the subject and the message text;
• the provider's responses about your exchange - encrypted;
• your IP address - to rate-limit requests and keep bots out. It is kept as a request counter, is not tied to your exchange, and is used for nothing else.

Cookies

Only the ones the site cannot work without. There is no analytics or advertising cookie, which is why there is no consent banner - there would be nothing in it.

Language (core_locale) - one year. Sign-in session - until you sign out.

Time zone (core_tz) - one year. Your browser sets it, not the server: some executors require a time zone alongside the request, and without this cookie they simply do not take part in the comparison. The zone travels nowhere except that request.

Account recovery (core_recovery_grant) - 15 minutes, and only while you are following a recovery link from an email. It proves the email was opened by you, and expires on its own.

Partner tag (core_ref) - 30 days, and only if you arrived through a partner link. It holds the partner's code so the exchange can be credited to them, is unreadable to page scripts, and contains nothing about you. Arrive without such a link and it does not exist.

Any of them can be deleted in your browser: the site keeps working, it will just detect your language and zone again, and the partner tag will be gone.

What we do not do

• we run no analytics and no trackers: there is no Google Analytics, no Metrika, no pixels, nothing of the kind on this site;
• we do not verify identity (KYC) and do not ask you for documents;
• we do not sell or share your data for advertising.

Who we share with, and why

• the exchange provider - what it needs to execute: the pair, the amount, the payout and refund addresses;
• the contractors that keep the service running: hosting, the database and account sign-in, email delivery, bot protection on forms. They process data only on our instructions and only for those tasks;
• the messenger our operator receives service alerts in: exchange and ticket identifiers only, never your messages, amounts or addresses;
• government authorities - only where the law or an official request requires it; we do not disclose data on our own initiative.

An account is optional

Exchanging works without registration. Without an account we do not have your email, and the exchange's own link is the only access to it - keep it and do not pass it to anyone.

Protection

Provider secrets and raw provider responses are stored encrypted. Exchange data is not readable directly by anonymous or ordinary signed-in users; access belongs to the service and the operator.

We never ask for a seed phrase or a private key. Neither we nor the provider needs them.

Retention

We keep exchange data for as long as we need it to reconstruct the operation and to meet record-keeping obligations. Accounts and conversations are kept while the account exists.

Your rights

You can ask what data we hold about you and ask us to correct or delete it, where that does not conflict with our record-keeping duties. Write to business@co-re.kz - you do not need an exchange for this.

CORE is non-custodial: we do not receive or hold client coins. An external provider runs the exchange; it is recorded on the deal and named on your request.

Who performs the checks

Source-of-funds and sanctions screening (AML/KYT) is performed by the provider running your exchange, under its own rules.

CORE does not verify identity (KYC) and does not request documents. The provider may request them from you directly.

What CORE checks before creating an exchange

• the payout address matches the chosen network;
• a memo or tag is present where the asset is not credited without one;
• the account is not marked blocked.

What the provider may do

The provider may pause the exchange, ask for documents, or send the coins back less the network fee. This is stated in the terms you accept on confirmation and reflected in the exchange status.

Prohibited use

The service must not be used for money laundering, sanctions evasion, or any unlawful operation. We may refuse service and block access.

Questions

For questions about checks on a specific exchange, write to support from that exchange's page.