Including the part that most platforms leave out, because leaving it out is what makes the rest unbelievable.
Each account has its own deposit address on the blockchain. When you deposit, the money goes to that address and to no other. It does not pass through a company wallet on the way, and it is never mixed with the funds of another customer or with ours.
The key that places your orders is also able to move funds out of your account. That is not a design flaw we forgot to close, it is what makes an order possible at all: something has to be authorised to act on the balance, or nothing can be bought or sold.
So we are not going to tell you that we cannot touch your money. We can. What we can tell you is what has to happen before anything moves, and that is the paragraph below.
If a platform tells you it has read-only access to an account it also trades on your behalf, one of those two statements is false. Ours is the uncomfortable version.
Four things, and they are technical rather than promissory.
Two-factor authentication on every account, a fresh confirmation before a new withdrawal address is armed, and a session that ends when you close it rather than three weeks later. We will never ask you for your password, your codes or your recovery phrase, by email or otherwise, and any message that does is not from us.
Opening an account requires identity verification. That is not a preference we could waive to be friendlier: an exchange that skips it becomes a laundering route within weeks, and the people it attracts first are the ones you least want sharing an order book with you.
What we collect is what the check requires and nothing beyond it. It is not sold, it is not used to build an advertising profile, and it is not handed to anyone who has not shown us a legal basis for asking.
Write to us before you write about it, and describe what you found. We say this up front so that nobody wastes their time: there is no bug bounty and there is no budget for one. What there is, is a real person who reads the message, a straight answer about whether it is a real issue, and credit if you want it.