Account Security Policy

Legal

Account Security Policy.

Responsibilities and controls to protect accounts, devices, access, sessions, and operations within the ecosystem.

Account security is a shared responsibility.

This Account Security Policy establishes user responsibilities and the measures INNOVAPPSOFT LLC may apply to protect accounts, credentials, devices, sessions, operations, balances, KeyCoin, P2P, and related services.

Account Security Contact

User responsibility

Users are responsible for keeping their account, password, device, sessions, authentication methods, and any access information secure.

All activity performed from an account may be considered the responsibility of the account holder, including transfers, purchases, P2P operations, KeyCoin use, settings changes, and actions performed from linked devices or sessions.

Users must notify through platform-enabled channels if they suspect unauthorized access, device loss, credential theft, unknown activity, or security compromise.

→

Credentials and access

Users must use secure credentials, avoid sharing passwords, avoid reusing compromised keys, and not allow third parties to access their account.

Selling, lending, renting, assigning, transferring, or allowing another person to use an account is prohibited.

INNOVAPPSOFT LLC should not be considered responsible for access caused by user negligence, shared credentials, compromised devices, malware, phishing, or unsafe networks.

→

Devices and sessions

The platform may collect and analyze technical information from devices, sessions, IPs, operating system, app version, internal identifiers, and activity to protect accounts and prevent fraud.

We may limit, close, invalidate, or review sessions when suspicious activity, unusual device changes, access from inconsistent locations, risky IPs, or abuse-related patterns are detected.

Users must close unrecognized sessions and keep devices protected with lock screens, updates, trusted software, and reasonable security measures.

→

Authentication, KYC, and additional controls

We may require additional authentication, 2FA verification, security confirmations, device validations, KYC verification, or additional documentation before allowing certain operations.

These measures may apply to purchases, transfers, P2P operations, sensitive changes, withdrawals if enabled, information changes, new access, account recovery, or risk activity.

Refusal to complete security or KYC controls may result in restrictions, temporary blocking, transaction rejection, or account suspension.

→

Suspicious access

Access may be considered suspicious when there is an unusual change in location, device, IP, behavior, connection method, browsing pattern, or attempt to evade controls.

The use of VPNs, proxies, Tor, anonymous networks, data center IPs, or IP-hiding tools is prohibited and may trigger restrictions, blocks, manual review, or suspension.

Repeated login attempts, frequent session changes, automated activity, abnormal technical patterns, or fraud-related access may also be treated as risk signals.

→

Sensitive operations

Certain operations may be considered sensitive, including internal transfers, P2P operations, digital product purchases, KeyCoin use, top-ups, account changes, KYC verification, and security modifications.

INNOVAPPSOFT LLC may pause, block, or request additional confirmation before processing sensitive operations when risk, unusual activity, dispute, violation, or fraud indicators exist.

Approval of a sensitive operation may depend on identity verification, internal review, AML/CTF controls, external provider availability, or technical validations.

→

Account recovery

Account recovery may require additional validations to confirm the identity of the account holder.

We may request account information, KYC verification, device checks, activity history, internal confirmations, or any other element necessary to protect the user and the ecosystem.

If ownership cannot be sufficiently verified, INNOVAPPSOFT LLC may reject or limit the recovery process.

→

Unauthorized use

Users must review their account and report unknown activity as soon as it is detected.

INNOVAPPSOFT LLC may review unauthorized use cases but does not guarantee reversal of operations, balance recovery, or favorable resolution when an operation has already been completed, delivered, or processed by third parties.

Responsibility may fall on the user when unauthorized access results from shared credentials, phishing, negligence, malware, unsafe devices, or failure to follow basic security measures.

→

Preventive blocking

INNOVAPPSOFT LLC may apply preventive blocks, temporary restrictions, balance holds, session closure, token invalidation, or feature limitations to protect accounts, balances, and operations.

These measures may be applied without prior notice when there is risk of fraud, unauthorized access, suspicious activity, policy violation, investigation, chargeback, AML/CTF review, or legal requirement.

A preventive block does not confirm fraud; it is a security measure while a review is completed.

→

Updates to this policy

INNOVAPPSOFT LLC may modify this Account Security Policy at any time to adapt it to technical, operational, legal, regulatory, security, fraud, or compliance changes.

Changes take effect once published or from the moment indicated by the platform.

Continued use of the services after an update is published means acceptance of the current version.

→