CoinJar
CoinJar Australia Pty Ltd ACN 648 570 807
Analysed ·Policy updated
https://www.coinjar.com/au/privacy0 Concern4 Mixed0 Positive
C+62 / 100
In Plain English
CoinJar collects a lot of personal and financial data, keeps it for 7 years after you close your account, and can share it with a wide range of third parties — but they do use encryption and give you some control over your data.
Category Breakdown
Known data breaches
No known public data breaches
CoinJar does not appear in the Have I Been Pwned database of publicly disclosed data breaches.
How CoinJar could earn a higher grade
Recommended changes
- Add a clear data breach notification commitment — specify how quickly (e.g. within 72 hours) users will be notified if their data is compromised.
- Publish details of independent security certifications or audits (such as SOC 2 or ISO 27001) to give users confidence in your security practices.
- Introduce a right to deletion or erasure request process, even if subject to legal retention requirements, so users know their options.
- Set specific response time commitments for data access and complaint requests (e.g. within 30 days), rather than 'a reasonable period of time'.
- Provide users with an opt-out mechanism for CoinJar AI data being used to train or improve the AI, consistent with data minimisation principles.