another concern I have is that in order to be 'verified' on cryptoXchange, I had to supply scans of license and passport information. What will CryptoXchange do with this information even IF they pay back everyone?
I notice that CryptoXChange are very quiet on these boards, but I know they are reading, and they should be addressing these concerns
If they were maintaining AML compliance then they're legally required to keep the information for a number of years. That doesn't mean they can use the information however they want. Nothing on their website actually over-rides privacy laws or laws specific to financial information.
The T&C excerpt posted by augustocroppo only gives them the right to reproduce things like comments on their service or posts to a blog on their site - it has nothing whatsoever to do with how financial or personal information can be used.