1.1 Zexpay ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information.

1.2 This policy applies to all users of the Zexpay Platform, including visitors, registered users, merchants, and API users.

1.3 By using the Platform, you consent to the data practices described in this Privacy Policy.

1.4 If you do not agree with this policy, please do not use the Platform.

2.1 Personal Information: When you register, we collect your name, email address, username, and contact information.

2.2 Financial Information: We collect cryptocurrency wallet addresses, transaction histories, deposit/withdrawal records, and payment information.

2.3 KYC/Verification Data: For compliance purposes, we may collect government-issued ID, proof of address, date of birth, and other identity verification documents.

2.4 Device and Technical Data: We automatically collect IP addresses, device fingerprints, browser type, operating system, and device identifiers.

2.5 Usage Data: We collect information about how you interact with the Platform, including pages visited, clicks, time spent, and features used.

2.6 Geolocation Data: We may collect your approximate location based on your IP address for compliance and fraud prevention.

2.7 Cookies and Tracking: We use cookies and similar tracking technologies to enhance user experience and analyze usage patterns.

2.8 Referral Information: If you participate in our referral program, we collect information about your referrals and referral earnings.

2.9 Communication Data: We collect information from your communications with us, including support tickets, emails, and chat messages.

2.10 Merchant Data: If you are a merchant, we collect business information, tax IDs, business registration, and transaction data related to your payments.

3.1 Platform Operations: To create and manage your account, process transactions, and provide customer support.

3.2 Compliance and Security: To comply with KYC/AML regulations, detect and prevent fraud, and ensure the security of the Platform.

3.3 Service Improvements: To analyze usage patterns, improve our services, and develop new features.

3.4 Communications: To send you service updates, administrative messages, and promotional materials (with your consent).

3.5 Referral Program: To track referrals, calculate commissions, and manage the referral program.

3.6 Legal Obligations: To comply with applicable laws, regulations, and legal processes.

3.7 Risk Management: To assess and manage risks associated with cryptocurrency transactions and Platform usage.

3.8 Merchant Services: To facilitate payment processing, settlement, and dispute resolution for merchants.

4.1 Contractual Necessity: Processing your data is necessary to perform the contract between you and Zexpay (e.g., providing account services, processing transactions).

4.2 Legal Compliance: We process data to comply with legal obligations, including AML/KYC laws, tax reporting, and regulatory requirements.

4.3 Legitimate Interests: We process data for our legitimate interests, including fraud prevention, Platform security, service improvement, and marketing (where permitted).

4.4 Consent: For certain purposes (e.g., marketing communications), we rely on your explicit consent, which you may withdraw at any time.

4.5 Public Interest: In some cases, processing may be necessary for reasons of public interest, such as preventing financial crime.

5.1 Third-Party Service Providers: We share data with trusted third-party service providers who perform services on our behalf, including hosting, payment processing, KYC verification, and analytics.

5.2 Offerwall Providers: If you use offerwall services, we may share data with third-party offer providers to facilitate reward delivery.

5.3 Legal and Regulatory Authorities: We may disclose data to law enforcement, regulators, or other authorities when required by law, court order, or legal process.

5.4 Fraud Prevention: We may share data with fraud prevention agencies and cybersecurity partners to detect and prevent fraudulent activities.

5.5 Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.

5.6 Affiliates: We may share data with our corporate affiliates for internal business purposes.

5.7 With Your Consent: We may share your data with third parties when you have given us explicit consent to do so.

5.8 Public Blockchain: Please note that cryptocurrency transactions are recorded on public blockchains and are not private.

6.1 Your data may be transferred to, stored, and processed in countries other than your country of residence.

6.2 We ensure that appropriate safeguards are in place for international data transfers, such as standard contractual clauses or adequacy decisions.

6.3 By using the Platform, you consent to the transfer of your data to countries that may have different data protection laws than your jurisdiction.

6.4 We take steps to ensure that any third-party service providers located outside your jurisdiction also provide adequate data protection.

7.1 We retain your personal data for as long as your account is active or as needed to provide you with services.

7.2 After account closure, we may retain certain data for legal compliance, fraud prevention, and record-keeping purposes.

7.3 Transaction data may be retained for at least 5-7 years to comply with AML/KYC regulations and tax laws.

7.4 KYC documentation may be retained for the duration required by applicable laws and regulations (typically 5-10 years).

7.5 Usage logs and analytics data may be retained for shorter periods, typically 12-24 months.

7.6 You may request deletion of your personal data, subject to legal and regulatory retention requirements.

7.7 Anonymized or aggregated data may be retained indefinitely for research and analytical purposes.

8.1 We implement industry-standard security measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

8.2 These measures include encryption (TLS/SSL), secure servers, firewalls, access controls, and regular security audits.

8.3 We use hashing and encryption to protect sensitive data such as passwords and API keys.

8.4 Access to personal data is restricted to authorized personnel who require it for their job functions.

8.5 We conduct regular security assessments and penetration testing to identify and address vulnerabilities.

8.6 We employ fraud detection systems to monitor for suspicious activities and potential data breaches.

8.7 Despite our efforts, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8.8 You are responsible for maintaining the security of your account credentials and should immediately report any suspected breach.

9.1 We use cookies and similar tracking technologies to enhance user experience, analyze usage, and personalize content.

9.2 Essential Cookies: Required for basic Platform functionality, such as authentication and session management.

9.3 Analytics Cookies: Used to understand how users interact with the Platform and improve our services.

9.4 Preference Cookies: Remember your preferences and settings for a better user experience.

9.5 Marketing Cookies: Used to deliver relevant advertisements and track marketing campaign effectiveness.

9.6 You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect Platform functionality.

9.7 We also use web beacons, pixels, and similar technologies for analytics and fraud prevention.

9.8 Third-party services we use (such as analytics providers) may also set their own cookies.

10.1 Right to Access: You have the right to request a copy of the personal data we hold about you.

10.2 Right to Rectification: You have the right to request correction of inaccurate or incomplete data.

10.3 Right to Erasure: You have the right to request deletion of your personal data, subject to legal retention requirements.

10.4 Right to Restriction: You have the right to restrict processing of your data in certain circumstances.

10.5 Right to Data Portability: You have the right to receive your data in a structured, commonly used format.

10.6 Right to Object: You have the right to object to processing of your data for marketing purposes or based on legitimate interests.

10.7 Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time.

10.8 Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.

10.9 To exercise any of these rights, please contact us at privacy@zexpay.io.

10.10 We will respond to your request within 30 days, subject to verification of your identity.

11.1 The Platform is not intended for individuals under the age of 18.

11.2 We do not knowingly collect personal information from children under 18.

11.3 If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information.

11.4 Parents or guardians who believe their child has provided us with personal data should contact us immediately.

12.1 The Platform may contain links to third-party websites, services, or applications that are not controlled by Zexpay.

12.2 This Privacy Policy does not apply to third-party services. We encourage you to review their privacy policies.

12.3 We are not responsible for the privacy practices or content of third-party websites or services.

12.4 Offerwall providers, PTC advertisers, and other third-party services may collect their own data subject to their privacy policies.

12.5 We recommend exercising caution when clicking on third-party links or sharing data with external services.

13.1 California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

13.2 These rights include the right to know what personal information is collected, the right to delete data, and the right to opt-out of the sale of personal information.

13.3 We do not sell personal information to third parties.

13.4 California residents may exercise their rights by contacting us at privacy@zexpay.io.

13.5 We may require verification of identity before processing California privacy requests.

13.6 You have the right to non-discrimination for exercising your privacy rights.

14.1 If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR).

14.2 These include the right to access, rectification, erasure, restriction, portability, and objection.

14.3 The lawful bases for processing your data are outlined in Section 4 of this policy.

14.4 You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

14.5 You have the right to lodge a complaint with your local supervisory authority.

14.6 For GDPR-related requests, please contact us at privacy@zexpay.io.

15.1 In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.

15.2 Notification will include the nature of the breach, potential consequences, and measures taken to address the breach.

15.3 We will notify you without undue delay, typically within 72 hours of becoming aware of the breach.

15.4 We maintain incident response procedures to promptly identify and mitigate security incidents.

16.1 Zexpay uses automated decision-making processes, including fraud detection algorithms and risk scoring.

16.2 These automated decisions may affect your account status, transaction approvals, and access to certain features.

16.3 You have the right to request human review of automated decisions that significantly affect you.

16.4 You have the right to contest automated decisions and request an explanation.

16.5 For more information or to request human review, please contact our support team.

17.1 Zexpay has appointed a Data Protection Officer (DPO) to oversee privacy and data protection compliance.

17.2 You may contact our DPO with any privacy-related questions or concerns at dpo@zexpay.io.

17.3 The DPO is responsible for ensuring compliance with GDPR, CCPA, and other applicable data protection laws.

17.4 You may also contact our DPO regarding complaints, requests, or inquiries about your data rights.

18.1 Zexpay reserves the right to update or modify this Privacy Policy at any time.

18.2 We will notify you of significant changes by posting the updated policy on the Platform or via email.

18.3 The effective date of the policy will be clearly indicated at the top.

18.4 Your continued use of the Platform after changes constitutes acceptance of the revised Privacy Policy.

18.5 We encourage you to periodically review this policy to stay informed about how we protect your data.

19.1 If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

19.2 Email: privacy@zexpay.io

19.3 Support: Telegram Support Bot

19.4 General Inquiries: help@zexpay.io

19.5 We will respond to your inquiry within 30 days. For urgent privacy matters, please mark your email as "Privacy Concern" in the subject line.