> For the complete documentation index, see [llms.txt](https://zerotick-trade.gitbook.io/documentation.v1.2/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://zerotick-trade.gitbook.io/documentation.v1.2/privacy-policy.md). # Privacy Policy **Last Updated**: July 11, 2026 **Effective Date**: July 8, 2026 *** This Privacy Policy explains how ZeroTick collects, uses, shares, and protects your personal data when you use the ZeroTick app. The data controller for the personal data described here is ZeroTick ("ZeroTick", "we", "us"), reachable at . ZeroTick is a non-custodial platform built around data minimization: we collect only what we need to run the service, keep you secure, and meet our legal obligations. * **Website**: [www.zerotick.trade](https://www.zerotick.trade) * **Privacy contact**: *** ### At a glance This summary is the short version. The full policy below is the complete and governing text. * **Who we are**: ZeroTick, a non-custodial trading and token-launch interface. Contact: . * **What we collect**: your account details (email, optional username), your public wallet addresses and on-chain activity, technical data (IP, device, session), security and compliance records, and, only if you turn them on, product analytics and browser error reports. * **What we never touch**: your private keys and seed phrases (they stay in your device/wallet), and we do not run identity checks (KYC) in the current version. We do not sell your data. * **Who receives it**: categories of service providers (cloud hosting and database, embedded-wallet infrastructure, email delivery, error monitoring, optional analytics, blockchain-data and routing providers). A current named list is available on request. * **Things worth knowing**: blockchain activity and token-launch images are public and permanent, so they cannot be recalled; we screen wallet addresses against sanctions lists; some providers are located in the United States. * **Your choices**: you can access, correct, export or delete your data, object to or restrict processing, and turn analytics and error reporting on or off at any time in **Account & Security**. Email to exercise a right. *** ### 1. What we collect #### 1.1 Account information * **Authentication data**: email address, and either a password (stored only as a salted hash, never in plain text) or a social sign-in identifier (Google, Discord, X, Telegram) if you use social login. * **Profile data**: optional username, optional profile picture, and your preferences (theme, display currency, language). * **Account metadata**: creation time, last activity, referral code, and the country and IP address recorded at sign-up. #### 1.2 Wallet and blockchain data * **Wallet identifiers**: your ZeroTick wallet IDs and labels, and your active-wallet selection. * **Public addresses**: your public blockchain addresses on the chains ZeroTick supports. * **Saved addresses**: withdrawal and tracked-wallet addresses you choose to save. Public keys and addresses only. See Section 2 for what we never collect. #### 1.3 Transaction and trading data * **Trading activity**: your orders, amounts, prices, trading pairs and fills. * **Order settings**: limit, stop-loss and take-profit settings you place (see Section 3 for how these behave today). * **Cross-chain activity**: swap and cross-chain trade details. * **Portfolio data**: positions, balances and profit/loss, derived from public on-chain data. * **Rewards and referrals**: points, leaderboard standing, competition entries, referral relationships and links, and fee-share or reward claim records. Where you refer other users, we attribute their qualifying trading activity to you to calculate referral rewards. * **Token launch data**: token configuration and launch parameters if you create a token, and any logo or banner image you upload (see Section 4 on public networks). Blockchain transactions are publicly visible on-chain. We index this public data to provide the service. #### 1.4 Technical and usage data * **IP address and country**: for security, fraud prevention and geolocation. * **Device and session data**: browser type, operating system, device type, and login sessions and tokens. * **Search history**: search terms you enter and results you select, linked to your account, to power your recent searches. * **Error and diagnostic data**: technical error details used to diagnose faults. Server-side diagnostics are kept minimal (no request contents, no IP); browser error reports are collected only if you turn them on (off by default, controllable in **Account & Security**). * **Product analytics** (only if you consent): pages viewed and features used. Off by default; see Sections 5 and 7. #### 1.5 Security and compliance records * **Two-factor authentication**: if you enable 2FA, we store your authenticator secret encrypted (never in plain text), your backup codes as hashes, and your security settings. * **Consent and acceptance records**: which legal documents you accepted, when, and the version, together with the IP address, browser user-agent and country recorded at the time, kept as evidence of consent. * **Compliance records**: sanctions-screening results for wallet addresses, geo-compliance decisions, and a security log of sensitive actions such as recovery-kit or private-key exports (which record the time, IP and country, never the keys themselves). #### 1.6 Communication data * **Support**: messages and attachments you send us. * **Email**: transactional and service emails we send you (for example, a welcome email or a security alert). You can unsubscribe from non-essential email at any time. #### 1.7 Marketing website and Ambassador Program The public marketing website ([www.zerotick.trade](https://www.zerotick.trade)) is separate from the app. The Ambassador Program application form on that site collects data governed by the ZeroTick Ambassador Program Privacy Policy, which prevails for Program data. *** ### 2. What we do NOT collect * Government-issued ID documents * Biometric or facial-recognition data * Tax IDs, social-security or national-ID numbers * Bank statements or financial records * Source of funds or wealth information * Employment or income information **Your private keys and seed phrases stay in your own device and wallet. ZeroTick never stores your complete private key or seed phrase and cannot unilaterally move your funds.** If you enable an optional automated feature (for example, stop-loss execution), you grant a limited, revocable signing permission scoped only to that action, which you can withdraw at any time. The current version of ZeroTick does not perform identity verification (KYC). *** ### 3. How we use your data, and our legal bases We use your data for the purposes below. Where GDPR or a similar law applies, the legal basis is shown. * **To run the service** — create and manage your account, provide the wallet, execute the trades and cross-chain swaps you request, enable token launches, and power rewards and referrals. *Basis: performance of our Terms with you.* * **Security, fraud prevention and compliance** — detect abuse, monitor for suspicious activity, enforce our Terms, screen against sanctions lists, and apply geo rules. *Basis: legitimate interests in a safe, lawful platform; and legal obligation where screening or record-keeping is required.* * **Communication** — send transactional and service emails and provide support. *Basis: performance of our Terms, and legitimate interests.* * **Product analytics and browser error reporting** — understand usage and diagnose crashes to improve the platform, only where you have turned these on. *Basis: your consent.* **Order settings today**: stop-loss, take-profit and limit orders can be placed and are monitored, but in the current version they are recorded and alerted rather than executed automatically, unless you have enabled an optional automated-execution feature. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. *** ### 4. Who we share data with We share personal data only with service providers who process it on our instructions, and only as needed to run the service. We disclose by **category** below; a current list of the specific providers is available on request at . | Category of recipient | Purpose | Data shared | Location | | --------------------------------------- | ------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------- | -------- | | Cloud hosting and database | Run the app, store your data | Account, wallet, trading and security data (encrypted) | US | | Embedded-wallet infrastructure | Non-custodial wallet and authentication | Email/identity, wallet addresses, signatures | EU/US | | Social sign-in providers | Optional social login | Profile, email | Varies | | Email delivery | Transactional and service email | Your email address and message content (a security alert may include the originating IP and country) | US | | Error monitoring | Diagnose faults and keep the service reliable | Server-side technical error data (no request bodies, no client IP); browser error reports only if you turn on error tracking | US | | Product analytics (only if you consent) | Improve the platform | Pageviews and feature usage, with wallet addresses redacted | EU | | Bot protection | Verify sign-ups are human | Browser signals and IP at sign-up | US | | Blockchain-data and routing providers | Prices, charts, token safety, quotes and cross-chain routing | Public wallet addresses and trade parameters (no account identity) | US | | Token-launch media hosting | Host token images you upload | Uploaded images, published to a public network | US | #### Blockchain networks and public media **Blockchain transactions are public and permanent.** Your public wallet address and transaction details are recorded on public blockchains, are outside ZeroTick's control, and cannot be deleted or changed. Similarly, token logos or banners you upload at launch are published to a public, peer-to-peer network (IPFS): once published they may be copied and re-hosted by others and cannot be reliably recalled, even after we remove our copy. #### We do not sell your data ZeroTick does not sell, rent or trade your personal data, and does not share it for third-party advertising. *** ### 5. Cookies and local storage #### 5.1 Strictly necessary (no consent needed) * Authentication and session cookies (login state) * Security cookies (for example, protection against cross-site request forgery and fraud) * A short-lived cookie that remembers your chosen social-login provider during sign-in These are required for the app to work and cannot be switched off. #### 5.2 Functional storage (stays on your device) * Encrypted wallet key material (client-side only) * Your interface preferences (theme, language, currency, wallet selection) and trading preferences This stays in your browser and is not sent to us unless you take an action. #### 5.3 Analytics and error reporting (optional, off by default) Product-analytics and browser error-reporting storage are only used **after you turn them on**. Both are off unless you opt in, and you can change your choice at any time in **Account & Security**. Declining changes nothing about how the app works for you. *** ### 6. Data security * Encryption in transit (TLS) and at rest * Passwords stored only as salted hashes * Two-factor secrets and delegated signing keys encrypted at rest * Private keys held only in your device/wallet, never by us * Session expiry, rate limiting and API authentication No system is perfectly secure. If a personal-data breach creates a risk to your rights, we will notify the relevant authority, and affected users where required, in line with applicable law. **Your part**: use a strong, unique password, keep your Recovery Kit safe, never share your password or keys, check the website address before you log in, and report anything suspicious to . *** ### 7. Your rights Depending on where you live, you have the right to: * **Access** the data we hold about you * **Correct** inaccurate data * **Delete** your data (subject to the limits below) * **Port** your data in a structured, machine-readable format * **Object to** or **restrict** certain processing * **Withdraw consent** for optional processing (such as analytics and error reporting) at any time, in **Account & Security** * **Complain** to your local data-protection authority #### Limits * **Public blockchain data and published token media** cannot be deleted or reliably recalled, as explained in Section 4. * **Records we must keep by law** (for example, compliance or tax records) are retained for the required period. #### How to exercise a right Email from your registered email with a short description of your request. We respond within 30 days, or sooner where local law requires. *** ### 8. Data retention | Data category | Retention | | ----------------------------------- | --------------------------------------------------------------------------------------------- | | Account data | For the life of the account; on closure, purged after the applicable retention period below | | Audit and security logs | 60 months (5 years) | | Trading and portfolio records | Kept while your account is active; some records retained longer where law requires | | Consent and acceptance records | Kept as evidence of consent for the life of the account plus the applicable limitation period | | Search history | 90 days | | Diagnostic/error data | Retained only as long as needed to resolve faults | | Analytics data (if enabled) | Per our analytics provider's settings; aggregated where possible | | Blockchain data and published media | Permanent and public, outside our control | Where a period is not fixed above, we keep data only as long as needed for the purpose it was collected, or as required by law. *** ### 9. International transfers Some of our providers are located in the United States, so using ZeroTick may involve transferring your data internationally. Where required, transfers to countries without an adequacy decision are covered by the European Commission's Standard Contractual Clauses (or the equivalent under UK or other applicable law). You can request a copy at . *** ### 10. Children ZeroTick is for adults. You must be at least 18 to use it, and we ask you to confirm this when you sign up. We do not knowingly collect data from anyone under 18; if we learn we have, we will delete it. If you believe a minor has used ZeroTick, contact . *** ### 11. Changes to this policy If we make a material change, we will update the "Last Updated" date and notify you by email or in-app **before the change takes effect**. We will not rely on your continued use as a substitute for that notice. *** ### 12. Regional information The core policy above applies to everyone. Some regions add specific rights or contacts: * **European Economic Area / United Kingdom**: the legal bases are in Section 3; you may lodge a complaint with your local supervisory authority; international-transfer safeguards are in Section 9. * **Brazil (LGPD)**: you have the rights listed in Article 18 of the LGPD; our privacy contact () is your channel for requests and questions. * **United States (California and other states)**: we do not sell or share personal data for cross-context behavioral advertising; the categories collected, purposes, and your rights are described above. Other regional details are provided on request at . *** ### 13. Contact | Purpose | Email | | ----------------------------------- | ------------------------- | | Privacy inquiries and data requests | | | General support | | | Security issues | | **Website**: [www.zerotick.trade](https://www.zerotick.trade)