Privacy Policy

1. Introduction

ZYNC ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our platform, including the Telegram Mini App, web portal, and related services. We are compliant with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data We Collect

Information You Provide

• Account information (name, email, Telegram ID)
• Profile data (display name, avatar, username)
• Wallet addresses (public blockchain addresses)
• Campaign submissions and mission evidence
• Communication data (support messages, feedback)

Automatically Collected Data

• Device information (device type, OS, browser)
• Usage data (pages visited, features used, timestamps)
• IP address and approximate location
• Telegram platform data (as provided by Telegram SDK)

Blockchain Data

Blockchain transactions are public by nature. We do not collect private keys or seed phrases. Your encrypted seed phrase is stored locally on your device and never transmitted to our servers.

3. How We Use Your Data

• To provide and operate the Services
• To verify mission completions and distribute rewards
• To resolve identity across linked providers
• To prevent fraud and enforce platform rules
• To communicate important updates and notifications
• To improve the Services through analytics
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on:

• Contract performance: Processing necessary to provide the Services you requested
• Legitimate interest: Fraud prevention, security, platform improvement
• Consent: Marketing communications, optional analytics, cookies
• Legal obligation: AML/KYC compliance, tax reporting

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Infrastructure providers (hosting, analytics, email) who process data on our behalf
• Campaign brands: Limited data necessary for mission verification (anonymized where possible)
• Legal authorities: When required by law or to protect our rights
• Blockchain networks: Transaction data is inherently public on-chain

6. Data Retention

We retain your data for as long as necessary to provide the Services and comply with legal obligations:

• Account data: Retained while your account is active, plus 30 days after deletion request
• Financial records: Retained for 7 years as required by financial regulations
• Ledger entries: Immutable by design; cannot be deleted but can be disassociated from your identity
• Analytics data: Anonymized after 24 months
• Audit logs: Retained for 5 years

7. Cookies and Tracking

We use cookies and similar technologies to:

• Essential cookies: Required for authentication and security (cannot be disabled)
• Analytics cookies: Help us understand how the platform is used (opt-in)
• Preference cookies: Remember your settings like language and theme (opt-in)

You can manage your cookie preferences using our cookie consent banner. We respect the Do Not Track (DNT) browser signal.

8. Your Rights

Under GDPR and applicable laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@zyncd.in. We will respond within 30 days.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data during such transfers.

10. Children's Privacy

The Services are not intended for users under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will take steps to delete such data promptly.

11. Security

We implement appropriate technical and organizational measures to protect your data, including encryption at rest and in transit, role-based access controls, regular security audits, and incident response procedures. However, no method of transmission over the Internet is 100% secure.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform, email, or a prominent notice on our website. We encourage you to review this policy periodically.

13. Contact

For privacy inquiries or to exercise your rights, contact us at:

• Email: privacy@zyncd.in
• Contact form: Talk to Us