Privacy Policy

1. Overview

Zinch is a non-custodial protocol. We store the minimum data needed to make the service usable — nothing more. This policy explains what we collect, why, and what we do with it.

2. What We Collect

Account data (via Privy):

• Email address (from Google, email login, or Telegram)
• Wallet address (embedded or external)
• Telegram username, if you use Telegram login
• An anonymous Privy user ID

Deal metadata:

• Deal title, description, amount, currency
• Wallet addresses of both parties
• Deal state and transaction signatures
• Timestamps of state changes

What we do NOT collect:

• Government IDs or KYC documents
• Bank account or credit card details
• Wallet private keys (we can never see them)
• Precise location data
• Contact lists, camera, microphone data

3. How We Use It

• To let you sign in and identify you across sessions.
• To display your deals and history in your dashboard.
• To send you email notifications about deal state changes.
• To improve the product (aggregated, anonymous usage analytics).

4. On-Chain Data Is Public

Every action taken on Zinch — creating a deal, funding, submitting, releasing, disputing — creates a transaction on the Solana blockchain. These transactions are permanently public and cannot be deleted. Your wallet address, the deal amount, and the transaction outcome are visible to anyone. Zinch cannot make blockchain data private.

5. Third-Party Services

We use these services to run Zinch:

• Privy — authentication and wallet management
• Supabase — off-chain data storage
• Solana — blockchain transactions
• Helius — Solana RPC provider
• Resend — email notifications
• Vercel — application hosting

Each has its own privacy policy. We share only what's required for them to provide the service.

6. Data Retention

We keep your account and deal data as long as your account is active. If you want your off-chain data deleted, email us at privacy@zinch.app. Note that on-chain data is permanent and cannot be deleted.

7. Your Rights

You can:

• Access your data by logging into your account
• Request deletion of your off-chain data
• Opt out of email notifications from your settings
• Disconnect wallets from your account

8. Security

We use industry-standard security practices including encrypted connections (TLS), encrypted storage, and access controls. Nothing on the internet is 100% secure, but we take reasonable steps to protect your data.

9. Children

Zinch is not for anyone under 18. We don't knowingly collect data from minors.

10. Contact

Questions about this policy? Email privacy@zinch.app.