Privacy Policy

Last updated: September 17, 2025

Zion Crypto LLC ("Zion", "we", "our" or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit zioncrypto.net and any other websites, mobile apps, waitlists, forms, or services we operate (collectively, the "Services").

Not a bank. Zion Crypto LLC is not a bank. Any lending, BNPL, or card features will be offered by one or more partner banks (Member FDIC) and program managers, subject to approval and local law. This Privacy Policy also explains how your information may be shared with those partners when applicable.

If you do not agree with this Policy, please do not use the Services.

1) Who we are & contact details

Controller: Zion Crypto LLC
Website: https://www.zioncrypto.net
Email: zioncrypto.contact@gmail.com

For users in the EEA/UK, Zion is the controller of your personal data unless a section below says a partner acts as an independent controller (for example, a sponsor bank that evaluates you for credit). If required by law, we will appoint an EU/UK representative and update this Policy.

2) Scope

This Policy covers information we collect:

Directly from you (e.g., forms, waitlists, support).
Automatically when you use the Services (e.g., cookie and device data).
From third parties (e.g., identity/KYC vendors, payment processors, analytics providers, advertising partners, and—when applicable—partner banks or program managers).

It does not cover third‑party sites or wallets you connect to us. Their privacy policies govern their practices.

3) Information we collect

We collect the categories of information listed below. Specific data elements depend on how you interact with us and which features are available in your region.

A. Account & Contact

Name, display name, email, phone, country/state, preferred language, referral details.

B. Government / KYC & Sanctions Screening (when legally required)

Date of birth, residential address, SSN/Tax ID, national ID or driver’s license/passport details, selfie/biometric comparisons (we do not keep biometric templates unless required by law or vendor design), sanctions/PEP checks, adverse media results.
Retention: typically 5 years after account closure or as required by BSA/AML or other laws.

C. Wallet & Transactional

Wallet addresses, on‑chain activity relevant to the Services, funding source metadata, transaction amounts, timestamps, counterparties, device risk signals, chargeback/fraud flags, dispute records.

D. BNPL / Credit Evaluation

Application details, creditworthiness signals, income estimates, repayment history, fraud/identity risk scores.

E. Device, Usage & Cookies

IP address, device identifiers, browser/app data, pages viewed, links clicked, time on page, referral URLs, and cookie IDs (see Cookies & tracking below).

F. Communications & Support

Messages, support tickets, feedback forms, survey responses, call/chat recordings where permitted by law.

G. Marketing Preferences

Subscription status, campaign interactions, social handles you voluntarily share.

We may aggregate or de‑identify data so it no longer identifies you. Aggregated/de‑identified data is not personal data.

4) How we use information

We use information (and rely on the legal bases noted for EEA/UK users) to:

Provide and secure the Services (contract/legitimate interests): account setup, authentication, wallet linking, risk monitoring, troubleshooting, and support.
Comply with laws (legal obligation): KYC/AML, sanctions screening, fraud prevention, recordkeeping, regulatory reporting, consumer‑finance disclosures.
Process transactions and, where available, credit/BNPL (contract/legitimate interests): applications, underwriting, disclosures, repayments, collections.
Improve and develop (legitimate interests/consent where required): analytics, product research, new features, quality assurance.
Communicate with you (contract/legitimate interests/consent): service messages, security alerts, marketing (you can opt out anytime).
Protect Zion, our users, and partners (legitimate interests/legal obligation): investigate, prevent, and deter fraud, abuse, and security incidents.
Comply with lawful requests (legal obligation/public interest): respond to subpoenas, court orders, and lawful investigations.

Where we rely on consent, you may withdraw it at any time; this won’t affect processing that already happened.

5) When we share information

We disclose information as described below. We do not sell your personal information. We may “share” limited identifiers for cross‑context behavioral advertising only with your consent where required (see Your privacy choices).

Service providers (processors): cloud hosting, customer support tools, analytics, security and anti‑fraud, email/SMS, form builders, and—when applicable—identity/KYC vendors. These providers must follow our instructions and protect your data.
Partner banks & program managers (independent controllers): if you apply for BNPL/credit/card features, your data may be shared with sponsor banks and program managers who determine eligibility, provide required disclosures, and service accounts. Their privacy notices will also apply.
Payment processors & settlement partners: to fund or settle transactions, including fiat on/off‑ramp partners.
Compliance & risk partners: sanctions screening, adverse media/PEP checks, fraud‑detection and collection agencies (where permitted).
Business transfers: part of, or during negotiations for, a merger, acquisition, financing, or sale of assets.
Legal and safety: to comply with law, enforce our terms, and protect our rights, users, or the public.
With your direction or consent.

We do not permit third parties to use your personal data for their own marketing without your consent.

6) International transfers

We are based in the United States and may transfer personal data to countries that may not provide the same level of protection as your home country. Where required, we use appropriate safeguards, such as the EU Standard Contractual Clauses (and UK addendum) and additional measures.

7) Data retention

We keep personal data only as long as necessary for the purposes described, including to meet legal, tax, accounting, and reporting obligations. Typical periods include:

KYC/AML records: 5 years after your account is closed (or longer if required by law).
Transactional & financial records: 7 years (or as required by law).
Marketing data: until you opt out or after a period of inactivity, then we delete or de‑identify.
We will also retain data as needed to resolve disputes and enforce agreements.

8) Your privacy choices & rights

Global choices

Email/SMS marketing: opt out via the unsubscribe link or by contacting us.
Cookies/Ad preferences: use our cookie preferences tool (link in site footer) to accept, reject, or withdraw consent for non‑essential cookies and advertising.

EEA/UK rights

You may request access, correction, deletion, restriction, portability, or object to certain processing. You may also withdraw consent. You can lodge a complaint with your local Data Protection Authority. Contact us to exercise your rights.

U.S. state privacy rights (e.g., CA/VA/CO/CT/UT)

Depending on your state, you may have rights to access, delete, correct, portability, and to opt out of: (i) the sale of personal information; (ii) sharing for cross‑context behavioral advertising; and (iii) certain profiling/automated decision‑making. We do not sell personal information. Where we “share” for advertising, you can opt out via our cookie preferences tool or a "Do Not Sell or Share" link in the footer. If we decline your request, you may submit an appeal using the instructions in our response.

Identity verification

For security, we may ask you to verify your identity and residence before we act on requests. Authorized agents may submit requests where allowed by law.

9) Automated decision‑making (credit/BNPL)

When BNPL/credit features are available, we and/or partner banks may use automated processing (e.g., risk and affordability models) to evaluate eligibility or detect fraud. You can contact us to request human review where mandated by applicable law.

10) Cookies & tracking technologies

We use cookies and similar technologies to operate and improve the Services. Categories include:

Strictly necessary: security, account log‑in, fraud prevention.
Functional: remember preferences.
Analytics: measure traffic and performance.
Advertising (optional): show relevant ads and measure campaigns.

You can manage preferences through our cookie banner or browser settings. Blocking cookies may impact certain features.

We currently do not respond to Do Not Track (DNT) signals.

11) Children’s privacy

Our Services are not directed to children under 13 (or the age defined by your local law), and we do not knowingly collect personal information from them. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

12) Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, least‑privilege policies, logging, and vendor due diligence. No method of transmission or storage is 100% secure.

13) Third‑party links, wallets, and platforms

The Services may link to third‑party sites or allow you to connect a third‑party wallet or platform. We are not responsible for their content or privacy practices. Review their privacy policies before sharing information.

14) Region‑specific notices

California (CPRA) notice at collection & summary of practices (past 12 months)

CategoryExamplesCollectedShared for cross‑context adsSold

IdentifiersName, email, phone, IP, cookie IDYesPossibly with consentNo

SensitiveSSN/Tax ID, government ID, KYC imagesYes (where required)NoNo

FinancialWallet address, transaction detailsYesNoNo

Internet/ActivityPages viewed, referral URLsYesPossibly with consentNo

Geolocation (coarse)Country/stateYesNoNo

InferencesRisk/affordability scores (credit features)PotentiallyNoNo

We retain data as described above. We do not offer financial incentives in exchange for personal information unless we provide a separate notice describing the terms (e.g., a referral program).

Nevada

We do not sell "covered information" as defined by Nevada law, but Nevada residents may contact us with opt‑out requests.

15) Changes to this Policy

We may update this Policy from time to time. We will change the "Last updated" date above and, where required, provide additional notice (e.g., via email or in‑app). Your continued use of the Services after a change means you accept the updated Policy.

16) How to contact us

Questions or requests?
Email: zioncrypto.contact@gmail.com

Annex: Partner & vendor examples (informational)

The exact partners used may change over time. We will update our site with a current list or provide it upon request.

Identity/KYC & sanctions screening vendors (used where legally required).
Cloud hosting and infrastructure providers.
Analytics and performance monitoring tools.
Customer support and communications platforms (email/SMS, forms).
Payment processors, fiat on/off‑ramp partners, program managers, and—when available—sponsor banks.

Reminder: Zion Crypto LLC is not a bank. BNPL/credit/card features are subject to partner approval and local law and may not be available in all jurisdictions.