Privacy Policy

1. Introduction

Zephirex Technologies LLC ("Zephirex", "we", "us") operates the ZephirexULTRA platform ("the Service"), a non-custodial trading intelligence platform. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Service.

By accessing or using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with these practices, you should not use the Service.

2. Information We Collect

Account Information: When you register, we collect your email address and a password (stored as an irreversible hash). We do not collect your legal name, physical address, or phone number at registration.

Exchange API Keys: When you connect a cryptocurrency exchange, we receive API keys that you provide. We strongly recommend read-only keys. Keys that include withdrawal permissions are rejected at the integration layer and will not be stored. API keys are encrypted at rest using AES-256 encryption.

Usage Data: We collect anonymized usage analytics including page views, feature interactions, and session duration. This data is used to improve the Service and is not linked to your identity in analytics reports.

Technical Data: When you interact with the Service, we automatically collect your IP address, browser type, device information, and approximate geographic location derived from your IP. This data is used for security, fraud prevention, and rate limiting.

3. How We Use Your Information

We use your information to: (a) provide and maintain the Service; (b) authenticate your account and enforce security measures including two-factor authentication; (c) read portfolio data from connected exchanges to generate analytics; (d) send you product updates and service notifications; (e) monitor for fraud, abuse, and security threats; (f) comply with legal obligations.

We do not use your trading data or analytics to build proprietary trading strategies that compete with you. Your strategy logic remains your intellectual property.

4. Non-Custodial Design

Zephirex is a non-custodial platform. We do not hold, transfer, or withdraw your cryptocurrency or fiat funds at any time. The Service is a software tool that reads data from exchanges you connect via your own API keys.

Because we cannot access your funds, we cannot recover funds lost due to exchange failures, market conditions, or your own trading decisions. You retain full custody and control of your assets at all times.

5. API Key Security

Your exchange API keys are encrypted at rest using AES-256 encryption. Keys are decrypted only in memory when needed to communicate with your exchange, and are never logged, cached in plaintext, or exposed in error messages.

We strongly recommend that you configure API keys with read-only permissions. If you choose to enable trade-scoped keys for automated execution, you accept responsibility for all trades executed on your behalf. We do not accept or store keys with withdrawal permissions.

You can revoke API key access at any time from your exchange account. Revoking a key immediately severs the Service's connection to that exchange.

6. Data Retention

We retain your account information for as long as your account is active. If you terminate your account, we retain limited data for a period required for legal compliance and dispute resolution, then delete it.

Analytics data derived from your exchange (portfolio snapshots, trade history, performance metrics) is retained for the lifetime of your account so that historical comparisons remain available. You may request deletion of your data at any time.

You may unsubscribe from product updates at any time using the unsubscribe link in any email we send.

7. Data Sharing and Disclosure

We do not sell your personal information or trading data to any third party. We never have and we never will.

We may share limited data with: (a) cloud infrastructure providers who host and process data on our behalf under strict data processing agreements; (b) email delivery services used to send you transactional and product emails; (c) law enforcement or regulatory authorities when required by valid legal process.

We do not share your API keys with any third party under any circumstances.

8. Cookies and Analytics

The Service uses essential cookies to maintain your authenticated session. We do not use advertising cookies or third-party tracking pixels.

We use privacy-respecting analytics to understand aggregate usage patterns. These analytics do not build a behavioral profile of you as an individual and are not shared with advertising networks.

9. Your Rights

You have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate data; (c) request deletion of your data, subject to legal retention requirements; (d) export your data in a portable format; (e) withdraw consent for processing at any time.

To exercise any of these rights, contact us at support@zephirex.com. We will respond to verified requests within 30 days.

10. Security Measures

We implement industry-standard security measures including AES-256 encryption at rest, TLS encryption in transit, mandatory two-factor authentication (TOTP) for all accounts, and audit logging of privileged actions.

No system is perfectly secure. In the event of a data breach affecting your personal information, we will notify affected users promptly and take steps to contain and remediate the breach.

11. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a minor has provided us with personal information, please contact us and we will delete it.

12. International Users

The Service is hosted in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

It is your responsibility to ensure that your use of the Service complies with the data protection laws of your jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or a platform notification. The "Last Updated" date below reflects the most recent revision.

Continued use of the Service after changes take effect constitutes acceptance of the revised Privacy Policy.

14. Contact

Zephirex Technologies LLC is based in Atlanta, Georgia, United States. For questions about this Privacy Policy or to exercise your data rights, contact us at support@zephirex.com.