Privacy Policy
This policy explains how NZOCHAIN handles information on a Web3 security platform, including technical data, wallet addresses, logs, cookies, authentication and user rights.
1. Data collection
NZOCHAIN collects only necessary data to provide the landing page, authenticate users, operate APIs, prevent abuse and deliver Web3 security features. This may include name, email, organization, contracted plan, preferences, language, contact information and technical navigation metadata.
2. Wallet Address
Wallet addresses may be processed when the user requests risk analysis, connects a wallet, signs an authentication message or uses the Wallet Scanner. Wallet addresses are public blockchain data, but NZOCHAIN treats their association with account, email, organization or product activity as operationally sensitive information.
NZOCHAIN never requests seed phrase, private key or recovery phrase.
3. Cookies
We use essential cookies for operation, security, load balancing, preference and session integrity. Analytical or performance cookies may be used to understand stability, aggregate usage and experience quality, respecting consent settings when applicable.
4. Logs and telemetry
Logs may record IP, user agent, timestamp, accessed route, error events, request status, session identifiers and abuse signals. In APIs, logs may also include endpoint, latency, status code, organization, masked API key and consumption for rate limits.
5. Authentication
Authentication may use email, password, external providers, JWT, secure sessions and wallet signature. Wallet-signed messages serve to prove address control and do not authorize fund movement.
6. LGPD and GDPR
NZOCHAIN structures its processes considering principles of purpose, necessity, transparency, security, prevention and accountability provided for in LGPD, as well as GDPR principles, including legal basis, minimization, storage limitation and data subject rights.
7. User rights
- Confirm whether we process personal data related to your account.
- Request access, correction, portability or deletion when applicable.
- Request information about purpose, data categories and sharing.
- Revoke optional consents, without affecting treatments essential to the service.
- Contest treatments when there is applicable legal basis.
8. Data retention
Data is kept for the period necessary to operate the platform, comply with legal obligations, resolve disputes, audit security, prevent fraud and enforce contractual terms. Security and API logs may have distinct retention according to criticality, plan and business requirements.
9. Security
NZOCHAIN applies access controls, monitoring, environment segregation, encryption in transit when applicable, security reviews and secure development best practices. No system is absolutely immune to risk, but the platform was designed to reduce exposure and respond quickly to incidents.
10. Contact
Privacy requests can be sent to contact@nzochain.com. For security, never send seed phrase, private key or full credentials by email.