Privacy Policy

ZEK LTDA · CNPJ: 65.616.049/0001-19 · Last updated: March 2026

  1. Who We Are

ZEK LTDA ("Zek", "we", "us") operates a conversational payment platform accessible through messaging apps including WhatsApp, Telegram, and iMessage. This policy describes how we collect, use, and protect your personal information when you use our services or visit our website (zekbanker.com).

Contact: privacy@zekbanker.com

  1. What We Collect

We collect the following categories of personal data:

Account and identity data: Name, date of birth, nationality, government-issued ID documents, selfie/liveness images, and any other information required for identity verification (KYC).

Contact data: Phone number, messaging platform identifier.

Transaction data: Transaction amounts, dates, recipient information, wallet addresses, and transaction hashes recorded on the blockchain.

Device and usage data: IP address, device type, operating system, and interaction logs within the platform, collected for security monitoring and fraud prevention.

We do not collect financial credentials such as bank account numbers or card details. Fiat payment details are handled directly by our licensed infrastructure partners.

  1. How We Use Your Data

We use your personal data for the following purposes:

• To verify your identity and comply with applicable KYC requirements

• To provide and operate our payment services

• To share verified identity information with our licensed infrastructure partners (such as Bridge, Bitso, and Avenia) so they can process your transactions

• To monitor for suspicious activity, fraud, and policy violations

• To communicate with you about your account and transactions via your chosen messaging platform

• To improve and maintain the security of our platform

We do not use your personal data for advertising, profiling, or selling to third parties.

  1. Messaging and Consent

By registering for Zek through a messaging platform (WhatsApp, Telegram, or iMessage), you consent to receiving messages from us related to your account and transactions, including transaction confirmations, security alerts, and service updates.

You can stop receiving messages at any time by sending "stop" or by requesting account deletion. We will not send unsolicited promotional messages without your prior opt-in consent.

Our use of the WhatsApp Business Platform is subject to Meta's WhatsApp Business terms and policies.

  1. Who We Share Your Data With

We share personal data only with the following categories of recipients, and only to the extent necessary:

Identity verification provider (Sumsub): To perform KYC checks including document verification, liveness verification, and sanctions/PEP screening.

Licensed infrastructure partners (Bridge, Bitso/Juno, Avenia): To enable fiat-to-stablecoin and stablecoin-to-fiat conversions. These partners receive your verified identity information so they can process your transactions in compliance with their own regulatory obligations.

Messaging platform provider (Infobip): To deliver messages to you through WhatsApp and other messaging platforms.

We do not sell, rent, or trade your personal data. We may disclose data if required by law or legal process.

  1. Blockchain Data

When you make transactions through Zek, certain data is recorded on public blockchain networks. This includes wallet addresses and transaction details. Blockchain records are permanent and publicly visible. Zek cannot modify or delete data recorded on a blockchain.

  1. Data Retention

We retain your personal data for as long as your account is active, plus 5 years after account closure, to comply with applicable record-keeping requirements. Identity verification data held by our KYC provider is retained in accordance with their own data retention policies.

You may request deletion of your account and associated data at any time by contacting privacy@zekbanker.com. Deletion is subject to applicable legal retention obligations and does not affect data already recorded on public blockchains.

  1. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit, access controls, and monitoring for unauthorized access. Self-custodial wallet keys are stored on your device and are never accessible to Zek.

  1. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you

• Correct inaccurate data

Request deletion of your data

• Withdraw consent for messaging

• Request data portability

To exercise any of these rights, contact privacy@zekbanker.com. We will respond within 15 business days.

For users in Brazil, your rights under the LGPD (Lei Geral de Proteção de Dados) are respected. For users in the European Economic Area, your rights under the GDPR are respected.

  1. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the platform. Continued use of Zek after a policy update constitutes acceptance of the updated terms.