Section 1: What Information We Collect

Effective Date: 1 June 2026  ·  Last Updated: 18 October 2026  ·  Operator: 360 Logistics Limited

1.1 In One Sentence

We collect the information we need to open your account, prove you are who you say you are, move your money safely, keep criminals out, and answer you when you ask for help. Nothing more.

1.2 Information You Give Us

• Account details — your name, email address, phone number, username and password (stored only as an irreversible hash, never in readable form).
• Sign-in details — if you sign in with Google, we receive your Google account name, email address and profile photo. If you sign in with your phone number, we receive the number and confirm it with a one-time code sent by SMS. We never receive your Google password.
• Identity documents — a photograph of your government-issued ID, your date of birth and your nationality.
• Face and liveness data — a live selfie or short video used to confirm the ID belongs to you and that a real person is present.
• Proof of address or source of funds — only where a higher verification tier or a large transaction requires it.
• Content you post — community posts and comments, P2P (U2U) and escrow chat messages, voice notes you choose to record in trade chat, uploaded proof of payment or delivery, live chat messages, support tickets and their attachments.
• Job applications — if you apply for a role on our Careers page or join as a support agent, your name, contact details, CV, the departments you choose and the answers you give.
• Profile choices — avatar, display name, and your privacy and notification settings.

1.3 Information We Collect Automatically

• Device and technical data — device model, operating system, app version, language, and a device fingerprint used to recognise your trusted devices.
• Connection data — IP address, network type and the approximate location derived from your IP.
• Device location at sign-in — the Zelencio app asks for location permission and reads your device location once, when you sign in. We compare it with your network location to detect stolen accounts, impossible logins and fraud from restricted regions. We do not track your location in the background or while you use the app.
• App permissions data — camera and microphone only while you capture ID, a liveness video, a QR code or a voice note; biometric confirmation (fingerprint or face unlock) is checked by your phone and we only receive a yes or no, never your biometric data.
• Usage and security logs — login times, pages and features used, failed PIN attempts, two-factor events and device changes.

1.4 Information Created by Your Activity

Deposits, withdrawals, trades, swaps, internal transfers, voucher codes, gifts, P2P orders, escrow deals, referral relationships, reward balances and your account balances. This is the transaction record we are legally required to keep.

1.5 Information From Other Sources

Public blockchain data relating to addresses you deposit from or withdraw to; sanctions, politically-exposed-person and adverse-media screening results; and fraud signals from security providers.

1.6 What We Never Collect

We do not ask for and do not want your bank account password, your card PIN, your seed phrase for an external wallet, or your contacts list. Zelencio does not read your SMS messages, does not track your location in the background, does not record audio except when you press record, and never receives your fingerprint or face-unlock data.