Privacy Policy

This Privacy Policy describes how ZeroGEX, LLC (“ZeroGEX,” “we,” or “us”) collects, uses, and shares information about you when you use the website at zerogex.io and related products and services (collectively, the “Services”). By using the Services, you agree to this Privacy Policy.

We collect the following categories of information:

• Account information. Email address, password (stored as a salted hash), and, if you sign in with Google or Apple, the unique provider identifier and email returned by that provider.
• Subscription and payment information. Subscription tier, status, current billing period, and Stripe customer/subscription identifiers. Payment instruments (card numbers, expirations, billing addresses) are collected and processed by Stripe; we do not receive or store full card data.
• Usage and device information. IP address, request timestamps, pages visited, and basic browser/device metadata, used for security, abuse prevention, and product analytics.
• Audit events. Limited records of authentication and account-management actions (logins, role changes, subscription changes) for security and compliance.

• Provide, maintain, and improve the Services.
• Authenticate users and prevent fraud or abuse.
• Process subscriptions and payments via Stripe.
• Enforce tier-based access to features.
• Communicate with you about your account, billing, and material changes to the Services.
• Comply with legal obligations and respond to lawful requests.

We share information with third parties that help us operate the Services. The principal providers are:

• Stripe — payment processing, billing portal, and subscription management. Stripe’s privacy practices are described at stripe.com/privacy.
• Cloud infrastructure providers — hosting, storage, and content delivery for the Services.
• Identity providers — Google and Apple, when you choose to sign in with those services.

We do not sell your personal information. We do not share personal information with third parties for their own marketing purposes.

We use first-party cookies to keep you signed in (a session cookie) and to mitigate cross-site-request-forgery attacks (a CSRF cookie). Stripe-hosted pages set their own cookies under their domain, governed by Stripe’s privacy policy. Most browsers allow you to refuse or delete cookies; however, doing so may make parts of the Services unusable.

We retain account, subscription, and audit information for as long as your account remains active and for a reasonable period afterward to comply with legal, tax, or accounting obligations and to resolve disputes. You may request deletion as described below.

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise any of these rights, contact us at zerogexoptions@gmail.com. We may need to verify your identity before acting on a request. We will not discriminate against you for exercising any of these rights.

We use technical and organizational measures designed to protect your information, including encryption in transit (TLS), salted password hashing, signed session tokens, and rate limiting on authentication endpoints. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

The Services are operated from the United States. If you access them from outside the United States, your information will be transferred to, processed in, and stored in the United States.

The Services are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, provide additional notice through the Services.

Questions about this Privacy Policy can be sent to zerogexoptions@gmail.com.