Privacy Policy

Last updated: June 3, 2026
At ZenLootX, your privacy matters. This policy explains what information we collect, how we use it, and what we will never do with it. We keep it simple and honest.

1. Overview

ZenLootX ("we," "us," "our") operates the website at zenlootexchange.com. We are committed to protecting the personal information of every user on our platform — buyers and sellers alike.

The short version: We collect only what we need to operate the marketplace safely. We do not sell your data. We do not share it with advertisers. Your ID documents are private and only used for seller verification.

2. What We Collect

We collect different types of information depending on how you use ZenLootX:

Type What it includes Who it applies to
Account info Username, email address, password (hashed) All users
Profile info Profile photo, bio, member since date All users
Verification info Full name, phone number, date of birth, country, government-issued ID (front and back) Sellers only
Transaction info Listings created, orders placed, payment amounts, escrow status Buyers and sellers
Communication info Messages sent through the platform between users All users
Technical info IP address, browser type, device info, session activity All users
Reports Report reason and details when a user reports another user All users

We do not collect sensitive financial details (such as full card numbers) directly — payment processing is handled by our payment partner.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To create and manage your account
  • To verify seller identity and maintain marketplace trust
  • To process transactions and manage escrow
  • To communicate with you about your account, orders, or support requests
  • To investigate disputes, fraud, and reported violations
  • To improve the security and performance of the Platform
  • To send important service notifications (not marketing spam)

We will never use your information for purposes beyond what is listed here without asking for your explicit consent first.

4. Storage & Security

Your data is stored on secure servers provided by Supabase, a trusted infrastructure provider. All data is encrypted in transit (HTTPS) and at rest.

ID documents submitted during seller verification are stored in a private, encrypted storage bucket. They are not publicly accessible and cannot be viewed by other users, buyers, or sellers — only by ZenLootX administrators during the review process.

We take security seriously, but no system is completely immune to breaches. If a security incident occurs that affects your data, we will notify you as required by applicable law.

5. What We Share (and What We Don't)

We do not sell your personal data. We do not share your personal information with advertisers, data brokers, or marketing companies — ever.

We may share limited information only in the following circumstances:

  • With service providers: We use third-party services (Supabase for the database, Resend for email, Cloudflare for hosting) that process data on our behalf. These providers are bound by data processing agreements and cannot use your data for their own purposes.
  • For legal reasons: If we are required by law, court order, or government authority to disclose information, we will comply. We will notify you where legally permitted to do so.
  • To protect users: In cases of fraud, scamming, or threats of harm, we may share relevant information with law enforcement or the affected parties.

Between buyers and sellers on the Platform, only your username and profile information are visible. Your email, phone number, ID documents, and full name are never shown to other users.

6. Data Retention

We keep your data for as long as your account is active or as long as needed to provide our services. If you close your account:

  • Your public profile and listings are removed
  • Transaction records are retained for up to 3 years for legal and dispute purposes
  • ID documents submitted for seller verification are deleted within 90 days of account closure
  • Logs and security data may be retained for up to 1 year

7. Your Rights

You have the following rights regarding your personal data:

  • Access: You can request a copy of the personal data we hold about you
  • Correction: You can update your account information at any time through the Account settings page
  • Deletion: You can request that we delete your account and personal data
  • Portability: You can request your data in a structured, machine-readable format
  • Objection: You can object to certain uses of your data

To exercise any of these rights, contact us at support@zenlootexchange.com. We will respond within 30 days.

8. Cookies

ZenLootX uses minimal cookies. We use session cookies to keep you logged in and to maintain your preferences. We do not use advertising cookies or tracking pixels.

You can disable cookies in your browser settings, but some features of the Platform may not work correctly without them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

For significant changes, we will notify registered users via email.

10. Contact

If you have questions, concerns, or requests about your privacy, contact us:

This Privacy Policy is governed by the laws of the Republic of the Philippines.