Introduction
The EZZ platform ("we") deeply understands the importance of personal information to you and will do our utmost to protect your personal information securely and reliably. We are committed to maintaining your trust in us and adhere to the following principles when protecting your personal information: consistency of rights and responsibilities, clarity of purpose, choice and consent, minimum necessity, security assurance, subject participation, and openness and transparency.
This Policy applies to your access and use of our services through the EZZ H5, mobile web, DApp and other forms we may provide from time to time. Please read and understand this Policy in full before using our services; by using or continuing to use our services, you agree that we collect, use, store and share your relevant information in accordance with this Policy.
Article 1 Information We Collect
1.1 Information You Provide
- Account registration information: email address, mobile number, login password, nickname, avatar;
- Identity verification information (KYC): name, gender, date of birth, nationality, ID type and number, ID photos, facial recognition information, address proof;
- Shipping information: recipient name, phone, country/region, province/state, city, detailed address, postal code;
- Customer service and feedback information: communication records with customer service, message content, uploaded images/videos;
- Marketing interaction information: information generated by interactions such as coupon claims, check-ins, sharing, posters, lotteries.
1.2 Information Automatically Collected When You Use Our Services
- Device information: device model, operating system version, unique device identifiers, IP address, browser type, screen resolution;
- Log information: access time, pages visited, dwell time, click records, crash logs;
- Transaction information: order number, products, amount, payment currency, on-chain transaction hash (txHash), Gas consumed;
- Wallet and on-chain information: wallet address, chain ID, authorization records, staking/redemption records, Swap records, RWA credential holdings. Special note: public transaction data on the blockchain is visible to anyone, but we will not publicly associate your real identity with your on-chain address without authorization.
1.3 Information We Obtain from Third Parties
- Basic information returned after authorization by third-party login (e.g., Google, Apple);
- Logistics tracking returned by logistics providers;
- Payment status returned by payment channels;
- Verification results returned by KYC service providers.
1.4 Cookies and Similar Technologies
We use Cookies, localStorage, IndexedDB and similar technologies to: maintain login state, remember your language/currency preferences, and collect access statistics. You can refuse Cookies through browser settings, but this may affect the use of some functions.
Article 2 How We Use Information
We use your personal information only for the following purposes:
- Providing core services: completing account registration, login, shopping, order fulfillment, logistics delivery, after-sales service, digital asset services;
- Regulatory compliance: KYC verification, anti-money laundering (AML), counter-terrorist financing (CFT), sanctions list screening;
- Security assurance: abnormal account login detection, risky transaction identification, anti-fraud, bot abuse prevention;
- Improvement and optimization: analyzing usage, improving product features, personalized recommendations (you may disable personalized recommendations in "User Settings");
- Communication: sending order notifications, security alerts, service announcements, and (with your consent) marketing information;
- Legal claims: responding to litigation, arbitration, regulatory investigations.
Article 3 How We Share, Transfer and Disclose Information
3.1 Sharing
We will not share your personal information with companies, organizations, or individuals outside the Platform, except in the following circumstances:
- With your explicit consent;
- Necessary for contract performance: e.g., sharing shipping information with logistics providers to complete delivery;
- Compliance requirements: sharing necessary information with KYC/AML service providers, regulators, judicial authorities;
- Affiliates: sharing with Platform affiliates within the minimum necessary scope to provide consistent services;
- Third-party SDKs: statistics, push, payment, KYC and other SDKs integrated into the Platform may collect necessary information, which we will list in a manifest.
3.2 Transfer
We will not transfer your personal information to any company, organization or individual, except in the case of merger, acquisition, or asset transfer, in which case we will require the new entity to remain bound by this Policy, or we will seek your consent again.
3.3 Public Disclosure
We will publicly disclose your personal information only in the following circumstances: (1) with your explicit consent; (2) based on laws, regulations, judicial proceedings, or government mandatory requirements.
Article 4 Storage and Cross-border Transfer of Information
4.1 Storage Location
We deploy servers in mainland China, Singapore, the European Union and other regions. In principle, personal information collected within a given territory is stored locally; in cross-border business scenarios, your information may be transferred to overseas servers, and we will protect data security through data protection agreements, standard contractual clauses (SCC) and other means.
4.2 Storage Duration
We retain your personal information only for the minimum period necessary to achieve the purposes described in this Policy; where laws and regulations provide otherwise (e.g., AML requires 5 years), such provisions shall prevail. After the period expires, we will delete or anonymize the data.
Article 5 Information Security
5.1 We adopt industry-standard security measures, including but not limited to:
- TLS/SSL encryption at the transport layer;
- Encrypted storage of sensitive fields (passwords, ID numbers);
- Access control and least privilege;
- Regular security audits and penetration testing;
- Employee confidentiality training and disciplinary actions.
5.2 Your wallet mnemonic, private key, Keystore, etc. are stored only on your local device. We do not upload, back up, or access them; please keep them properly by yourself.
5.3 The Internet environment is not 100% secure. In the event of a personal information security incident, we will promptly inform you of the basic situation, impact, response measures, and remediation suggestions in accordance with legal requirements, and report to regulators.
Article 6 Your Rights
Under applicable laws, you enjoy the following rights regarding your personal information:
- Right of access: query your account information, order records, KYC status;
- Right to rectification: correct inaccurate or incomplete personal information;
- Right to erasure: request deletion of your personal information within the scope permitted by law;
- Right to withdraw consent: withdraw consent to non-essential processing such as marketing and personalized recommendations;
- Right to account cancellation: apply for account cancellation; after cancellation we will delete or anonymize your personal information (except as required by law);
- Right to data portability (in certain jurisdictions): request export of your personal information in a structured, common format;
- Right to lodge a complaint: file a complaint with data protection regulators.
You may exercise the above rights through "User Settings" or by contacting customer service. To ensure account security, we may require identity verification before processing your request.
Article 7 Protection of Minors
Our services are intended for adults aged 18 and above. We do not provide services to minors under 18 and do not knowingly collect personal information from minors. If we discover that we have collected personal information from a minor without verifiable guardian consent, we will endeavor to delete the relevant data as soon as possible.
Article 8 Third-party Links and Services
The Platform may contain links to third-party websites, DApps, wallets, and block explorers. This Policy does not apply to such third parties, and we are not responsible for their privacy practices. We recommend that you review the privacy policies of any third-party services before using them.
Article 9 Updates to This Policy
We may revise this Policy from time to time. For material changes, we will notify you via in-app messages, emails, or prominent page notices. Your continued use of the Platform's services after the revision takes effect constitutes acceptance of the new Policy; if you disagree, you should stop using and cancel your account.
Article 10 How to Contact Us
If you have any questions, comments or complaints about this Policy or personal information protection, you may contact us via:
- In-app "Help & Feedback"
- Official customer service email (as published on the Platform)
We will respond to your request within 15 business days of receipt.
EZZ Team
Version: V1.0.0
Effective Date: 2026-10-25