Privacy Policy

1. Overview

This Privacy Policy explains what data Zolea (“Zolea,” “we,” “us”) collects, how we use it, and the choices you have. It applies to your use of the Zolea platform and works alongside our Terms of Service. By using Zolea, you agree to this policy.

Our approach is to collect as little as possible. Zolea is non-custodial: we never have your private keys or seed phrase, and we cannot access or move your funds.

2. What we collect

Depending on how you use Zolea, we may process:

• Account & identity — the public wallet address you sign in with (and the public key used for encryption), and, if you use the email fallback, your email address for sending a magic sign-in link.
• Profile — anything you choose to add, such as a username, avatar, or bio.
• Content — messages, posts, and uploads you create in servers, channels, and DMs (see encryption below).
• Technical & usage data — basic logs needed to run and secure the service, such as request metadata, approximate device/browser info, and anti-abuse signals (for example rate-limit and proof-of-work checks).

3. What we never collect

We never ask for, receive, or store your private keys, seed phrase, recovery codes, or passwords. Wallet sign-in is a signature that proves the wallet is yours — it does not give us access to it. There is no custodial balance and nothing for us to spend on your behalf.

4. How we use your data

We use the data above only to:

• Authenticate you and keep you signed in.
• Provide the platform's features — communities, channels, DMs, live coin cards, and profiles.
• Keep Zolea secure and abuse-free (bot protection, rate limiting, and enforcing our terms).
• Communicate essential service messages, such as the email sign-in link you request.

5. Encrypted messages

Your direct messages and your private My Space notes are end-to-end encrypted in your browser before they are stored. The encryption keys are generated on your device; we store only ciphertext and your public key, and we cannot read the contents. Uploaded media is served through short-lived, signed URLs that expire and can't be freely shared or scraped.

6. Third-party services

We use a small number of providers to run Zolea, and your data is processed by them only to deliver the service:

• Supabase — authentication, database, and file storage that power your account and content.
• DexScreener — the source of live market data shown in coin cards (we send token addresses, not your personal data).
• Wallet & on-chain services (e.g. Phantom, pump.fun) — used in your own wallet when you sign in or transact; they have their own privacy policies we don't control.
• Blockchain networks are public by design: any on-chain activity tied to your wallet address is publicly visible and outside our control.

7. Cookies and local storage

We use cookies and your browser's local storage for essential purposes only — keeping you signed in, remembering that you accepted our Terms, and storing your encryption keys on your device. We don't use advertising or cross-site tracking cookies.

8. How we share data

We do not sell your personal data. We share data only with the service providers above as needed to operate Zolea, or where required by law or to protect the rights, safety, and security of Zolea and its users.

9. Data retention

We keep your data for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our terms. Note that content shared in communities or sent to others, and anything recorded on a public blockchain, may persist beyond deletion of your account.

10. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit or remove much of your profile and content directly in the app, and you can contact us to make a request about the rest. We'll respond consistent with applicable law.

11. Children

Zolea is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us so we can remove it.

12. Changes to this policy

We may update this policy from time to time. When we do, we'll revise the effective date above, and your continued use of Zolea after changes take effect means you accept the updated policy.