Privacy Policy

Our commitment: Zyrcle does not sell, rent, or trade your personal data to third parties for marketing purposes.

1. Who We Are

Zyrcle is a digital creator subscription platform operated by Inifex LTD (16543165). This Privacy Policy explains how we collect, use, store, and share personal information when you use zyrcle.com (“Platform”). For privacy inquiries, contact privacy@zyrcle.com.

2. Information We Collect

2.1 Account Registration Data

• Full legal name
• Email address
• Username and password (stored in hashed form — never in plain text)
• Date of birth (for age verification)
• Country of residence

2.2 Identity Verification Data (Creators Only)

• Government-issued ID document image
• Biometric selfie image and liveness check data
• Residential address and proof-of-address documentation
• Tax identification numbers (SSN/EIN for U.S. persons; foreign TIN for international creators)

2.3 Payment and Transaction Data

• Billing name and address
• Last four digits of payment card and expiration date only — full card data is never stored by Zyrcle
• Bank account details for creator payouts (encrypted at rest)
• Transaction history

2.4 Usage and Technical Data

• IP address and approximate geolocation
• Browser type and version
• Device type and operating system
• Pages visited and session duration
• Referring URLs
• Cookie and tracking data (see Section 5)

2.5 Communications

• Support tickets and emails sent to us
• Content of any reports submitted via the trust or legal portals

3. How We Use Your Information

• Account management: To create, maintain, and secure your account.
• Payments: To process subscription charges and creator disbursements.
• Identity & age verification: To comply with KYC, AML, and card network requirements.
• Fraud and security: To detect, prevent, and investigate fraudulent or illegal activity.
• Legal compliance: To satisfy tax reporting, law enforcement, and regulatory obligations.
• Communications: To send billing confirmations, renewal reminders, and support responses.
• Platform improvement: To analyze aggregate usage trends and optimize the service.

4. Legal Basis for Processing (GDPR/International Users)

• Contract performance: Processing necessary to deliver the service you signed up for.
• Legal obligation: Processing required by applicable law (e.g., tax reporting, KYC).
• Legitimate interests: Fraud prevention, security, and service improvement.
• Consent: For non-essential marketing communications (you may withdraw consent at any time).

5. Cookies and Tracking

Manage your cookie preferences via the Cookie Preference Center on the Platform or through your browser settings. See our full Cookie Notice for details.

6. How We Share Your Information

6.1 Service Providers

We share data with trusted third-party vendors — including identity verification providers, payment processors, fraud detection services, and cloud hosting providers — under contractual data processing agreements that require them to protect your information.

6.2 Legal and Regulatory

We may disclose information in response to valid legal process including subpoenas, court orders, or government investigations, or where required by applicable law.

6.3 Safety

We may share information where necessary to protect the safety of any person or to respond to credible threats of harm.

6.4 Business Transfers

In connection with a merger, acquisition, or asset sale, personal data may be transferred to a successor entity subject to equivalent privacy protections.

6.5 No Data Sales

We do not sell, rent, or trade personal data to third parties for advertising or marketing purposes.

7. Data Retention

8. Data Security

• AES-256 encryption of sensitive data at rest
• TLS 1.2+ encryption of all data in transit
• Role-based access controls limiting data access to authorized personnel
• Regular third-party penetration testing and vulnerability assessments
• PCI-DSS compliant payment infrastructure — card data processed by certified payment processors only

9. Your Rights

Subject to applicable law, you have the following rights regarding your personal data. To exercise any right, email privacy@zyrcle.com. We will respond within 30 days.

• Access: Request a copy of all personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your data, subject to legal retention requirements.
• Portability: Request your data in a machine-readable format.
• Opt-Out of Marketing: Unsubscribe from non-essential marketing at any time.
• California Residents (CCPA/CPRA): Additional rights including the right to opt out of data “sale” (we do not sell data) and non-discrimination for exercising privacy rights.
• EU/UK Residents (GDPR/UK GDPR): Right to restrict processing, right to object, and right to lodge a complaint with your supervisory authority.

10. Children's Privacy

The Platform is strictly prohibited to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will immediately terminate it and delete associated data.

11. International Transfers

Zyrcle is operated by Inifex LTD (16543165), registered in England and Wales at 128 City Road, London, United Kingdom. If you access the Platform from outside the UK, your data may be transferred to and processed in jurisdictions where data protection laws may differ from those in your country. By using the Platform, you consent to this transfer. We implement appropriate safeguards for international transfers where required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on the Platform. The “Last Updated” date at the top of this page reflects the most recent revision.

13. Contact

Privacy inquiries: privacy@zyrcle.com

General support: support@zyrcle.com

Inifex LTD (16543165)

128 City Road, London, United Kingdom

Questions about this policy? Email support@zyrcle.com