Privacy Policy

1. Architectural Principle: Zero PII Custody (0 Bytes Stored)

zCred is designed from the silicon up as a confidential compliance decision engine. Unlike traditional identity verification or centralized credit bureaus, our fundamental architectural invariant is that we do not custody, persist, or store Personally Identifiable Information (PII).

We do not operate databases of government identification documents, financial credentials, tax returns, or private applicant records. Neither zCred protocol operators nor the decentralized applications requesting decisions ever gain visibility into your raw personal data.

2. Ephemeral Hardware Enclave Execution

All policy evaluations and decision logic are executed inside cryptographically sealed Hardware Enclaves (AWS Nitro TEE).

• Sealed Memory Sandbox: Sensitive inputs exist exclusively in encrypted, ephemeral volatile RAM during the millisecond execution window.
• Zero Disk Writes: Enclaves operate without persistent storage, local caches, or external network access during computation.
• Instant Memory Purge: Once the evaluation is complete and the cryptographic attestation is generated, the enclave memory is completely purged.

3. Information Collected via Website Inquiries

When you voluntarily reach out to us via our website forms (such as submitting an Interest Request or scheduling a technical briefing), we collect:

• Name and work email address
• Organization or protocol affiliation
• Primary area of interest and voluntary project notes

This information is used strictly to communicate directly with your team regarding partnership inquiries and technical briefings. We never sell, rent, or trade your contact information to third parties.

4. On-Chain Settlement & Cryptographic Attestations

The output of a zCred computation settled on public blockchains (e.g., Ethereum, Base, Arbitrum, Horizen Vela) consists solely of deterministic cryptographic proofs and boolean attestations (such as isEligible: true or a discrete risk tier). These attestations contain zero plaintext, zero reversible identity markers, and zero underlying financial metrics.

5. Cookies and Analytics

Our website uses minimal, strictly essential technical cookies required for basic security and session integrity. We do not deploy invasive third-party cross-site behavioral ad tracking or data brokers.

6. Cryptographic Verification & Inquiries

For technical architecture briefings, security questions, or enclave PCR measurement verifications, please schedule a direct session or submit an interest request through our portal.