Privacy Policy

This policy explains what personal information ZennShop collects, why, who can see it, and your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

What we collect

• Account: email address, username, a hashed version of your password (never the password itself), language, and your Google account ID if you sign in with Google.
• Security: IP address, browser type, sign-in times and failed sign-in attempts, to protect accounts and stop abuse. Your country comes from our network provider and is used to choose a currency.
• Orders and payments: what you bought or sold, amounts, payment reference numbers or transaction IDs, receipt screenshots, wallet and withdrawal records, and the name and number of the account you withdraw to.
• Order chats: messages and pictures you send in order chats, including any game details you share there.
• Sellers: listings and photos, and the reviews buyers write. Account sellers also give their full name, location, a Facebook profile link and an ID photo.

Why we use it

To run your account, process orders and payments, hold and release money, decide appeals, prevent fraud, send emails about your account and orders, meet our legal and accounting duties, and improve the site.

Who can see it

• Other users see only your username, your listings, your reviews (with buyers' names shortened, like r******0) and the order chat of orders you share.
• Sellers never see buyers' receipts or payment details. ID check details are seen only by ZennShop admins, are stored encrypted, and are never shown to other users.
• ZennShop admins see what they need to check payments, decide appeals and keep the site safe. Every admin action that changes money or settings, and every time an admin opens an order chat, is recorded.
• Service providers that run parts of ZennShop for us: Vultr (servers, Singapore), Cloudflare (network and security), Brevo (emails), Backblaze (encrypted backups), Telegram (alerts to our admins, with usernames and amounts), Binance (receiving USDT payments) and Google (only if you sign in with Google). Some of them store data outside the Philippines.
• Authorities, when the law requires it or to report fraud.

We do not sell your personal information and we do not use advertising trackers.

Cookies

We use only the cookies the site needs: one that keeps you signed in, one for the admin area, and your choices for language, currency and light or dark mode.

How long we keep it

• Account information: while your account exists.
• Orders, payments, wallet and withdrawal records, and order chats: kept as financial and dispute records for as long as Philippine law requires, even after an account is closed.
• ID check details: while you sell accounts and for as long as needed for disputes about the accounts you sold, then deleted.
• Backups are kept for 30 days.

How we protect it

Passwords are hashed, identity details are encrypted, the site uses HTTPS only, admin accounts need a second sign-in step, and access to data is limited to what each task needs.

Your rights

Under the Data Privacy Act you can ask to know what we hold about you, get a copy, correct it, object to its use, or have it deleted when we no longer need it for orders, disputes or legal duties. Contact us through the Contact us page. You can also complain to the National Privacy Commission (privacy.gov.ph).

Changes

We may update this policy. The date at the top shows the latest version, and important changes are announced on the site or by email.