Back to home

Privacy Policy & Data Integrity

Last updated: May 28, 2026

This Privacy Policy explains how ZavaVault collects, uses, stores, and protects information when you use our independent ledger platform. ZavaVault is a division of the Zavakar ecosystem and is designed with database isolation, data minimization, and delegated financial processing.

1. Information we collect

Account and profile data

  • Full name, email address, phone number (if provided), and password (stored in hashed form).
  • Terms acceptance timestamp and account activity metadata (login times, session events).
  • Optional social sign-in identifiers when you authenticate through supported OAuth providers.

Ledger and transaction data

  • ZAVA balance dimensions (available, reserved, withdrawn).
  • Ledger events including partner syncs, withdrawal reservations, status changes, and payout outcomes.
  • Withdrawal request details: amounts, statuses, timestamps, and administrative review notes.

Partner linkage

  • Identifiers used to link your ZavaVault account to authorized partner platforms (for example, Workigo user IDs).
  • Credit sync payloads required to recognize performance points as ZAVA.

Payout and identity data

  • When Stripe Connect is enabled: Stripe account identifiers, Connect onboarding status, and payout routing metadata maintained by Stripe.
  • When bank details are collected locally: account holder name, institution/transit identifiers, and masked account references (last four digits).
  • Identity verification status returned by our payment processor where KYC is required.

2. Information we do not store

ZavaVault follows a data-minimization approach for financial credentials:

  • We do not store full credit or debit card numbers on ZavaVault application servers.
  • We do not store complete bank account numbers when payout collection is delegated to Stripe Connect.
  • We do not sell your personal information to third-party marketers.

3. How we use information

We use collected information to:

  • Authenticate you and maintain your independent vault account.
  • Display your ledger, process redemption requests, and communicate payout status.
  • Sync authorized partner credits into ZAVA at the disclosed ratio.
  • Detect fraud, enforce limits, and protect platform integrity.
  • Comply with legal, tax, and regulatory obligations.
  • Respond to support requests and service notifications.

4. Third-party processors

Financial operations rely on industry-standard infrastructure:

  • Stripe — payment processing, Connect onboarding, identity checks, transfers, and payouts. Stripe's handling of payment data is governed by Stripe's privacy policy and applicable financial regulations.
  • Authorized partner platforms — credit sync and withdrawal reconciliation via secured APIs.
  • Email delivery providers — account verification and transactional messages.

We share only the data necessary for each provider to perform its function.

5. Security measures

  • Standalone database architecture separating ZavaVault credentials from partner application databases.
  • HTTPS encryption for data in transit.
  • Token-based authentication for internal and partner API integrations.
  • Immutable ledger event history for balance and payout auditing.
  • Administrative review workflows for high-risk withdrawal activity.

6. Data retention

We retain account, ledger, and payout records for as long as your account is active and as required to meet legal, audit, and dispute-resolution obligations. You may request account closure by contacting support; some records may be retained where law or legitimate business needs require.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, or request deletion of certain personal information, subject to legal exceptions. ZavaVault operates with respect for Canadian privacy principles, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where applicable.

To exercise privacy rights, contact support@zavavault.com with your registered email and a description of your request.

8. International users

ZavaVault settles liquidations in Canadian Dollars (CAD). If you access the service from outside Canada, you understand that your information may be processed in Canada and by payment partners operating in other jurisdictions necessary to complete payouts.

9. Children

ZavaVault is not intended for individuals under the age of 18 (or the age of majority in your province or territory). We do not knowingly collect information from minors.

10. Changes to this policy

We may update this Privacy Policy to reflect operational, legal, or technical changes. The "Last updated" date at the top of this page will be revised when material changes are posted.

11. Contact

Privacy inquiries: Contact Support · support@zavavault.com