Privacy policy
1. Who we are
BlockZenith Labs, SA ("BlockZenith", "we") is incorporated in Luxembourg, registered number B 254‑991, with offices in Berlin, Lisbon and Singapore. We operate the website at blockzenith.bz and the product surfaces linked from it.
2. What we collect
We deliberately collect as little as possible. On marketing pages we record anonymized request metadata for aggregate analytics (country, referrer, page) retained for 30 days. When you email or submit the contact form, we retain the content of your message and the reply thread for the duration of our relationship plus 24 months.
3. Product data
For engagements and products we operate, data handling is covered by a separate Data Processing Agreement. We do not pool customer data across engagements, and we do not fine‑tune models on client inputs without a written, per‑engagement agreement that explicitly authorizes it.
5. Your rights
If you are in the EU/EEA, UK, Switzerland, Brazil or California, you may have rights to access, correct, or delete personal data we hold about you. Email privacy@blockzenith.bz and we will respond within 30 days.
6. Security
We run a zero‑trust corporate environment with device‑bound identities, HSM‑backed signers, and SLSA‑3 provenance for production builds. Incident playbooks are reviewed quarterly.
7. Updates
If we materially change this policy, we will announce it on the site and in the product surfaces at least 30 days before it takes effect.