Privacy policy

Contact details and website

For privacy and support, write to support@zmarketlab.com. The ZML website offers product information and access links. It does not collect visit statistics or include third-party analytics or advertising scripts.

Account and login information

To provide the service, Z Market Lab processes your account information, preferences, saved views, and news and alert settings. Signing in involves IP addresses, device identifiers, sessions and sign-in records. Google sign-in requests only your OpenID identity and email address; it doesn’t read your Google password, Gmail, Drive or contacts. Google identity data is used for sign-in, account linking and security, never for advertising, and accounts are never merged just because the email matches. ZML’s use and transfer of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements.

ZML Trade, service providers and sharing

ZML Trade processes trading credentials and execution data on your own server. To deliver updates and support, Trade sends operating and usage data to ZML; this never includes API keys, exchange credentials or withdrawal addresses. This information supports the features you use, subscriptions, the alerts you set up, security and troubleshooting. Google provides authentication, and Cloudflare, Tencent Cloud and AWS provide infrastructure; necessary processing may take place in their service regions and edge locations. ZML doesn’t sell Google user information or personal account data, and shares data only to provide the service, on your instructions, for security incidents or where the law requires. Operator access is limited by role.

Retention and security

Account content is kept while ZML provides the service, until you delete it in the product or ZML completes a verified deletion request. Only the latest 20 sign-in and security records are kept per account; older ones are deleted automatically. Records needed for billing, trading and security may have other retention periods. Backups are access-restricted and are included when a deletion is handled. Z Market Lab uses only the cookies this site needs: an HttpOnly session cookie; a known-device cookie issued to this browser after a successful sign-in (HttpOnly, valid for one year, so you wait less when signing in on your usual devices); a session-hint cookie that contains no credentials and only lets the page know this browser may be signed in; a short-lived cookie used during the Google sign-in round trip; and a cookie that remembers your interface language. Your browser may also store your theme preference. No advertising or cross-site tracking cookies are used. Sign-in and private responses never enter public caches, all traffic uses HTTPS, and passwords are stored as hashes.

Your choices and updates to this policy

Manage preferences, sign-in methods and devices in product settings, where you can also delete your account directly. Unlinking Google or revoking its access doesn’t delete your Z Market Lab account. To access, correct, export or delete your data, you can also write to the support address; ZML confirms your identity, the scope and anything it must retain, then tells you the outcome. Never email passwords, private keys or exchange API keys. Private data in ZML Trade is managed on your own server. If the use or sharing of data changes materially, ZML will say so in the product or on the website and update the date of this policy.

• Google API Services User Data Policy
• support@zmarketlab.com