Legal
Privacy Policy
Last updated: [DATE — set on publish]
This policy explains what Zexci collects, why, and the choices you have. Zexci is operated by PNS Communications, LLC ("Zexci", "we", "us").
Overview
Zexci lets you scan verified ads ("QRV codes") and earn Zexci Points you can redeem for gift cards. We aim to collect only what we need to run the rewards program, keep it safe, and meet legal obligations. We do not sell your personal information. [ATTORNEY: confirm "do not sell" under CCPA/CPRA incl. cross-context advertising.]
Information we collect
- Account information. Your email address when you sign up (sign-in is via a one-time email link). An optional display name.
- Phone number. When you verify your account or redeem, we collect and verify a mobile number (see Text messages, below).
- Scan & device signals. When you scan, we record scan events and limited technical signals (e.g. a hashed IP address, coarse device/locale, app/usage data) used to deliver rewards and to detect fraud and abuse.
- Zexci Pulse responses. Only if you opt in to Pulse, the responses you choose to share about ads you scan (see Zexci Pulse).
- Redemption & identity information. To issue a gift card we collect the information needed to deliver it. Where total rewards reach a legal reporting threshold, we collect tax-identification information (including a Social Security Number) as a condition of redemption (see Identity verification).
How we use information
- To operate the rewards program — credit Zexci Points, run your wallet, and fulfill redemptions.
- To verify scans are genuine and to detect, prevent, and investigate fraud, abuse, and violations of our Terms.
- To verify your identity where required and to meet tax and legal obligations.
- To send transactional and verification messages (email and SMS) and respond to support.
- With your opt-in, to operate Zexci Pulse.
- For advertiser measurement, we use aggregate, pseudonymous analytics — advertisers see verified performance, not the personal identities of the people who scanned.
Zexci Pulse (opt-in)
Zexci Pulse is optional and off by default. If you choose to turn it on in the app, you can share verified feedback about ads you scan — and earn extra Zexci Points for it. You decide what to share, each response is tied to a real verified scan, and you can turn Pulse off at any time. We treat Pulse participation as consented. [ATTORNEY: confirm Pulse consent disclosure + any sale/share characterization.]
Text messages (SMS)
If you provide a mobile number, you consent to receive account, verification, and transactional text messages from Zexci (for example, sign-in codes and redemption notices). Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. Opting out of texts may limit verification-dependent features such as redemption. We do not share your mobile number with third parties for their own marketing. [ATTORNEY: confirm A2P 10DLC / CTIA SMS-consent language, opt-in wording, STOP/HELP.]
Identity verification & sensitive data
To issue a gift card we must know who is receiving it. For higher reward totals, U.S. tax rules require reporting: when the rewards you receive reach the reporting threshold in a calendar year, we collect a Social Security Number (or other tax ID) and may issue a tax form, as a condition of redemption. Sensitive identifiers like SSNs are handled with heightened protection — encrypted, access-restricted, and used only for the purpose collected. [ACCOUNTANT/ATTORNEY: confirm 1099/threshold mechanics + SSN storage/retention/disclosure.]
How we share information
- Service providers who help us run Zexci (e.g. messaging, identity, cloud hosting, gift-card fulfillment), under contract and only as needed.
- Gift-card issuers, to fulfill a redemption you request.
- Legal & safety, where required by law or to protect Zexci, our users, or the public.
[ATTORNEY: confirm full sharing list, processor vs. controller roles, cross-context ad disclosures.]
Data retention
We keep information for as long as needed to run the program and meet legal obligations (for example, tax records are retained as law requires), then delete or de-identify it. [ATTORNEY: confirm retention periods per data type.]
Your choices & rights
You can opt out of Pulse in the app, opt out of texts with STOP, unsubscribe from marketing email (we honor unsubscribe and maintain suppression handling), and request access to or deletion of your information, subject to legal limits (we may need to retain tax records). Depending on where you live, you may have additional rights (for example, California residents' rights to know, delete, correct, and to opt out of sale/sharing). We do not sell your personal information. [ATTORNEY: state-specific notices (CA "Do Not Sell or Share", etc.) — TBD.]
Security
We use technical and organizational measures to protect your information, including encryption of sensitive identifiers and restricted access. No system is perfectly secure, but security is a core part of how Zexci is built.
Children
Zexci is not directed to children and is intended for adults. [ATTORNEY: confirm minimum age (e.g. 18+) and COPPA posture.]
Contact
Questions about privacy? Contact Zexci (PNS Communications, LLC) at contact@zexci.ai [CONFIRM: dedicated privacy contact address / mailing address.]