In the surveillance economy of the legacy internet, your data is the product. Massive tech conglomerates track your search history, read your private messages, and passively monitor your location 24/7 to serve you hyper-targeted advertisements. Zusei categorically rejects this business model. We do not sell your data to third-party ad brokers because we are not an advertising platform. We are a physical engagement ecosystem.
However, because our entire engine is built on the concept of "Proof of Presence," we absolutely must process highly specific, highly sensitive geospatial telemetry. We must know exactly where you are in the real world, but only at the exact moment you ask us to verify it. Our Privacy Policy is designed to be completely transparent about how we capture your location, where we store your media, how we execute biometric handshakes, and how you maintain ultimate sovereignty over your digital footprint.
Section 1: Geospatial Telemetry (The Location Engine)
The foundation of Zusei is the interactive map and the physical check-in. To validate your presence at a Node or an Event, we require access to your mobile device’s GPS coordinates.
Active vs. Passive Tracking: This is the most critical distinction in our privacy architecture. Zusei does not passively track your location in the background. We do not care where you sleep, what route you drive to work, or where you spend your off-hours. We only query your device's GPS hardware at the exact, fractional millisecond that you actively tap the "Scan" or "Check-In" button on our interface.
When you attempt to scan a venue’s QR code, our engine compares your current active GPS coordinates against the 50-meter validation radius of the venue.
The moment the server verifies the handshake (whether it results in an "Access Granted" or a "Geofence Breach" error), the location ping is terminated. We do not maintain an open, running connection to your device's location services.
The Immutable Footprint: When you successfully scan into an event, that specific location and timestamp are permanently etched into your public "My Footprint" ledger. By using Zusei, you consent to this specific, verified location data being publicly visible to the network. Your footprint is your reputation; you cannot hide your verified physical achievements while simultaneously demanding the clout they provide.
Section 2: Biometric Data and Device Binding
To protect your ZP capital and prevent the unauthorized transfer of cryptographic event tickets, Zusei utilizes state-of-the-art Single Device Enforcement and WebAuthn frameworks.
Biometric Pledges: If you enable FaceID or TouchID to secure your Zusei account, you must understand that Zusei never receives, stores, or processes your actual biological data. Your face map and fingerprint data remain securely locked inside the encrypted hardware enclave of your personal device.
The Cryptographic Token: When you use biometrics on Zusei, your device simply sends a cryptographic "Yes" or "No" token to our servers, confirming that the biological owner of the device has authorized the action. We know it is you, but we do not know what you look like.
Section 3: Media Uploads and the S3 Architecture
Customizing your Public Profile or Merchant Dashboard requires uploading high-fidelity images (PFPs, Event Flyers, Cover Art).
Data Sanitization: When you upload an image, our local engine immediately strips all EXIF metadata (including hidden GPS tags, camera models, and timestamp data attached to the photo file) before it ever touches our permanent storage.
Secure Storage: All sanitized media is securely routed and synced to our dedicated data center infrastructure, residing permanently in the image storage. These buckets are heavily fortified against unauthorized scraping. We maintain strict pathing and content delivery networks (CDNs) to ensure your profile images load in milliseconds worldwide, without compromising the underlying storage architecture.
Section 4: Web3 Wallets and On-Chain Privacy
Zusei offers seamless integration with decentralized Web3 wallets (MetaMask, Phantom, etc.) to enable token-gated entry to physical events.
Read-Only Access: When you execute the cryptographic handshake to bind your wallet to Zusei, we only request a read-only signature. We are simply asking the blockchain to verify that you control the public address.
Zero Private Key Exposure: We will never ask for your seed phrase, and our system possesses zero capability to initiate transactions, move funds, or alter the contents of your digital wallet. Your decentralized assets remain entirely outside of our jurisdiction.
Section 5: Data Retention and Deletion
You own your reality. If you decide to exit the Zusei ecosystem, you have the absolute right to demand the total erasure of your footprint.
By accessing the security settings in your Studio dashboard, you can initiate a total account purge.
This action will permanently sever your Web3 wallet bindings, delete your uploaded assets from the image storage, erase your ZP balance, and obliterate your entire chronological history of physical check-ins from our database. Because this data is used to calculate global network analytics and vendor payouts, complete deletion may take up to 30 days to clear across all backup ledgers, but your profile will vanish from the public network instantly.