1. General provisions
This Privacy Policy (“Policy”) explains how Zamon LTD (“we”, “us”, “Operator”) processes personal data when you use the Ozod service (“Platform”), including the Telegram Mini App, the related Telegram bot, and other Platform interfaces available via https://ozod.io. We follow applicable data-protection laws, including Regulation (EU) 2016/679 (GDPR) and UK data-protection law, as well as other rules depending on your jurisdiction. Some rights and duties may differ based on where you live. The Policy applies to all information we may obtain about you in connection with the Platform. Using the Platform means you accept the Policy; if you disagree, stop using the service.
1.1 About us
We are the controller of personal data: we determine the purposes and means of processing and are responsible for it. • Brand / service: Ozod • Legal entity: Zamon LTD • Company number: 16446260 • Registered address: 71-75, Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM • Website / app: https://ozod.io • Support: https://t.me/OzodCards For Policy questions, use the contacts above.
1.2 Consent and assumptions
By using the Platform or confirming acceptance of the Policy (where the interface provides that option), you agree to its terms. We process data on lawful bases: consent, performance of a contract (providing Platform services), legitimate interests (security, fraud prevention, service improvement), and legal obligations (including AML/CFT where applicable). When granting access to the Platform, we reasonably assume that you: 1) are entitled to use the Platform; 2) provide accurate and up-to-date information; 3) have reached the age of consent required by the law of your country of residence, or act with a legal guardian’s consent; 4) have read and accept the Policy. This Policy supplements, and does not replace, other consents and agreements between you and us.
1.3 Changes to the Policy
We may update the Policy. The current version is published in the Platform with the revision date. Where practicable, we will notify you of material changes via the Platform or support. Continued use after a new version is published means acceptance, unless your rights under law require otherwise. You may refuse updated terms only by stopping use of the Platform.
2. What data we process
Personal data means any information that identifies you directly or indirectly. The scope depends on the features you use. In a typical Ozod scenario we may process: • Telegram identifiers (Telegram ID, username, language, WebApp initData — as needed for login and session); • contact details (email, phone — if you provide them); • profile and settings (language, country, notification preferences, security settings: PIN/2FA in protected form); • technical data (IP address, device/client type, security and error logs, cookies and similar — where applicable); • product data: virtual cards (masked number, expiry, status, limits), eSIM (country/region, plan, status, data quota), crypto wallets and networks (deposit addresses, currency, network); • transaction and payment data (amounts, currencies, statuses, transaction IDs, descriptions/merchant as needed for accounting and support); • AML/CFT and risk-screening related data (screening results, hold/refund statuses — without excessive collection); • support communications (message text and attachments you send). We do not request full payment-card details beyond what is required to issue and service cards via providers; sensitive card credentials are handled under security requirements and arrangements with issuers/processors.
3. Purposes of processing
We process personal data to: 1) register, authenticate and maintain your account in the Telegram Mini App / bot; 2) provide Platform features: balance, wallets, card issuance and servicing, eSIM purchase and management, transaction history; 3) handle top-ups, charges, holds and status notifications; 4) provide technical support and investigate incidents; 5) ensure security and prevent fraud and abuse; 6) comply with AML/CFT and other legal duties, and respond to lawful authority requests; 7) improve the Platform (aggregated/anonymised analytics where permitted); 8) send service messages; marketing only with separate consent and an opt-out. Refusing to provide necessary data may limit access to some Platform features.
5. Retention
We keep data only as long as needed for the purposes collected and to meet legal duties (including accounting, AML and dispute resolution). After account deletion or withdrawal of consent, data is deleted or anonymised within a reasonable time unless law requires longer retention. Backups are destroyed according to rotation cycles.
6. Security
We apply organisational and technical safeguards: access control, TLS encryption, secret protection, monitoring and security logging. Staff and contractors with access are bound by confidentiality. No internet transmission is absolutely secure. If an incident affects your rights, we will take steps to reduce harm and notify you and/or the supervisory authority where required by law.
7. Your rights
Depending on applicable law, you may have rights to: access; rectification; erasure (“to be forgotten”); restriction; objection; portability; withdraw consent; lodge a complaint with a supervisory authority (for the EEA/UK — the relevant data-protection authority). Send requests via support: https://t.me/OzodCards. We may ask you to verify identity. We respond within statutory time limits (generally up to one month, with possible extension in complex cases).
8. International transfers
Data may be processed and stored in countries where we or our providers operate, including outside your country of residence. For transfers from the EEA/UK to countries without an adequacy decision, we use appropriate safeguards (such as Standard Contractual Clauses) and additional measures where required.
9. Children
The Platform is not intended for persons below the digital consent / capacity age set by the law of your country (and in any case not below the age allowed for financial services). If you learn that a child provided us data without a guardian’s consent, contact support — we will delete such data where possible.
10. Contact
Operator: Zamon LTD, No. 16446260 Address: 71-75, Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM Service: Ozod — https://ozod.io Support: https://t.me/OzodCards
Write to support inside the bot — we will respond and assist.