Legal / privacy
Collect what the access check actually needs.
The implementation is designed to avoid collecting trading credentials and to minimize provider metadata. Final privacy terms still require launch-market review.
Account data
Zinou needs standard account information such as email and server-side authentication/session records to operate user accounts.
Quotex verification
The product should store only the minimum partner/account reference and sanitized eligibility metadata required to prove member access. Quotex trading passwords are outside the product scope and must not be collected.
Verification audit
Verification attempts may store a one-way hash of the submitted reference, status/reason codes and timestamps for abuse prevention and support. Raw provider responses should not be retained unless explicitly required and reviewed.
Security and retention
Production retention periods, subprocessors, user-rights workflows and contact details must be finalized for the launch jurisdiction before release.