Security & Trust

Last Updated: January 2026

Zeloris is built to help users identify unknown callers and reduce scam/spam risk while collecting as little data as possible. This page summarizes the security and privacy principles behind the service in plain language.

1. What We Do NOT Access

2. What We Store (Minimal Data)

We store the minimum information required to provide the core functionality:

• Public wallet address (your Web3 identity).
• Phone number hash (cryptographic proof; not stored as plaintext phone number).
• Device token (FCM/APNs) for push notifications such as verification flows.
• Spam reports submitted by users (reported number + category), used to compute aggregated spam signals.

3. How Call-Related Processing Works

Zeloris focuses on caller identification and spam signals. We do not process call audio. Call-related checks are performed using metadata needed for caller identification and user-requested verification flows.

4. User Control: Unlink / Deletion

You can Unlink your number in the app. Unlink deletes the association between your wallet and phone number hash in our database. After unlink, the number will no longer appear as “Verified”.

5. Third-Party Services

We use these processors to deliver the service:

• Apple Push Notification service (APNs) for iOS notifications.
• Google Firebase (FCM) for Android notifications.
• Stripe for payments. We do not store your card details.

6. Responsible Disclosure

If you believe you’ve found a security issue, please contact us at security@zeloris.app. Please include steps to reproduce and relevant logs/screenshots if possible.

7. Accountability

The Zeloris service is operated by Nexidy Labs OÜ (Estonia). For general support, contact support@zeloris.app.

See also: Privacy Policy and Terms of Service.