Account Closure and Cancellation

1. There is no subscription to cancel

ZincirX sells passports as one-time prepaid packages. There is no subscription: nothing renews and nothing is charged again after a purchase, so there is no recurring payment to cancel.

Passports bought in the mobile app through the App Store or Google Play are one-time purchases too, so there is nothing to cancel with Apple or Google either.

Fixed-term plans (Small Business, Mid-Size and Enterprise) for one month or one year are no longer sold. A plan bought earlier was paid once, does not renew and simply ends on its expiry date, so there is nothing to cancel.

There are no free passports and no trial period, so there is nothing to cancel there either. Passports a business received free before September 18, 2026, as a one-time welcome allowance, stay available to it.

If your business simply stops using ZincirX, you do not need to tell us. Nothing more is charged, and the passports you have issued stay online for their availability term (section 11).

Uninstalling the mobile app does not close an account or end a contract.

Purchases are final, except in the cases the Sales, Delivery and Refund Policy (https://zincirx.com/refund-policy) lists. Closing an account, stopping use of ZincirX or ending your contract does not by itself give a right to a refund.

Refunds of App Store and Google Play purchases are decided by Apple or Google through the store's own refund process. The Sales, Delivery and Refund Policy explains the cases in which we refund such a purchase ourselves.

2. Closing an account is not ending the contract

An account holder's account is that person's own sign-in. Closing it removes the person from ZincirX. It does not close the businesses they belong to, which carry on with their other members, templates, batches and passports.

Your contract with us belongs to your business, and your business ends it separately, as section 10 explains. Your passports never depend on any one person's account.

An account holder who is the only person managing a business, and wants both to end its contract and to close their own account, should give notice for the business first (section 10) and apply to close their account once they have the data they need, because after completion they can no longer sign in to export it.

An account holder's rights over their own personal data do not depend on your contract. Applying to close an account, as sections 3 to 9 describe, is how an account holder asks us to erase their account and the personal data it holds.

Section 7 explains what happens to personal data in a business's own records. The Privacy Policy (https://zincirx.com/privacy) explains an account holder's other rights.

3. How to apply to close an account

Accounts are closed by application: the account holder applies, we review the application, and then we complete it. Nothing is deleted at the moment of applying.

The same process applies to every account holder, wherever they are, and applying is free of charge.

An account holder can apply in any of these ways.

On the website: sign in, open Profile from the account menu, and in the “Delete account” section confirm that it is you (a recent sign-in is enough, otherwise a two-factor code or a new emailed sign-in link), tick the confirmation box and submit the request.
In the mobile app: open Profile, tap “Delete Account” at the bottom of the screen, type DELETE to confirm and tap Delete.
By email: an account holder who can no longer sign in, for example after uninstalling the app or losing access to the website, can write to info@zincirx.com from the email address registered to the account.

An account holder who signs in only with Google or Facebook confirms on the website in the same way, by a recent sign-in, a two-factor code or a new emailed link, and can also apply in the mobile app or by email.

The profile page does not require acceptance of the current version of our terms, so an account holder who has not accepted an update can still download their data and apply there.

If we cannot tell from an email that it came from the account holder, we may ask for information to confirm it.

Giving a reason for leaving is optional and has no effect on the outcome.

When an application is made on the website or in the app, we confirm it by email. Applying again while an application is open does not start a second one.

Step-by-step instructions, including what is deleted and what is kept, are at https://zincirx.com/account/delete-instructions.

4. What review checks

Review is not a discretionary decision, and it is not a decision about whether an account holder may leave: every account holder may close their account. Review checks two things, and nothing else.

That the application came from the account holder, shown by a recent sign-in or confirmation on the website, by the signed-in mobile app, or by the email address registered to the account.
If the account holder is the only owner of a business, whether anyone else can still manage that business, so that someone can be named to manage it before the account is closed.

Naming someone is not a condition. If nobody is named, we still complete the application on time. The business and its passports remain, and someone entitled to act for the business can write to info@zincirx.com to arrange who manages it from then on.

We decline an application only if we cannot confirm that it came from the account holder. If we do, we email the account holder our reasons. They can contest the decision as section 13 explains, including by complaining to a data protection authority or going to court, and they can apply again at any time.

5. When the application is answered

We answer every application within 30 days of receiving it: we complete it or, if we cannot confirm that it came from the account holder, we decline it with our reasons.

Applications made by email are handled the same way and within the same time.

While an application made on the website or in the app is open, the profile page on the website shows when it was made and the date by which it will be completed.

When the account has been closed, we send a confirmation to the email address the application came from.

6. Until the application is completed

Applying does not close, suspend or delete anything. Until the application is completed, the account holder can keep signing in and using the account as before.

The mobile app signs the account holder out when the application is sent; they can sign in again and carry on.

The account holder can withdraw the application at any time before it is completed, with “Withdraw my request” on the profile page on the website or by writing to info@zincirx.com. The account then stays exactly as it was.

Once an application is completed, it cannot be undone and the account cannot be restored.

7. What completion does

Completion removes the account holder from ZincirX. The account record itself is not erased, because payments, invoices, passport packages and acceptance records refer to it. Instead it is anonymised: emptied of the account holder's personal data and closed for good.

The account holder's name, email address, phone number and profile photo are removed.
Their password, two-factor settings, mobile app sign-in tokens, signed-in sessions and sign-in links with other services, such as Google, Facebook or Apple, are removed.
Their membership of every business is removed.
Where a business's records name them by email address as the creator of a template or batch, as the person responsible for a production step or as the person who uploaded a file, that address is replaced with one that identifies nobody.
If they applied to introduce ZincirX to businesses, that application, with what they told us in it, is deleted.
Sign-in is blocked for good: by emailed link, by password in the mobile apps and through any other service.

Completion does not change what a business has recorded. If the content of a passport or of another business record contains the account holder's personal data, such as a name typed into a step or a person in a photo, that content is the business's record and stays with it.

Passport revisions are the exception. Each revision records who made the change and keeps the email address the account holder used at the time, because revisions are the business's append-only record of what its passports said, and when. The business is the controller of that record and can instruct us to remove the address.

Where the law requires it, we also tell anyone to whom we have disclosed the account holder's personal data that it has been erased.

We host the business's records on its behalf under the Data Processing Terms (https://zincirx.com/data-processing). The Privacy Policy (https://zincirx.com/privacy) explains how to exercise data protection rights over them.

8. What is kept, and why

Completion keeps the records below, each for the reason given.

The businesses the account holder belonged to, with their templates, batches and passport packages, including passports not yet issued. These belong to the business, not to the person, and the other members keep their access.
Passports already issued, which stay online for their availability term (section 11). Their QR codes are printed on products in circulation, and anyone who scans one must still reach that product's record.
Passport revisions, which are append-only by design: every change to a passport's attributes, certifications and product group is added as a new revision and earlier revisions are kept, so that the record of what those parts of a passport said, and when, stays complete, apart from personal data removed on the business's instruction (section 7).
Payment and invoice records, for the periods that tax and commercial law require. In Türkiye, commercial books and the documents behind them are kept for ten years.
Records of which versions of our terms were accepted, and of each purchase's confirmation that it was final, for the limitation periods that apply to claims under the contract.
The record of the application itself: the name and email address it came from, the reason if one was given, when it was made and how it was answered. We keep it for three years after the decision, to show that the application was answered and how, and then delete it.

Issued passports and their revisions are kept under the business's contract with us, because the products that carry them are in circulation. The Privacy Policy (https://zincirx.com/privacy) gives the legal basis and the retention period for each of these records.

9. Download a copy first

Completion cannot be undone, so an account holder who wants a copy of their data should download it before applying, or at the latest before the application is completed.

“Download my data” on the profile page on the website and “Export My Data” on the profile screen in the mobile app both give a copy, in JSON format, of the account holder's account details, the businesses they belong to, and the templates and batches they created.

Your business's records are exported separately, and you can export most of them yourself, free of charge and at any time:

All the passports your business has issued, in one file in the open zincirx.dpp format, with their attributes, certifications, full revision history, availability terms, identifiers and linked data, and a manifest of SHA-256 fingerprints. An owner or administrator downloads it with “Download all passports” on the Digital Product Passport page.
Batch lists as CSV or PDF, the details of a single batch as PDF or CSV, and your custom reports.
For each passport, its public part as JSON-LD and as GS1 EPCIS 2.0 events, and its QR code as an image, as a download and as a printable label.
Each uploaded file, in the form in which it was uploaded, with its SHA-256 fingerprint.

Anything you cannot export yourself, such as all your original files in one download, we send on request, without undue delay, in a structured, commonly used and machine-readable format. Ask us at info@zincirx.com.

The Terms of Service (https://zincirx.com/terms) list completely the data your business can export and the data excluded from export, and the Data Formats and Infrastructure page (https://zincirx.com/data-formats) describes the formats.

Exporting costs nothing. An account holder who leaves does not take the business's data with them, and the other members can still export it.

10. Ending your contract or moving to another provider

Your business can end its contract with us at any time. Because nothing renews, you do not need to end it to stop paying; ending it matters when you want to move your data to another provider or to your own systems, or want it erased.

The switching and exit terms are set out in full in the Terms of Service (https://zincirx.com/terms), in the section on switching provider, leaving and erasure. They apply to every customer and include what the EU Data Act (Regulation (EU) 2023/2854) requires. In summary:

An owner or administrator of your business, or someone you have authorised to act for you, such as your new provider, gives us notice by email to info@zincirx.com.
When giving notice, or at the latest by the end of the notice period, you tell us which of these you want, alone or together: moving to another provider, which you name; moving your data to your own systems; or having your data erased.
We check only that the notice comes from someone entitled to act for your business. That check is not a discretionary decision, and it does not extend any of the periods below.
The notice period is 30 calendar days from the day we receive your notice.
Your data is moved without undue delay, and at the latest within a transitional period of 30 calendar days after the notice period, which you can extend once.
Throughout the notice and transitional periods the contract stays in force and the service keeps running, including your passport pages. We help you and any provider you authorise with the move, cooperate in good faith with your new provider, give you all the information relevant to your exit, tell you of any known risk to continuity, and keep your data secure until it is erased.
If a move within the transitional period is technically not feasible, we tell you within 14 working days of your notice and explain why. We then propose an alternative transitional period of no more than seven months, during which the service keeps running.
When the move is complete, the contract ends and we tell you so. If you chose erasure without a move, the contract ends at the end of the notice period, and we tell you so.
You then have 30 calendar days to retrieve your data: from the end of the transitional period if you move, or from the end of the contract if you chose erasure without a move. Until your data is erased, you can export it at any time.
When the retrieval period ends, we erase your data. Issued passports are the exception: they stay online for their availability term and are erased when it ends, unless erasure was chosen for their order at checkout or you ask for them to be erased with the rest of your data (section 11). We also keep payment and invoice records for the periods tax and commercial law require, and records of which versions of our terms were accepted and of each purchase's confirmation that it was final, for the limitation periods that apply to claims under the contract.

Switching, exporting and erasure are free of charge, and none of them depends on a payment, on a disputed charge, on using up passports or on any other purchase.

The Data Formats and Infrastructure page (https://zincirx.com/data-formats) describes the formats in which your data is exported, where the servers that hold it are and which jurisdiction they fall under.

Ending your contract does not by itself entitle you to a refund of passports you have not issued, of the unused part of a fixed-term plan or of the rest of the availability term of issued passports erased when you leave. The Sales, Delivery and Refund Policy (https://zincirx.com/refund-policy) says so before you buy and sets out the exceptions, including the refund that applies if you end the contract because of a serious breach by us that we have not put right.

Ending your business's contract does not close its members' own accounts. Each account holder applies for that separately, as section 3 explains.

11. Printed QR codes keep working

Each issued passport stays online for its availability term: 10 years, counted from the day it was issued, unless the order it came from states a different term. If that order recorded a later end date, the later date applies.

The term does not end early when an account holder's account is closed, when a fixed-term plan ends, when your business stops using ZincirX or when your contract with us ends, because the QR codes are printed on products already in circulation.

If you move to another provider, the QR codes already printed on your products keep leading to the passport pages we host for the rest of their availability term.

If your contract with us has ended, each passport is erased when its availability term ends.

When you end your contract, passports from orders for which erasure was chosen at checkout are erased together with the rest of your data. In your notice, or by the end of the notice period, you can ask the same for any other passport you have issued, or keep one online after all. Those erased go when the retrieval period ends instead of when their term ends, and their QR codes stop leading to your record.

Before asking, check whether the rules for your products require their passports to stay available. Where they do, that duty falls on whoever places the products on the market, usually your business, and not on us.

A passport's identifier is never reassigned to another product or reused, not even at your request, and not after its passport is erased or its term ends. A printed QR code can never lead to another product's record.

The availability term does not prevent us from disabling specific content in a passport, including content in an earlier revision, if it is illegal or breaches the Terms of Service, or if a court or authority orders it (section 12). Doing so is not a breach of our commitment to keep the passport online.

12. When we suspend or close an account

We may disable specific content that is illegal or breaches the Terms of Service, as the Terms of Service describe. We may suspend or close an account holder's account, or end our contract with your business, only on the grounds the Terms of Service set out, which in summary are these.

A serious or repeated breach of the Terms of Service, including publishing illegal content, or content the Terms of Service prohibit, on public passport pages.
Fraud or abuse of payments, including abuse of refunds or chargebacks.
A threat to the security of an account, of the service or of other customers, such as an account that appears to have been taken over.
A legal obligation, or an order from a court or another competent authority.

Anyone who believes that content on a public passport page is illegal can report it with the form at https://zincirx.com/report-content or by email to info@zincirx.com. A person reviews every report.

A person takes every decision described in this section; none is taken by automated means.

Any measure we take is proportionate to its reason. Where disabling a specific item is enough, we do that instead of suspending an account, and we suspend rather than close where suspension is enough.

We end our contract with your business because of a breach only if the breach is serious and you have not put it right within a reasonable time after we asked you to, or if it cannot be put right.

Where we can, we give notice and our reasons before a measure takes effect. We act first and explain at the same time only where waiting would cause harm, as with ongoing fraud, a security threat or illegal content, or where the law or an authority requires it.

When we restrict content, suspend or close an account, or end our contract with your business because content is illegal or breaches the Terms of Service, we send a statement of reasons to the email address of the account concerned, at the latest when the measure takes effect.

The statement says what the measure is, where it applies and for how long; the facts we relied on, including whether they came from a report or from our own review; whether any automated means were used; the legal or contractual ground, with an explanation; and how to contest the decision.

When we act for another reason, such as fraud or security, we also tell the account concerned what we did and why, unless the law or an authority prevents us.

When a court or another competent authority orders us to act, we tell you about the order before we act on it, and afterwards what we did, unless the order or the law requires us to wait or not to tell you.

A suspended account cannot be used, but suspension deletes nothing: when it ends, the account is exactly as it was before.

Suspension never stops your business getting a copy of its data. If you cannot sign in, ask us at info@zincirx.com for an export.

Suspending or closing an account, or ending our contract with your business, does not take issued passports offline. They stay online for their availability term, apart from specific content we disable as this section describes.

If we end our contract with your business, you have 30 calendar days from then to retrieve your data before it is erased, as the Terms of Service describe.

What is refunded then follows the Sales, Delivery and Refund Policy (https://zincirx.com/refund-policy), which provides for a refund where we end your contract when you are not at fault.

13. How to contest a decision

You, an account holder or anyone who reported content can contest a decision of ours, such as declining a deletion application, deciding on a report, restricting content, suspending or closing an account or ending your contract, by writing to info@zincirx.com and saying which decision they contest and why.

A person reviews the decision again without undue delay and replies with the outcome and the reasons.

Our decisions are not final. Asking us to review one is optional and does not limit any other remedy.

You can take the matter to court, and you can complain to the competent authority.

About personal data: a data protection supervisory authority in the European Union, in particular in the Member State where the person concerned lives or works, or the Turkish Personal Data Protection Board. A complaint to the Board must be made within 30 days of learning of our answer, and in any case within 60 days of the application.
About how we handle content under the EU Digital Services Act: the Digital Services Coordinator of the Member State where you are located or established.
About ending a contract or switching provider under the EU Data Act: the authority responsible for that Act in the Member State where your business is established.

14. Contact

For questions about closing an account, ending a contract or a decision we made, write to info@zincirx.com or call +90 536 587 41 81. Both are listed on our contact page (https://zincirx.com/contact).

People answer these messages. The AI assistant in ZincirX cannot take an application, a notice or a complaint.

Messages may be written in English, Turkish, German, Spanish, French, Italian, Dutch or Polish.

Step-by-step deletion instructions are at https://zincirx.com/account/delete-instructions. Our company details, including our representatives and their contact details, are listed in the Legal Notice (https://zincirx.com/legal-notice), and info@zincirx.com is always open to you.