Privacy Policy

1. Introduction

VeriChain™ ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you use our AI accountability platform.

2. Information We Collect

2.1 Account Information

• Email address
• Name
• Organization name
• Password (encrypted)

2.2 Usage Data

• AI decisions submitted for analysis
• Guardian bias detection results
• API usage statistics
• Login timestamps

2.3 Technical Data

• IP address
• Browser type
• Device information
• Cookies

3. How We Use Your Information

We use your data to:

• Provide and maintain our service
• Analyze AI decisions for bias
• Generate compliance reports
• Improve our platform
• Communicate with you
• Ensure security

4. Data Storage and Security

4.1 Storage

• Data stored in encrypted PostgreSQL database
• Backups retained for 90 days
• Blockchain anchoring on Polygon network

4.2 Security Measures

• End-to-end encryption
• JWT authentication
• Rate limiting
• Regular security audits

5. Data Sharing

We DO NOT sell your data. We may share data only:

• With your explicit consent
• To comply with legal obligations
• With service providers (AWS, SendGrid) under strict contracts

6. Your Rights (GDPR)

You have the right to:

• Access your data
• Rectify inaccurate data
• Delete your data ("right to be forgotten")
• Export your data (data portability)
• Object to processing
• Restrict processing

To exercise these rights, contact: info@verichainai.com

7. Data Retention

• Account data: Retained while account is active
• Decision data: Configurable retention (default: 90 days, max 1 year)
• Backups: 90 days
• Blockchain anchors: Permanent (immutable, hash-only)

8. Cookies

We use essential cookies for:

• Authentication
• Session management
• Security

You can disable cookies in your browser, but this may affect functionality.

9. International Transfers

Data may be transferred to:

• EU (primary storage)
• US (cloud services)

We ensure adequate safeguards (Standard Contractual Clauses).

10. Children's Privacy

Our service is not intended for users under 16. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy. We will notify you of significant changes via email or dashboard notification.

12. Contact Us

For privacy questions, contact us at info@verichainai.com

13. Legal Basis for Processing (GDPR)

• Contract performance: To provide our service
• Legitimate interests: To improve and secure our platform
• Consent: For marketing communications
• Legal obligation: To comply with laws

14. Automated Decision-Making

VeriChain™ provides bias analysis tools, but:

• Final decisions are made by humans
• Our system is advisory only
• You can request human review