Privacy Policy

1. Introduction

Veritas ("we", "us", "the platform") is committed to protecting the privacy of users who interact with our geospatial observation and record verification platform. This Privacy Policy explains how we collect, use, and protect information.

2. Information We Collect

We collect the following types of information:

• •Account data: name, email address, role, and organization provided during registration.
• •Usage data: page views, actions performed, API requests, and timestamps logged for audit purposes.
• •Geospatial data: polygon coordinates and scope definitions submitted by users during the OIM workflow.
• •Payment data: Payment is processed via Stripe/PayPal. We do not store credit card numbers on our servers.

3. How We Use Information

Information is used to: operate and maintain the platform; process record minting and verification requests; provide audit trails for regulatory compliance; communicate about account activity; and improve platform functionality.

4. Data Retention

Minted records and audit logs are retained indefinitely as they form part of the immutable registry. Account data is retained for the lifetime of the account. Usage logs are retained for 24 months.

5. Data Sharing

We do not sell or share personal information with third parties. Published records are publicly accessible by design. Audit logs may be shared with authorized regulatory bodies upon lawful request.

6. Security

Data is encrypted in transit (TLS 1.3) and at rest. Authentication uses JWT tokens with configurable expiry. All administrative actions are audit-logged with immutable fingerprints.

7. Your Rights

You may request access to, correction of, or deletion of your personal account data by contacting the platform administrator. Published records cannot be deleted as they are part of the immutable registry.

8. Contact

For privacy-related inquiries, contact the platform administrator at the address provided on the Support page.