Privacy Policy
Digital Verification & Supply Chain Integrity
When you tap an NFC-enabled certificate or product, our servers validate the tag's dynamic cryptographic signature to confirm authenticity. In processing this verification request, we collect basic technical telemetry under Art. 6(1)(f) GDPR (Legitimate Interest) for security monitoring, product authentication, and supply chain integrity.
Coarse Location (City/Country Only): We determine an approximate geographic location at the city and country level derived in real-time from standard network headers. We do not access high-precision GPS data, device sensors, or exact street addresses.
No IP Storage: Your raw IP address is processed strictly in temporary memory to resolve the city and country. It is never stored in our database.
Supply Chain & Circulation Analytics: Laboratories and brand partners receive aggregated, non-identifying telemetry (such as scan volume per metropolitan region and verification timestamps) to monitor global circulation, confirm authorized distribution channels, and detect unauthorized product diversion.
Vault & Vellum processes account, asset, and verification data to operate secure NFC authentication and vault services. We do not sell personal data to third parties.
NFC tap payloads are validated cryptographically and handled according to our security architecture.
Vault & VellumPrivacy PolicyImpressum
