Privacy Policy
This Privacy Policy explains how VeritasChain Standards Organization (VSO) collects, uses, and protects your personal information when you use our services, including the VCP Explorer, SDK, API, and our website.
Overview
This page outlines the privacy practices of the VeritasChain Standards Organization (VSO).
Organization Information
Organization Name:
VeritasChain Standards Organization
(Operating Entity: VeritasChain Co., Ltd. / VeritasChain株式会社)
Headquarters:
Ebisu Office (Headquarters)
2-4-8 Ebisu-Nishi, Shibuya-ku, Tokyo 150-0021, Japan
〒150-0021 東京都渋谷区恵比寿西2丁目4番8号
Contact:
Website:
Table of Contents
1. Data We Collect
VSO may collect the following types of data when you use our services:
IP Address
Your IP address is collected for security monitoring, fraud prevention, and service optimization.
Cookie Data
Cookies are used to maintain session state, preferences, and provide analytics.
Explorer/SDK/API Usage Logs
Logs of your interactions with VCP Explorer, SDK, and API services for operational monitoring.
Device Information
Browser type, operating system, screen resolution, and other technical data.
Contact Form Submissions
Information you provide through contact forms, including name and email address.
Analytics Data (Google Analytics 4)
Anonymized usage statistics collected via Google Analytics 4 for service improvement.
2. Purpose of Use
The data collected is used for the following purposes:
-
Stable Operation of VCP Explorer / API / SDK
To ensure reliable and efficient operation of our services, monitor system health, and optimize performance.
-
Unauthorized Access Detection & Security Enhancement
To detect and prevent fraudulent activities, unauthorized access attempts, and other security threats.
-
Statistical Analysis for Protocol Improvement
To analyze usage patterns and improve the VeritasChain Protocol and related services.
-
VC-Certified Program Administration
To manage the certification process with minimal necessary information.
-
Regulatory Compliance & Audit Log Retention
To maintain audit logs required for compliance with regulations such as MiFID II, EU AI Act, and other applicable laws.
4. Third-Party Sharing
No Sale of Personal Information
VSO does NOT sell, rent, or trade your personal information to third parties for marketing or any other commercial purposes.
When We May Share Data
Your data may be shared only in the following limited circumstances:
-
Legal Requirements
When required by law, court order, or regulatory authority (e.g., law enforcement requests, regulatory investigations).
-
VC-Certified Audit Purposes
Minimal anonymized statistical data may be used for audit purposes in the VC-Certified program. This data does not contain personally identifiable information.
5. EU GDPR
For users residing in the European Union (EU) or European Economic Area (EEA), the following additional information applies under the General Data Protection Regulation (GDPR):
Data Controller Information
Data Controller: VeritasChain Co., Ltd. (VeritasChain株式会社)
Address:
2-4-8 Ebisu-Nishi, Shibuya-ku, Tokyo 150-0021, Japan
Contact: info@veritaschain.org
Data Retention Period
We retain your personal data only for the minimum period necessary to fulfill the purposes outlined in this policy, typically up to 24 months, unless a longer retention period is required by law (e.g., regulatory compliance requirements).
Your Rights Under GDPR
As an EU resident, you have the following rights regarding your personal data:
Right of Access
Request access to your personal data and receive a copy of the data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data under certain circumstances.
Right to Restriction
Request restriction of processing under certain circumstances.
Legal Basis for Processing
Under Article 6 of the GDPR, we process your personal data based on our legitimate interests in operating, improving, and securing our services, while ensuring that such processing does not override your fundamental rights and freedoms. For certain processing activities, we may rely on your consent, contractual necessity, or legal obligations.
6. Security
We implement robust security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.
HTTPS Encryption
All communications between your browser and our servers are encrypted using HTTPS (TLS/SSL).
Industry-Standard Encryption
VCP Explorer and API use industry-standard encryption protocols to protect data in transit and at rest.
Access Control
Role-based access control (RBAC) and least privilege principles are applied to internal systems.
7. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
Notification of Changes
For significant changes that materially affect how we handle your personal data, we will provide notice through our website or other appropriate means before the changes take effect.
Last Updated: December 1, 2025
Version: 1.0
Effective Date: December 1, 2025
8. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
General Inquiries
Email: info@veritaschain.org
Address:
VeritasChain Standards Organization
2-4-8 Ebisu-Nishi, Shibuya-ku, Tokyo 150-0021, Japan
We aim to respond to privacy-related inquiries within 5-10 business days.