Effective Date: 01 Apr 2026
INFIBLOCKS TECHNOLOGIES INC and its affiliates ("INFIBLOCKS", "Infiprojects", "We", "Us", "Our") are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose information when you access or use the Infiprojects digital evidence infrastructure platform (the “Platform”).The Platform acts as a record-keeping and evidentiary tool and does not verify identities or validate submitted data. Users are responsible for submitting accurate information about themselves and any third parties involved.
By accessing or using the Platform, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, you must not use the Platform.
We may collect the following categories of information:
Account Information: Name, email address, phone number, organization details, and login credentials.
Platform Data: Content, records, metadata, timestamps, and other information created, uploaded, or transmitted through the Platform.
Technical Data: IP address, browser type, device information, operating system, and usage patterns.
Payment Information: Processed through third-party payment providers. We do not store full payment credentials.
As an essential component of the Platform’s evidentiary infrastructure, Infiprojects collects and processes specific identity and transaction-related metadata in connection with each record created, transmitted, or stored.
Such metadata may include, without limitation:
- Sender name and associated organization or entity
- Recipient name(s), email address(es), and associated organization(s)
- Timestamp and transaction event data
- Event-based location data (where explicitly permitted by the user at the time of capture)
This information is strictly required to establish authorship, attribution, transmission, receipt, and evidentiary integrity of records. The Platform does not function as an anonymous system, and the absence of such metadata would materially impair or eliminate the evidentiary value and reliability of records generated through the Platform.
Processing of such data is carried out pursuant to one or more lawful bases under Article 6 of the General Data Protection Regulation (GDPR), including:
(a) Performance of a Contract (Article 6(1)(b)): Processing is necessary to provide the Platform’s core functionality, including the creation of verifiable records and transaction logs.
(b) Legitimate Interests (Article 6(1)(f)): Processing is necessary for the legitimate interests of establishing, securing, and preserving tamper-evident digital records, preventing fraud, and enabling evidentiary use in commercial or legal contexts. Such interests are not overridden by the rights and freedoms of data subjects given the limited, purpose-specific nature of the data collected.
(c) Consent (Article 6(1)(a)): Where required, including for the capture of location data, processing is based on your explicit consent at the time of data submission or device-level permission.
You acknowledge and agree that the submission of such information is intentional and necessary for the intended use of the Platform. You further acknowledge that any third-party personal data (including recipient information) provided by you is submitted with appropriate authorization or lawful basis, and you assume responsibility for such submission.
Location data, where enabled, is collected only at the time of a specific transaction or event and is not used for continuous tracking or behavioral monitoring.
Certain elements of identity and transaction metadata may be cryptographically processed (including through hashing algorithms such as SHA-256) and may be anchored, referenced, or stored in distributed systems, including blockchain or similar technologies.
Due to the inherent characteristics of such systems, including immutability and decentralization, once data or its cryptographic representation is recorded, it may not be modified, deleted, or restricted by Infiprojects or any third party. This may limit the ability to exercise certain data subject rights, including the right to erasure, rectification, or restriction of processing, to the extent technically infeasible.
By using the Platform, you explicitly acknowledge and accept these technical and legal constraints.
The Platform operates as an evidentiary and record infrastructure and does not independently verify the identity of users or the accuracy of identity-related information submitted to the Platform.
Any names, email addresses, organization details, or other identifying information associated with a record are provided directly by users at the time of submission. Infiprojects does not require, collect, or validate government-issued identification or other documentary proof of identity as a condition of using the Platform, unless explicitly stated otherwise for specific enterprise or regulated use cases.
Accordingly, Infiprojects makes no representation or warranty as to the true identity, authority, or credentials of any user, sender, or recipient associated with a record.
You acknowledge and agree that:
- Identity information recorded on the Platform reflects user-provided assertions at the time of transaction
- The Platform records and preserves such assertions for evidentiary purposes without independently validating them
- You are solely responsible for verifying the identity, authority, and authenticity of counterparties with whom you interact
To the maximum extent permitted by applicable law, Infiprojects disclaims any liability arising from false, inaccurate, or misleading identity information submitted by users.
In addition to identity and transaction metadata, the Platform processes and records certain user-generated content and evidentiary data as part of its core functionality.
Such data may include, without limitation:
(a) Instruction and Communication Data:
Textual instructions, messages, or notes submitted by users, along with their corresponding cryptographic hashes (e.g., SHA-256), which are used to establish integrity and non-repudiation.
(b) Self-Declaration Statements:
User-submitted declarations asserting authority, accuracy, intent, or good faith in relation to a transaction or record. These statements are recorded as provided by the user and may be cryptographically hashed and anchored to distributed systems.
(c) File and Content Metadata:
File names, file sizes, file types, and cryptographic hashes of uploaded or transmitted files. The Platform does not necessarily store the full file content on-chain but may store references, fingerprints, or identifiers that enable verification of integrity.
(d) Project and Contextual Information:
Project names, identifiers, associated addresses, and organizational context provided by users in connection with records.
(e) Persistent Identifiers:
System-generated identifiers (such as UUIDs or similar unique reference numbers) used to associate users, transactions, or records across the Platform.
(f) Infrastructure and Transaction Data:
Blockchain-related data including smart contract addresses, token identifiers, transaction hashes, timestamps, and network identifiers, as well as distributed storage references such as IPFS content identifiers (CIDs).
(g) Event and Location Metadata:
Event-based location data, including approximate geographic coordinates, accuracy parameters, and derived map references, captured at the time of a transaction where permitted by the user.
All such data is processed solely for the purpose of creating, maintaining, and verifying tamper-evident digital records and evidentiary trails.
You acknowledge and agree that:
- Content submitted to the Platform, including instructions and self-declarations, is recorded as provided and is not independently verified by Infiprojects
- Cryptographic hashes represent irreversible transformations of submitted content and are used to verify integrity rather than reconstruct original data
- Certain elements of this data may be publicly accessible or discoverable through blockchain networks, distributed storage systems, or associated tools
- Once recorded in such systems, data or its cryptographic representation may be immutable and not subject to modification or deletion
You are solely responsible for the content, accuracy, legality, and appropriateness of all data submitted to the Platform, including any personal data of third parties.
As part of its functionality, the Platform may generate cryptographic hashes, timestamps, and associated metadata for user-generated content. Certain records may be anchored to or referenced through distributed systems, including blockchain or similar technologies.
You acknowledge that such systems may be decentralized and operated by third parties beyond our control. Data written to such systems may be immutable and may not be modified or deleted.
We do not control public blockchain networks and cannot restrict access to data that is publicly accessible through such systems.
We use information to:
- Provide access to and operate the Platform
- Enable creation, storage, and retrieval of records
- Maintain security and integrity of the Platform
- Improve Platform functionality and user experience
- Communicate administrative updates
We do not use your content for advertising or sell your personal data to third parties.
We use cookies and similar technologies to maintain sessions, improve performance, and analyze usage patterns. You may disable cookies in your browser settings; however, some features may not function properly.
We may disclose information:
- To infrastructure providers (hosting, storage, analytics)
- To comply with legal obligations
- To enforce our Terms or protect rights
- In connection with a merger, acquisition, or asset transfer
We do not share personal data with third parties for marketing without your explicit consent.
Your data may be stored and processed in multiple jurisdictions depending on infrastructure providers. By using the Platform, you consent to such transfers.
Due to the nature of distributed systems, certain data may be stored across globally distributed nodes.
We retain personal data as long as necessary for operational, legal, and security purposes.
Data associated with blockchain or distributed systems may be permanently retained and cannot be deleted due to technical constraints.
We implement reasonable technical and organizational safeguards to protect your information. However, no system is completely secure, and we do not guarantee absolute security.
You are responsible for maintaining the confidentiality of your credentials.
You may access, update, or delete your personal information where technically feasible. Certain data may not be deletable due to system architecture (including blockchain-based records).
The Platform may integrate with or link to third-party systems. We are not responsible for their privacy practices.
The Platform is not intended for individuals under the age of 16. We do not knowingly collect data from minors.
We may update this Privacy Policy from time to time. Continued use of the Platform after changes constitutes acceptance of the updated Policy.
For questions regarding this Privacy Policy, contact: contact@infiprojects.com
© 2026 InfiProjects / INFIBLOCKS TECHNOLOGIES INC. All rights reserved.