Privacy Policy

1. Information We Collect

We collect information you provide directly: account registration data (name, email, phone number), KYC verification documents (government ID, proof of address), item information submitted for record issuance (photos, serial numbers, descriptions), and communication preferences.

We automatically collect: device information, browser type, IP address, usage patterns, pages visited, and interaction data. On-chain provenance anchors that Boss Tag writes for verified records are publicly visible and immutable on the Polygon blockchain.

2. How We Use Your Information

We use your information to: operate and improve the Platform, verify your identity for KYC/KYB and AML compliance, issue and maintain records (digital certificates and on-chain provenance anchors), process item assessments via Boss Vision AI, facilitate marketplace and escrow transactions, send transactional notifications (verification results, order and shipping updates, escrow status), provide customer support, and comply with legal obligations.

3. AI Processing

Boss Vision AI processes photographs and asset data you submit to provide verification and valuation analysis. This processing uses the Anthropic Claude API. Submitted images and descriptions are sent to the AI service for analysis and are not stored by the AI provider beyond the duration of the request. Verification results are stored in our database and, for verified assets, recorded on the Polygon blockchain.

4. Data Sharing

We do not sell your personal information. We share data with: KYC/AML verification providers (identity documents only, processed through regulated third parties), payment processors (Stripe for subscription billing), cloud infrastructure (Supabase for database, Vercel for hosting), and the Polygon blockchain (provenance anchors for verified records are publicly recorded on-chain).

We may disclose information when required by law, to protect our rights, or to comply with legal process, court orders, or government requests.

5. Data Security

We implement industry-standard security measures: TLS 1.3 encryption for data in transit, AES-256 encryption for data at rest, Supabase Row-Level Security policies, environment variable management for API keys, and regular security reviews. KYC documents are processed through regulated third-party providers and are not stored directly in our database.

6. Blockchain Data

When Boss Tag issues a verified record, the platform writes a provenance anchor — a tamper-evident reference to that record — to the Polygon blockchain on your behalf. These anchors are public and immutable and cannot be edited or deleted. They are provenance records, not user-held tokens or wallets; Boss Tag custodies the anchoring infrastructure. This permanence is inherent to blockchain technology and is not within our control.

7. Your Rights

Depending on your jurisdiction, you may have the right to: access, correct, or delete your personal data, object to or restrict processing, data portability, and withdraw consent. To exercise these rights, contact us at contact@bosstag.co. Note that on-chain data cannot be modified or deleted due to the immutable nature of blockchain.

8. Cookies

We use essential cookies for authentication and session management. We use analytics cookies to understand Platform usage and improve the service. You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent certain Platform features from functioning.

9. Data Retention

Account data is retained for the duration of your account plus 5 years for legal compliance. KYC documents are retained per regulatory requirements (typically 5-7 years after account closure). Transaction records are retained permanently as they exist on the blockchain. You may request deletion of off-chain data by contacting us.

10. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect information from children. If we become aware that a child has provided personal data, we will take steps to delete it.

11. Changes

We may update this Privacy Policy periodically. Material changes will be communicated via email or Platform notification. The “Last updated” date at the top reflects the most recent revision.

Contact

Privacy questions? Contact us at contact@bosstag.co