Privacy Policy

Last updated: January 28, 2025

1. Our Commitment to Privacy

At GBV Digital Evidence Vault, we understand that privacy is paramount for survivors of gender-based violence. Our entire platform is built on the principle that your sensitive files should never leave your device. We employ client-side encryption and hashing to ensure your evidence remains private.

2. What We Collect

  • Account information (email, name) for authentication
  • SHA-256 cryptographic hashes of your evidence files
  • Metadata you choose to provide (dates, descriptions, categories)
  • Hedera transaction IDs for verification purposes

We NEVER collect or store your actual files. All hashing occurs in your browser using the Web Crypto API.

3. How We Use Your Data

Your data is used solely to provide our evidence preservation services. We do not sell, rent, or share your information with third parties except when required by law or with your explicit consent.

4. Data Security

We employ industry-standard security measures including encrypted database connections, secure authentication, and regular security audits. Your hash data is stored on Hedera Hashgraph, providing immutable, tamper-proof timestamping.

5. Your Rights

You have the right to access, correct, or delete your account data at any time. Note that blockchain records are immutable and cannot be deleted, but they contain only cryptographic hashes, not your actual files.

6. Contact Us

For privacy concerns, contact our Data Protection Officer at privacy@gbvvault.org