DfinA Vault · Privacy

Last updated: 14 June 2026

Privacy Policy

DfinA Vault is built around data minimization. We do not receive your files and we collect only what is strictly necessary.

1. Data controller

Individual enterprise "DFINA ORGANISATION", registered in Georgia under identification number 305824365, with registered office at Saburtalo district, Bakhtrioni street, N 22, building N 75, Tbilisi, Georgia. Contact: support@dfina.org.

2. Data we process

  • File fingerprint (SHA-256 hash): a 64-character string. It does not allow the file to be reconstructed nor its content to be known.
  • Email address: to deliver your certificate and provide support.
  • Date and reference of the proof.
  • Payment data: processed by Paddle; we do not receive your card number.
◆ What we never process

Your files. They never leave your device. We can therefore neither read them, nor lose them, nor disclose them.

3. Purposes and legal bases

  • Provide the service and deliver the certificate: performance of the contract.
  • Support, security and abuse prevention: legitimate interest.
  • Accounting and tax obligations: legal obligation.

4. Processors and recipients

  • Paddle.com: payment processing and billing, as Merchant of Record.
  • Transactional email provider: sending the certificate and service messages.
  • Website host.

Some providers may be located outside the European Economic Area; appropriate safeguards are implemented in accordance with applicable regulations.

5. Blockchain and the right to be forgotten

Anchoring records only an anonymous fingerprint on the blockchain. This fingerprint is neither reversible nor identifying: it contains no personal data. We can delete the data linked to your account; the anchor, by nature immutable, does not identify you.

6. Retention period

We keep data for as long as necessary to provide the service and to comply with our legal and accounting obligations, then we delete or anonymize it. Technical logs are purged regularly.

7. Your rights

Under the GDPR, you have a right of access, rectification, erasure, restriction, objection and portability. To exercise them, write to support@dfina.org. You may also lodge a complaint with the competent data protection authority.

The GDPR applies whenever the service targets people residing in the European Union, regardless of where the publisher is established.

8. Cookies

The site uses, at most, cookies strictly necessary for its operation. Where applicable, payment services may set their own cookies, described in their respective policies.

9. Changes

This policy may be updated. The date at the top of the page indicates the latest version.