Privacy Policy & Terms of Service

Privacy Policy

Brain Chain Verify ("BCV", "we", "us", "our") operates the brain-chain.net website and related services. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use our services. By creating an account or using BCV, you acknowledge and agree to the practices described in this policy.

1. Information We Collect

We collect the following categories of information:

Account Information: When you register, we collect your email address and a cryptographically hashed version of your password. We never store your password in plain text. We also collect and store your chosen display name, API token, and secret key associated with your account.

Payment Information: If you subscribe to a paid plan, payment processing is handled by Square, Inc. We store your Square customer ID and subscription ID for billing management. We do not directly store credit card numbers, bank account details, or other raw payment credentials on our servers.

Usage Data: We collect data about how you use BCV, including timestamps of hash-signing requests, verification activity, dashboard interactions, feature usage patterns, and login history. This data helps us operate, improve, and secure the service.

Technical Data: When you access BCV, we may automatically collect your IP address, browser type and version, operating system, device type, screen resolution, referring URLs, and general geographic location derived from your IP address.

Cloudflare Turnstile Data: We use Cloudflare Turnstile for bot protection during signup and authentication. Cloudflare may collect device and browser signals as part of this process, subject to Cloudflare's own privacy policy.

Communication Preferences: We record whether you have opted in to receive optional marketing communications (surveys, promotions, newsletters). We also retain a record of your email address and opt-in status even after account deletion for compliance and suppression-list purposes.

Affiliate and Referral Data: If you sign up using a referral or affiliate link, we store the associated referral code with your account.

Cookies and Local Storage: We use browser local storage (specifically the bcv_session key) to maintain your authenticated session. We do not use traditional tracking cookies for advertising purposes. Third-party services we integrate with (Cloudflare, Square) may set their own cookies subject to their respective privacy policies.

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Operation: To create and manage your account, authenticate your identity, generate cryptographic hashes and badges, process timestamp verification requests, and deliver the core BCV service.

Billing and Payments: To process subscription payments, manage plan changes, handle cancellations and refunds, send billing-related communications, and maintain accurate financial records.

Required Communications: To send you essential account-related emails including email verification codes, password reset links, billing confirmations, security alerts, service disruption notices, terms updates, and other operational messages necessary for your account.

Optional Communications: If you have opted in, to send you marketing emails including product announcements, feature updates, surveys, promotions, newsletters, and partner offers. You may opt out of these at any time.

Security and Fraud Prevention: To detect, prevent, and respond to fraud, abuse, security incidents, and technical issues. This includes rate limiting, CAPTCHA verification, session management, and monitoring for unauthorized access.

Service Improvement: To analyze usage patterns, diagnose technical problems, develop new features, improve existing functionality, and optimize performance.

Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests, and to enforce our Terms of Service.

3. Data Sharing and Third Parties

We share your information with the following third-party service providers who assist us in operating BCV:

Cloudflare, Inc.: Provides website hosting, content delivery, DDoS protection, R2 object storage (where your account data is stored), Workers compute platform (where our backend runs), and Turnstile bot protection. Cloudflare processes requests to and from BCV and may have access to technical data and IP addresses.

Square, Inc. (Block, Inc.): Processes all subscription payments. When you subscribe to a paid plan, your payment information is handled directly by Square. We share your email address with Square to create and manage your customer and subscription records.

Resend, Inc.: Delivers transactional and marketing emails on our behalf. We share your email address with Resend to send verification codes, password reset links, billing notifications, and (if opted in) marketing communications.

Law Enforcement and Legal: We may disclose your information if required to do so by law, regulation, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

We do not sell, rent, or trade your personal information to third parties for their independent marketing purposes.

4. Data Storage and Security

Your account data is stored on Cloudflare R2 object storage, which provides encrypted-at-rest storage distributed across Cloudflare's global network. Our backend runs on Cloudflare Workers, a serverless compute platform.

We implement reasonable security measures including: PBKDF2 password hashing with SHA-256 and 100,000 iterations, HTTPS-only communication, cryptographically random session tokens, automated session expiry, and rate limiting on authentication endpoints.

While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

5. Email Communications

Required Emails: By creating an account, you consent to receive essential account-related emails. These include email verification codes, password reset links, billing and payment confirmations, subscription changes, security alerts, service availability notices, and updates to these terms or policies. You cannot opt out of required emails while maintaining an active account.

Optional Marketing Emails: During signup, you may choose to opt in to optional marketing emails. These may include product announcements, feature spotlights, surveys, promotional offers, newsletters, and partner communications. You may opt out of marketing emails at any time by contacting us.

6. Data Retention and Deletion

You may delete your account at any time through the account settings page. When you delete your account:

We permanently delete your user record (email, password hash, name, token, secret, subscription details, and all associated account data) from our storage. We cancel any active subscription with Square. We remove your chosen name from the public name registry. We delete your active session.

However, we retain a minimal record consisting of your email address, marketing opt-in preference, and an inactive account status indicator. This retention is necessary for: maintaining email suppression lists to honor opt-out preferences, preventing duplicate marketing to former users, compliance with legal obligations, and maintaining internal records of consent.

Timestamp logs generated during your use of the service may persist in aggregated form for verification integrity purposes, as they form part of the cryptographic audit trail that other users may rely on for verification.

7. Cookies and Local Storage

BCV uses browser local storage to store your session token (bcv_session) which contains your email, session token, account status, display name, and premium feature flags. This data is stored locally on your device and is cleared when you log out. We do not use local storage for tracking or advertising.

Third-party services integrated into BCV (Cloudflare, Square) may use cookies or similar technologies as described in their respective privacy policies.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access: You may request a copy of the personal information we hold about you. Your account page displays your current account information.

Correction: You may update your account information including your display name and password through the dashboard and account settings.

Deletion: You may delete your account at any time, subject to the retention provisions described above.

Opt-Out: You may opt out of optional marketing communications at any time by contacting us.

Portability: You may request your account data in a portable format by contacting us.

To exercise any of these rights, please contact us.

9. Children's Privacy

BCV is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us.

10. International Users

BCV is operated from Canada and our services are hosted on Cloudflare's global network. If you access BCV from outside Canada, your information may be transferred to, stored in, and processed in Canada or other jurisdictions where Cloudflare operates infrastructure. By using BCV, you consent to the transfer of your information to jurisdictions that may have different data protection laws than your country of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an email notification. Your continued use of BCV after any changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or our data practices, please contact us.

Terms of Service

These Terms of Service ("Terms") govern your access to and use of the Brain Chain Verify ("BCV") website, services, and applications. By creating an account or using BCV, you agree to be bound by these Terms. If you do not agree to these Terms, do not use BCV.

1. Acceptance of Terms

By accessing or using BCV, you confirm that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. We may modify these Terms at any time by posting updated Terms on this page. Your continued use of BCV after any modification constitutes acceptance of the modified Terms. If you do not agree with any modification, you must stop using BCV and delete your account.

2. Eligibility

You must be at least 13 years of age to create an account or use BCV. By creating an account, you represent and warrant that you are at least 13 years old and that you have the legal capacity to enter into these Terms. If you are between 13 and 18 years of age (or the age of majority in your jurisdiction), you represent that your parent or legal guardian has reviewed and agreed to these Terms on your behalf.

3. Account Registration

To use BCV, you must create an account by providing a valid email address and password. You agree to: provide accurate, current, and complete information during registration; maintain and promptly update your account information; maintain the security and confidentiality of your password, API token, and secret key; accept responsibility for all activity that occurs under your account; notify us immediately of any unauthorized use of your account.

You may only create one account per person. Each account must use a unique email address. Your chosen display name must be unique within the BCV system and must not impersonate another person, entity, or brand.

4. Service Description

BCV provides a cryptographic identity verification and visualization service. The service generates animated visual badges containing timestamped, cryptographically signed hashes that can be overlaid on live video content. These badges can be independently verified by any third party through screenshot upload and analysis.

BCV is provided on an ongoing basis and we reserve the right to modify, suspend, or discontinue any part of the service at any time, with or without notice. We will make reasonable efforts to notify users of significant changes.

5. Subscriptions and Billing

BCV offers free and paid subscription plans. Paid plans are billed on a recurring basis (monthly or annually as selected) through Square, Inc. By subscribing to a paid plan, you authorize us to charge the payment method on file through Square for the applicable subscription fees.

Subscription fees are non-refundable except as required by law or at our sole discretion. You may cancel your subscription at any time through your account settings. Cancellation takes effect at the end of the current billing period. You will continue to have access to paid features until your current billing period expires.

We reserve the right to change subscription pricing at any time. Price changes will take effect at the start of your next billing period following notice of the change. If you do not agree with a price change, you may cancel your subscription before the change takes effect.

Promotional codes and discounts are subject to their own terms and conditions, may be limited in quantity or duration, and may be revoked at our discretion.

6. Acceptable Use

You agree not to use BCV to:

Impersonate any person, entity, or organization, or falsely represent your affiliation with any person, entity, or organization. Use the service for any illegal, fraudulent, or unauthorized purpose. Attempt to gain unauthorized access to BCV systems, other user accounts, or any computer network connected to BCV. Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of BCV (except to the extent permitted by applicable law). Use automated scripts, bots, scrapers, or other automated means to access BCV or collect data from BCV without our express written permission. Interfere with, disrupt, or create an undue burden on BCV's servers, networks, or infrastructure. Transmit any viruses, malware, or other harmful code through BCV. Use BCV to generate badges or verification data for content that is illegal, defamatory, obscene, or that violates the rights of any third party. Circumvent, disable, or otherwise interfere with security-related features of BCV. Share, transfer, sell, or sublicense your account, API token, or secret key to any third party. Use BCV in any manner that could damage, disable, overburden, or impair the service.

We reserve the right to suspend or terminate your account if we determine, in our sole discretion, that you have violated these acceptable use terms.

7. Intellectual Property

BCV and its entire contents, features, and functionality (including but not limited to all software, code, algorithms, text, graphics, logos, designs, visual interfaces, audio, video, and the arrangement thereof) are owned by Brain Chain Verify, its licensors, or other providers of such material and are protected by copyright, trademark, patent, trade secret, and other intellectual property or proprietary rights laws.

You are granted a limited, non-exclusive, non-transferable, revocable license to access and use BCV for your personal or business use, subject to these Terms. This license does not include the right to: modify, copy, or create derivative works based on BCV; use any data mining, robots, or similar data gathering or extraction methods; or use BCV for any commercial purpose not expressly permitted by these Terms.

8. User Content

By using BCV, you grant us a non-exclusive, worldwide, royalty-free license to use, store, and process the data you submit through the service (including your display name, verification data, and configuration preferences) solely for the purpose of providing and improving BCV. You retain all ownership rights in your content.

You represent and warrant that any content you submit through BCV does not violate any applicable law, regulation, or third-party right, and that you have all necessary rights and permissions to submit such content.

9. Disclaimer of Warranties

BCV IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT BCV WILL BE UNINTERRUPTED, TIMELY, SECURE, ERROR-FREE, OR FREE FROM VIRUSES OR OTHER HARMFUL COMPONENTS.

WE MAKE NO WARRANTIES OR REPRESENTATIONS ABOUT THE ACCURACY, RELIABILITY, COMPLETENESS, OR TIMELINESS OF THE SERVICE, THE CONTENT, THE VERIFICATION RESULTS, OR ANY OTHER INFORMATION PROVIDED THROUGH BCV. WE DO NOT GUARANTEE THAT VERIFICATION RESULTS WILL BE ACCEPTED BY ANY THIRD PARTY FOR ANY PURPOSE.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL BRAIN CHAIN VERIFY, ITS DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, PARTNERS, SUPPLIERS, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, DATA, OR OTHER INTANGIBLE LOSSES, REGARDLESS OF WHETHER WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL CUMULATIVE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR YOUR USE OF BCV SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU HAVE PAID TO US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED CANADIAN DOLLARS (CAD $100).

11. Indemnification

You agree to indemnify, defend, and hold harmless Brain Chain Verify, its directors, officers, employees, agents, partners, suppliers, and affiliates from and against any and all claims, demands, losses, damages, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to: your use of BCV; your violation of these Terms; your violation of any applicable law or regulation; your violation of any third-party right, including any intellectual property, privacy, or publicity right; or any content you submit through BCV.

12. Termination

You may terminate your account at any time by using the account deletion feature in your account settings. Account deletion is subject to the data retention provisions described in our Privacy Policy.

We may suspend or terminate your account and access to BCV at any time, with or without cause, with or without notice, at our sole discretion. Reasons for termination may include, but are not limited to: violation of these Terms, fraudulent or illegal activity, extended periods of inactivity, non-payment of subscription fees, or discontinuation of the service.

Upon termination, your right to use BCV will immediately cease. Provisions of these Terms that by their nature should survive termination shall survive, including but not limited to: intellectual property provisions, warranty disclaimers, limitation of liability, indemnification, and dispute resolution.

13. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the Province of British Columbia, Canada, without regard to its conflict of law provisions. Any legal action or proceeding arising out of or relating to these Terms shall be brought exclusively in the courts located in British Columbia, Canada, and you consent to the personal jurisdiction of such courts.

14. Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such provision shall be modified to the minimum extent necessary to make it valid, legal, and enforceable, or if modification is not possible, shall be severed from these Terms. The invalidity or unenforceability of any provision shall not affect the validity or enforceability of the remaining provisions.

15. Entire Agreement

These Terms, together with our Privacy Policy and any other agreements or policies referenced herein, constitute the entire agreement between you and Brain Chain Verify regarding your use of BCV and supersede all prior or contemporaneous communications, proposals, and agreements, whether oral or written, between you and BCV.

16. Contact

If you have questions about these Terms, please contact us.