BVERTERE PROTOCOL PRIVACY POLICY & DATA PRIVACY FRAMEWORK
Effective Date: May 20, 2026 / Version: 2.4 / Domain: bvertere.com / Entity: Bvertere Protocol Inc.

PREAMBLE & PRIVACY ARCHITECTURE
Bvertere Protocol Inc. ("Company," "we," "us," or "our") is committed to maintaining robust privacy protections for the users ("User," "Node Operator," or "you") of our web interface, spatial telemetry engines, AI scoring systems, and off-chain infrastructure (collectively, the "Platform"), accessible via bvertere.com.
This Privacy Policy governs the collection, processing, security, and disclosure of data captured through our off-chain systems. It operates under a strict Data Minimization Architecture designed to balance decentralized infrastructure, cryptographic sovereignty, and legal compliance under applicable international data protection standards (including GDPR, CCPA/CPRA, and relevant fintech frameworks).

1. DATA MINIMIZATION & COLLECTION PARAMETERS
1.1 Off-Chain Technical Metadata
To maintain interface stability, protect server health, and mitigate distributed denial-of-service (DDoS) attacks, our off-chain systems automatically collect limited technical metadata during your interaction with bvertere.com. This includes:
Network Identifiers: Internet Protocol (IP) addresses, routing logs, and request headers.
Client Telemetry: Browser type, version, operating system, language preferences, and referral URLs.
Interface Analytics: Obfuscated session duration, page interaction metrics, and feature engagement patterns.
1.2 Cryptographic Identifiers
When you connect your wallet to the Platform, we log your public cryptographic wallet address (e.g., Ethereum/EVMs or native blockchain public keys). This public address is processed to map user interactions, verify Proof-of-Location (PoL) submissions, calculate AI scoring outputs, and determine programmatic reward eligibility.
1.3 Spatial & Sensor Telemetry (DePIN Framework)
If you deploy, operate, or link a spatial node or participate in Geo Mining via bvertere.com, our ingestion pipeline collects:
Geographic coordinates (GNSS/GPS location telemetry), signal latency metrics, and environmental sensor data.
Hardware attestation metrics used by our AI scoring engine to detect location spoofing or synthetic telemetry injection.
Privacy Mechanism: All spatial telemetry processed for network integrity is cryptographically hashed, aggregated, or pseudonymized to prevent physical tracking or personal identification.
1.4 Absolute Cryptographic Separation (Zero Access to Keys)
WE DO NOT AND WILL NEVER COLLECT, STORE, OR TRANSMIT YOUR PRIVATE KEYS, SEED PHRASES, PASSPHRASES, OR WALLET ACCESS CREDENTIALS.
Control of digital assets remains exclusively under your sovereign cryptographic custody. The Company bears zero technical capability to recover lost keys, access wallet vaults, or initiate non-custodial transactions on your behalf.
2. LEGAL BASIS & STRATEGIC PURPOSES OF PROCESSING
We process collected off-chain data based on legitimate business interests, performance of system functions, and compliance with statutory obligations. Specifically, data is processed for:
System Integrity & Cyber Security: To detect, prevent, and mitigate unauthorized access, automated abuse, Sybil attacks, botnet deployments, and malicious code injection.
AI & Spatial Verification: To run probabilistic AI scoring algorithms that validate Proof-of-Location (PoL) metrics, refine spatial data maps, and prevent location spoofing.
AML & Regulatory Screening: To execute zero-knowledge or third-party wallet risk evaluations aimed at identifying wallets linked to sanctioned jurisdictions, illicit mixers, or terrorist financing (AML/CFT compliance).
Platform Optimization: To analyze UX performance, diagnose operational bottlenecks, and maintain server balance.
3. INFRASTRUCTURE SECURITY & DATA SAFEGUARDING
3.1 Enterprise Security Controls
All off-chain data captured by bvertere.com is stored within secure, enterprise-grade cloud environments utilizing multi-layered defenses, including:
End-to-End & Rest Encryption: Standard-compliant AES-256 encryption for data at rest and TLS 1.3 encryption for data in transit.
Zero-Trust Access Controls: Strict role-based access control (RBAC) and hardware-token multi-factor authentication (MFA) restricting data access to authorized engineering personnel.
Penetration Testing & Audits: Periodic automated vulnerability scans and third-party security audits of off-chain database layers.
3.2 Retention Protocols
We retain off-chain technical logs and metadata only for as long as necessary to fulfill the processing purposes defined herein, resolve system disputes, maintain security baselines, or comply with statutory retention mandates. Cryptographically hashed telemetry may be retained indefinitely to uphold the historical integrity of the spatial ledger.
4. ON-CHAIN IMMUTABILITY & THIRD-PARTY LEDGERS
You acknowledge, understand, and consent that public distributed ledgers (blockchains) operate on an immutable, transparent, and decentralized paradigm.
Public Domain Data: Any transaction, smart contract interaction, spatial validation hash, or wallet balance recorded on a public blockchain is instantly broadcasted to a global network of independent nodes and becomes a permanent public record.
Third-Party Forensic Analysis: The Company does not control, maintain, or operate public blockchain networks or block explorers. We assume zero liability for identity correlation, tracking, or forensic analysis performed by third parties using publicly accessible on-chain data.
Inapplicability of Erasing On-Chain Records: Rights to data erasure or modification (e.g., "Right to be Forgotten") cannot be applied to on-chain data, as blockchain architecture renders programmatic alteration or deletion technically impossible.
5. DATA SHARING & THIRD-PARTY TRANSFERS
We do not sell, rent, or trade your personal or technical data to third parties. We may disclose collected information under the following limited circumstances:
Infrastructure Providers: To trusted third-party service providers (cloud storage, anti-DDoS, RPC providers, and security auditors) bound by strict confidentiality agreements.
Compliance & Legal Process: When strictly compelled by binding legal processes, subpoenas, court orders, or enforceable requests from competent governmental or regulatory authorities.
Corporate Restructuring: In connection with any merger, acquisition, asset sale, or corporate reorganization involving Bvertere Protocol Inc., provided the acquiring entity assumes equal privacy obligations.
6. INTERNATIONAL DATA TRANSFERS & USER RIGHTS
6.1 Cross-Border Transfers
Information collected through bvertere.com may be processed and stored on servers located globally. By interacting with the Platform, you consent to the transfer of data across international borders under applicable data protection mechanisms.
6.2 Privacy Rights
Subject to local privacy legislation (e.g., GDPR, CCPA), you may hold rights regarding your off-chain data, including:
The right to request access to off-chain data associated with your technical metadata.
The right to request correction or erasure of off-chain metadata (where technically feasible).
The right to object to or restrict specific processing operations.
Note: To exercise these rights regarding off-chain data, submit a verified request to our privacy desk. Requests involving wallet addresses require cryptographic message signing to prove ownership.
7. REVISIONS & CONTACT INFORMATION
7.1 Policy Modifications
We reserve the right to amend this Privacy Policy at any time to reflect protocol upgrades, architectural changes, or evolving legal frameworks. The updated version will be published on bvertere.com with a revised, May 20, 2026. Continued interaction with the Platform following updates constitutes acceptance of the revised framework.
7.2 Contact Desk
For privacy inquiries, data subject requests, or regulatory communications:
Legal & Privacy Desk: privacy@bvertere.com
Security & Vulnerability Disclosures: security@bvertere.com
Website: https://bvertere.com