Privacy & Cookie Policy

This policy explains how Vynex Tech Ltd ("we", "us", "our"), which operates paper-chain.io, collects and uses personal data, and how we use cookies. We are the data controller for the personal data described here.

1. Information we collect

Information you give us

• Enquiries & contact form: your name, work email, company and message.
• Free-audit requests: your name, work email, company and (optionally) your monthly LC volume.
• Account registration (if you create an account): your name, email and login credentials.

Information created when you run a check

• The data fields extracted from your documents in your browser (for example amounts, dates, party names) are sent to our server to run the UCP 600 / ISBP 821 examination. The source documents are not sent or stored.
• The verification report you generate may be shared with our team so we can follow up on your audit request.
• A SHA-256 hash of your document bundle may be written to the public XRP Ledger as tamper-evident proof.

What is written to the XRP Ledger

Anchoring is optional and happens only when you choose to anchor a verification. The entry is written by us, from our own platform wallet, and contains exactly five things:

• a one-way SHA-256 hash of your document bundle, which cannot be reversed;
• the compliance score the examination produced;
• the number of documents in the bundle;
• a timestamp; and
• a random nonce.

It does not contain your credit reference, your name, your company, your account identifier, any party named in your documents, or any document content. Entries on the XRP Ledger are public and permanent: once written, neither we nor you can edit or delete them.

Information collected automatically

• Usage & device data and cookies (see section 5), including IP address and browser/device information, used for security and — with your consent — analytics and advertising measurement.

2. Measurement and service improvement

We keep two kinds of measurement about how the service performs. Neither contains your documents, and neither can be traced back to you or to a transaction.

• Reading accuracy. When you correct a document type our reader guessed wrongly, we record the correction as shape only: what it guessed, what it should have been, the page count, how much text the file contained, whether it needed OCR, and how many fields were read. We do not record the filename, any field value, any line of text, or any party name.
• Aggregate examination statistics. We keep, or intend to keep, de-identified statistics about which UCP 600 and ISBP 821 rules are raised and how often, together with the general shape of a credit — for example its currency, a broad amount band, the countries of loading and discharge, and the Incoterm. Exact amounts, dates, credit references, bank names and party names are not kept for this purpose.

We do not use your document content to train artificial-intelligence models, and we do not sell or share these measurements with third parties. If you would prefer your examinations to be excluded from aggregate statistics entirely, write to uday@vynextech.co.uk and we will exclude them.

3. How we use your information

• To provide the service and return your verification results.
• To respond to your enquiries and follow up on audit requests.
• To operate, secure, and improve our website and service.
• With your consent, to measure the performance of our advertising and understand site usage.
• To comply with legal obligations.

4. Legal bases (UK GDPR / EU GDPR)

• Contract / steps at your request — to provide the service and respond to your enquiries.
• Legitimate interests — to secure and improve our website (balanced against your rights).
• Consent — for non-essential cookies and advertising/analytics measurement. You can withdraw consent at any time.
• Legal obligation — where we must retain or disclose data by law.

5. Cookies & similar technologies

We use a small number of cookies and local-storage items. Non-essential (analytics and advertising) cookies are only set after you accept them in our cookie banner. We use Google Consent Mode v2, so until you consent, Google's tags run in a restricted, non-identifying mode.

You can change your choice at any time using the button below, or by clearing cookies/site data in your browser. Blocking essential cookies may stop parts of the site working.

Cookie settings

6. Who we share data with

We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract:

• Amazon Web Services — hosting and storage (London / eu-west-2 region).
• Google — advertising and measurement (Google Ads), where you have consented.
• Resend — sending transactional and notification emails.
• XRP Ledger — a public, permanent blockchain. We write a non-reversible document hash, the score, the document count and a timestamp. No personal data, no credit reference and no document content is written. See section 1 for the full list.

7. International transfers

Some providers (for example Google) may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / EU Standard Contractual Clauses.

8. How long we keep it

We keep enquiry and audit-request data for as long as needed to respond to you and for our legitimate business records, and then delete or anonymise it. Verification reports shared with our team are retained only as long as needed to support your request. We do not retain your source documents, as they are not uploaded to us. Entries written to the XRP Ledger are permanent and outside our control: they cannot be deleted on request, which is why they are limited to the non-identifying fields listed in section 1.

9. Your rights

Subject to law, you have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. To exercise any of these, email uday@vynextech.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local supervisory authority.

10. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and processing your documents locally in your browser wherever possible.

11. Children

paper-chain.io is a business service and is not directed at children. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "Last updated" date above.

13. Contact us

Vynex Tech Ltd (Company No. 17244720)
105 Palewell Park, London, England, SW14 8JJ
Email: uday@vynextech.co.uk