1. Operator
The operator of the ProofWealth service is Web 3.0 s.r.o., registered in Košice, Slovakia. Contact: info@proofwealth.com
2. Data we collect
- Registration data: email, phone number, name
- Bank data (transient): account balances and account holder name via PSD2 APIs. We only use this data to compute a score and then delete it.
- Property data: cadastral territory, title deed number, area
- Resulting score: status tier and bracket (without exact amounts)
3. Purpose of processing
We process data solely to verify the user's financial status and generate a cryptographically verifiable badge. We do not retain exact balances, transaction history or IBANs any longer than strictly necessary for the computation.
4. Third parties
We use licensed PSD2 providers to retrieve bank data. These providers have their own data-processing terms and are supervised by the relevant financial authorities.
5. Your rights (GDPR)
- Right of access: You can request a copy of your data
- Right to rectification: You can correct inaccurate data in settings
- Right to erasure: You can delete your account and all data
- Right to portability: You can request a data export
6. Security
All data is encrypted in transit (TLS 1.3) and at rest. Passwords are hashed with scrypt. Session tokens are cryptographically random and hashed with SHA-256.