1. Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Display name (optional)
  • Profile information you choose to provide

Creative Work Data

When you register a creative work, we collect:

  • A SHA-256 cryptographic hash of your file — this is a mathematical fingerprint, not your actual file content. We cannot reconstruct your work from this hash.
  • Your work's title, description, and category
  • The registration timestamp
  • Your certificate ID (e.g., PTC-2026-10-XXXXXXXX)

If you choose to upload a file for secure storage (optional), we store that file in encrypted, private storage accessible only to you.

Payment Information

Payments are processed by Stripe. We do not store your credit card number, CVV, or full payment details. We receive a payment confirmation and your Stripe customer ID. Stripe's privacy policy governs how payment data is handled: stripe.com/privacy.

Usage Data

We automatically collect:

  • IP address (used for fraud prevention, not profiling)
  • Browser type and version
  • Pages visited and time spent
  • Referring URL
  • Device type

Referral Data

If you use our referral programme, we track which accounts were referred by which referrer, for the purpose of awarding referral credits.

2. How We Use Your Information

We use your information to:

  • Create and maintain your account
  • Process IP registrations and issue certificates
  • Record blockchain timestamps for your works
  • Process payments and manage your token balance
  • Send transactional emails (registration confirmations, receipts)
  • Send platform updates if you opt in to communications
  • Improve the platform and diagnose technical issues
  • Detect and prevent fraud or abuse
  • Comply with Canadian law, including PIPEDA

We do not sell your personal information. We do not use your creative work data to train AI models.

3. Blockchain Data & Public Records

PTC Coin uses the Polygon (Layer 2 Ethereum) blockchain to create immutable timestamps. Understanding what is and is not public is important:

What goes on the blockchain (public)

  • A cryptographic hash of your work (not the work itself)
  • A timestamp of when the transaction was submitted
  • A transaction hash (blockchain record ID)

What stays private (stored only on our servers)

  • Your name and email address
  • Your work's title and description
  • Your uploaded files (if any)
  • Your certificate ID and registration details

Public proof pages

Your certificate verification page (at ptc-coin.bywillo.ai/proof/[your-id]) is publicly accessible by design — this is the purpose of the certificate. It shows your work's title, registration date, and blockchain record. If you share your certificate ID publicly, anyone can verify it. If you wish to keep your registration private, do not share your certificate ID.

Important: Blockchain records are permanent. Once a hash is recorded on the Polygon blockchain, it cannot be deleted — not by you, not by us. Please register only works you intend to document.

4. Sharing Your Information

We share your information only in these circumstances:

Service Providers

We work with trusted third-party service providers who process data on our behalf:

  • Stripe — payment processing
  • Polygon/Ethereum network — blockchain timestamping
  • Supabase — database and authentication infrastructure

These providers are contractually required to handle your data securely and only for the purposes we specify.

Legal Requirements

We may disclose your information if required by Canadian law, court order, or to protect the rights, safety, or property of PTC Coin or others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

With Your Consent

We may share your information for other purposes with your explicit consent.

We do not share your information with advertisers or data brokers.

5. Data Storage & Security

Your data is stored on servers located in Canada and the United States. We implement industry-standard security measures including:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest for stored files
  • Row-level security on all database tables
  • Authentication required to access your account data

No method of transmission over the internet is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.

Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except:

  • Blockchain records — permanent and cannot be deleted (see above)
  • Records required for legal compliance or dispute resolution
  • Anonymised, aggregated data that cannot identify you

6. Your Rights (PIPEDA & Canadian Law)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, you have the right to:

  • Access — Request a copy of the personal information we hold about you
  • Correction — Ask us to correct inaccurate or incomplete information
  • Withdrawal of consent — Withdraw consent to certain uses of your data (note: some processing is necessary for service delivery)
  • Complaint — File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca

To exercise these rights, email us at privacy@ptccoin.ca. We will respond within 30 days.

Quebec Residents

If you are a Quebec resident, you have additional rights under Law 25 (Act respecting the protection of personal information in the private sector), including the right to data portability and the right to be forgotten for data not required for legal purposes. Contact us at the email above to exercise these rights.

7. Cookies & Tracking

We use minimal cookies:

  • Authentication cookies — Required to keep you logged in. Session-based; deleted when you log out or close your browser.
  • Preference cookies — Remember your platform preferences (e.g., theme). You can clear these in your browser settings.

We do not use advertising cookies, third-party tracking pixels, or behavioural analytics services.

8. Children's Privacy

PTC Coin is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@ptccoin.ca.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the new policy on this page with an updated effective date
  • Sending an email notification to registered users for significant changes

Your continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions, requests, or concerns:

PTC Coin Privacy Officer

Email: privacy@ptccoin.ca

General contact: ptc-coin.bywillo.ai/contact

We take privacy seriously and will respond to all legitimate requests within 30 days.