Privacy Policy
Last updated: 2026-07-18
1. Who we are
ProofChain is a product of HKMM Group Inc. ("ProofChain", "we", "our"), an Ontario corporation with its registered office at 146 Thirtieth Street, Suite 100, Etobicoke, Ontario M8W 3C4, Canada. We act as data controller for the personal information described below. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws — including British Columbia PIPA, Alberta PIPA, and Quebec's Act respecting the protection of personal information in the private sector (Law 25). For Quebec residents, our Privacy Officer also serves as the designated Person in charge of the protection of personal information.
2. What we collect
- Account data: email, display name, hashed authentication credentials.
- Home data you or verified partners submit: address, permits, work orders, receipts, photos, warranty documents.
- Usage: page views, feature usage, IP address (hashed for audit).
3. How we use it
To operate the trust ledger, verify attestations, notify you of events on your homes, and provide the ProofReport service. We do not sell personal information. We do not build advertising profiles.
4. Your rights (PIPEDA)
- Access: download every record we hold on you as JSON from your privacy dashboard.
- Correction: edit your profile or dispute an attestation on your home.
- Erasure: request account deletion. We review within 30 days. Signed attestations that another party (contractor, inspector) submitted on a home may be retained in anonymized form for ledger integrity.
- Portability: JSON export is machine-readable.
5. Retention
Account data is kept while your account is active plus 12 months for audit. Attestations tied to a home persist for the life of that home on the ledger — they are the point of the service.
6. Security
Row-level security at the database. TLS in transit. Merkle-anchored event history. Least-privilege access for staff. Audit log on all HQ actions.
7. Third parties & subprocessors
We use Lovable Cloud (managed backend & storage), Paddle.com Market Ltd. (Merchant of Record for payments, billing, tax and invoicing), and Lovable Emails (transactional email delivery). None have advertising rights over your data. Data may be processed in Canada, the United States, and the European Economic Area under appropriate safeguards (adequacy decisions or Standard Contractual Clauses).
8. Contact
Privacy Officer / Person in charge of the protection of personal information:
HKMM Group Inc.
146 Thirtieth Street, Suite 100, Etobicoke, Ontario M8W 3C4, Canada
Email: privacy@proofchain.world
Tel: +1 289-643-9839
You may also lodge a complaint with the Office of the Privacy Commissioner of Canada or, if you reside in Quebec, the Commission d'accès à l'information.