Legal Notice,
Privacy Policy and Cookies.

Legal Notice and Terms of Use

Website Title

In compliance with Article 10 of Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), we hereby provide the following information:

1. Scope of Application

This document governs the terms of use, access, and navigation of the main website and the digital ecosystem associated with the V-PROOF Protocol. It applies to:

• Main, commercial, and informational website: www.vproofprotocol.com.
• Geographic and redirect domains owned by us that redirect to the main website, including, among others: vproofprotocol.es, vproofprotocol.cat, vproofprotocol.eu, vproofprotocol.de, vproofprotocol.fr, and vproofprotocol.uk.
• Technical ecosystem, application, and subdomains intended for software use, platform access, developer portal, API, and protocol backend, among others: vproofprotocol.io, vproofprotocol.tech, vproof.io, app.vproof.io, backend.vproof.io, and support.vproof.io.

Accessing and browsing any of these websites confers the status of user and implies acceptance of this Legal Notice. The processing of personal data and the use of cookies are governed by the Privacy Policy and the Cookie Policy in Sections II and III, which are provided for informational purposes; non-essential cookies are used only if you give your consent. Customers’ use of the platform is also governed by the applicable service agreement, which takes precedence over this document in the event of any conflict.

2. Nature of the Service and Limitation of Liability

V-PROOF Protocol provides cryptographic infrastructure for the traceability and anchoring of evidence related to digital assets, including those generated by artificial intelligence and human authorship. The evidence it generates allows for the verification of the technical integrity and timestamp of the sealed asset; it does not attest to the veracity of its content, the identity of the contributor beyond what is recorded, or the client’s regulatory compliance, the assessment of which is the responsibility of the competent authority in each case.

V-PROOF Protocol does not provide legal advice and is not responsible for the origin, content, or use that the customer makes of the assets at sealed through its infrastructure, without prejudice to any liabilities that the law does not permit to be excluded.

3. Intellectual and Industrial Property

V-PROOF PROTOCOL® is a registered trademark of V-PROOF PROTOCOL, S.L., a subsidiary of Vertically.

All rights to the software, architecture, content, documentation, trademarks, logos, and design of this website belong to V-PROOF PROTOCOL, S.L. or its licensors, and are protected by intellectual and industrial property laws. Reproduction, distribution, or use without express authorization is prohibited.

The use of the name, logo, V-Seal® mark, or the phrase “Verified by V-Proof” on any asset, document, or platform is prohibited without an active license and a valid contract.

All other trademarks and trade names mentioned on this site belong to their respective owners and are mentioned solely for informational purposes; this does not imply any affiliation or endorsement.

4. Data sovereignty and local fingerprint

The infrastructure is designed based on the principle of data sovereignty:

• During the sealing process, the document's cryptographic fingerprint is calculated in the client environment (Desktop Agent, Word Add-in, or the client's own system via the API). The V-PROOF Protocol receives the fingerprint and compliance metadata, not the document's content.
• In modules that work with content provided by the client, such as Code Governance—which analyzes code repositories—or V-Proof AI, V-PROOF Protocol treats that content as a data processor, acting solely in accordance with the client’s instructions and under the terms of the contract and the corresponding Data Processing Agreement (DPA). When a module uses a language model, it does so through the provider that the client contracts and configures using their own account; V-PROOF Protocol does not determine which provider that information is sent to.

Technical information on data residency, security, and certifications is available under " Trust and Security."

5. Use of the Site, Links, and Modifications

The user agrees to use the site in accordance with the law and these terms and conditions, and not to use it for any illegal activities or activities that may harm V-PROOF Protocol or third parties. Links to third-party sites are provided for informational purposes only; V-PROOF Protocol does not control or assume responsibility for their content. These terms and conditions may be updated; the current version is the one published on this page, along with its last update date.

6. Applicable Law and Jurisdiction

These terms and conditions are governed by Spanish law. For any dispute arising from the use of this website, the parties agree to submit to the courts and tribunals of the city of Barcelona, unless applicable law mandates a different jurisdiction.

Privacy Policy

1. Data Controller

2. Data Protection Officer

V-PROOF Protocol has appointed a Data Protection Officer (DPO) in accordance with Articles 37 through 39 of the GDPR and Articles 34 through 37 of the LOPDGDD:

You may contact the Data Protection Officer (DPO) regarding any questions about the processing of your personal data and the exercise of your rights.

3. What data we process, for what purpose, and on what legal basis

The fields marked as required on each form are necessary to process your request; if you do not provide this information, we will not be able to process it. We do not make decisions based solely on the automated processing of your data that produce legal effects on you or significantly affect you.

The data processed on the platform on behalf of clients is not governed by this policy, but rather by the service agreement and the data processing agreement (DPA) signed with each client.

4. Recipients and Data Processors

We do not share your data with third parties unless required by law. The following categories of vendors have access to your data as data processors under contract:

• Website hosting, forms, and built-in analytics: Squarespace.
• Web analytics: Google (Google Analytics), only if you consent.
• Email and customer relationship management providers.

With regard to the data collected by the LinkedIn Insight Tag, V-PROOF Protocol and LinkedIn Ireland Unlimited Company act as joint data controllers only if you give your consent. V-PROOF Protocol is responsible for informing you and obtaining your consent; LinkedIn is responsible for the subsequent processing it performs using its own resources, as described in its privacy policy. You may exercise your rights with either of them.

5. International Transfers

Some of the listed providers are headquartered in the United States or have part of their infrastructure there, so the processing may involve data transfers outside the European Economic Area. These transfers are covered by the provider’s adherence to the EU-U.S. Privacy Shield or, failing that, by the Standard Contractual Clauses approved by the European Commission.

6. Your Rights

You may exercise the following rights at any time:

• Right of Access: Find out what personal data we process about you.
• Correction: Correcting inaccurate information.
• Deletion: Request that your data be deleted.
• Objection: to object to a specific processing activity, including one based on a legitimate interest.
• Restriction: Request that we temporarily suspend the processing.
• Data portability: receive your data in a structured format.
• Not to be subject to automated individual decision-making, including profiling, that has legal effects or significantly affects you.
• You may withdraw your consent at any time, without this affecting the lawfulness of the processing that took place prior to the withdrawal.

To exercise these rights, please write to david@vproof.io or info@vproof.io, specifying the right you wish to exercise. There is no charge for exercising these rights, and we will respond within one month, which may be extended in the cases provided for in Article 12.3 of the GDPR. If we have reasonable doubts about your identity, we may ask you for the additional information necessary to confirm it.

If you believe we have not properly addressed your request, you may first contact the Data Protection Officer (DPO) and, in any case, file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Minors

This site is intended for professionals and organizations. We do not knowingly collect data from children under the age of 14 (Art. 7 of the LOPDGDD).

8. Safety

We implement technical and organizational measures appropriate to the risk to protect your data. Once the retention period has expired, the data is securely deleted.

Cookie Policy

To ensure the site functions properly and to understand how executives and the organizations that visit it use it, we use the following technologies:

Technical cookies, strictly necessary

The hosting platform uses them for security, traffic routing, basic site functionality, and to remember your preferences, including your cookie settings. Since they are essential, they do not require consent.

Performance and Analytics Cookies · Squarespace and Google Analytics

They measure traffic volume and browsing behavior on an aggregate basis to determine which content generates the most interest. The hosting platform (Squarespace) uses its own analytics, and Google Analytics—which is a third-party cookie—is also installed. These are only activated if you give your consent.

Advertising and Campaign Measurement Cookies · LinkedIn Insight Tag

These are third-party cookies. We use them solely to track conversions: to determine which LinkedIn campaigns drive visits and inquiries, and to gather aggregate professional profile information about those visitors, such as industry or job title. We do not use them to create retargeting audiences or to show you personalized ads. They are only activated if you consent. See section 4 of the Privacy Policy regarding our joint responsibility with LinkedIn.

Consent Management

In accordance with the GDPR and the LSSI-CE, analytics and advertising cookies are only installed after you have given your express consent via the cookie banner. You can accept, reject, or choose which ones to accept at any time—just as easily as you gave your consent—by clicking the “Cookie Preferences” link at the bottom of each page. You can also delete them from your browser settings.

International data transfers involving these tools are described in Section 5 of the Privacy Policy.

V-PROOF PROTOCOL, S.L. · Tax ID No. B26964122 · Carrer de la Riera 18, ground floor, 08500 Vic (Barcelona) · info@vproof.io