Privacy Policy

Introduction

At Verumax, the privacy and security of your data is our top priority. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our services.

By using Verumax, you accept the practices described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Full name and contact information (email, phone)
• Name of the institution, organization, or independent professional
• Physical and tax address
• Billing and payment information
• Access credentials (username/encrypted password)

1.2 Document and Beneficiary Data

When issuing documents, we collect data from beneficiaries (students, learners, clients, employees, members, and others):

• Full name and identification number (ID, SSN, etc.)
• Email and phone (for notifications)
• Academic, professional, or employment data related to the issued document
• Photograph (optional, if included in the document)

1.3 Usage and Technical Data

• IP address, browser, operating system
• Pages visited, session time, clicks
• Document validation logs (who validated, when, from where)
• Portal usage metrics (downloads, accesses, etc.)

2. How We Use Your Information

We use the collected data to:

• Provide the Service: Generate, store, and manage digital documents
• Validation: Verify the authenticity of documents using QR codes
• Notifications: Send emails about issued documents and service updates
• Billing: Process payments and issue invoices
• Service Improvement: Analyze usage metrics to optimize functionalities
• Technical Support: Resolve inquiries and technical problems
• Legal Compliance: Comply with legal and regulatory obligations

3. Sharing Information with Third Parties

We do not sell or rent your personal data to third parties. We only share information in these limited cases:

3.1 Service Providers

We work with reliable providers who help us operate the Service:

• Hosting and cloud storage (secure servers)
• Payment processors (with PCI-DSS certification)
• Transactional email services
• Printing and shipping services (only for requested physical documents)

All providers are contractually obligated to protect your data and cannot use it for other purposes.

3.2 Legal Requirements

We may disclose information if required by law (court order, legal process) or to protect our legal rights.

3.3 Public Validation

Issued documents are publicly verifiable via QR code. The information shown in validation (beneficiary name, issuing institution, document data) will be visible to anyone who scans the code.

4. Data Security

We implement enterprise-level security measures:

• SSL/TLS 256-bit Encryption: All communications are encrypted
• Protected Passwords: Stored with hash and salt (bcrypt)
• Automatic Daily Backups: With encryption and redundant storage
• Firewall and 24/7 Monitoring: Protection against unauthorized access
• Security Audits: Periodic vulnerability reviews
• Access Restriction: Only authorized personnel have access to sensitive data

Despite these measures, no system is 100% secure. We recommend using strong passwords and not sharing your credentials.

5. Data Retention

We retain your data while you maintain an active account or as required by law:

• Account Data: Until you cancel your account + minimum legal period (generally 10 years for tax purposes)
• Issued Documents: Permanently, as they serve as historical record and validation
• Validation Logs: 5 years for auditing and fraud prevention
• Billing Data: 10 years according to accounting regulations

When you cancel your account, we securely delete unnecessary data, but retain historical records according to legal obligations.

6. Your Rights

According to personal data protection laws, you have the right to:

• Access: Request a copy of your personal data that we have stored
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request the deletion of your data (subject to legal obligations)
• Limitation: Restrict certain uses of your data
• Portability: Receive your data in a structured, transferable format
• Objection: Object to the processing of your data in certain circumstances
• Withdrawal of Consent: Withdraw consent granted at any time

To exercise these rights, contact us at privacidad@verumax.com. We will respond within 15 business days.

7. Cookies and Similar Technologies

We use cookies and similar technologies for:

• Essential Cookies: For portal operation (session, authentication)
• Analytical Cookies: To understand how you use the service and improve it (anonymous)
• Preference Cookies: To remember your settings (language, theme, etc.)

You can configure your browser to reject cookies, although this may affect the functionality of the Service.

8. International Transfers

Your data is stored primarily on servers located in Argentina. In some cases, service providers may process data in other countries with adequate levels of data protection (for example: United States under the Data Privacy Framework, European Union under GDPR).

9. Children's Privacy

Our Service is not intended for children under 13 years of age. If we discover that we have collected data from a minor without parental consent, we will delete that information immediately.

For minor beneficiaries whose documents are issued by educational institutions, consent is presumed to have been granted by the institution acting in exercise of delegated parental authority or academic guardianship.

10. Changes to this Policy

We may update this Privacy Policy occasionally. Significant changes will be notified by email or through prominent notice on the portal. The "Last Updated" date at the top indicates when the last modification was made.

11. Contact

For inquiries, to exercise your rights, or to report privacy issues:

12. Enforcement Authority

In Argentina, the enforcement authority in matters of personal data protection is the Agency for Access to Public Information (AAIP). If you believe your rights have been violated, you may file a complaint with this agency.