Privacy Policy
PHAIR Global Trust Index & Shartificator Awards
This Policy describes how PHAIR (hereinafter "Controller") processes personal data of users interacting with the PHAIR Global Trust Index ecosystem, including the domains trustindex.inxa.one, shartificator.shartify.net, inxa.one and vote.inxa.one.
The entire ecosystem is designed according to Privacy by Design and Privacy by Default principles (Art. 25 GDPR), with extensive use of Zero-Knowledge Proofs (ZKP) and pseudonymous identities (XCircle Token).
1. Data Controller
- Company name
- QIAO LAB LLC — PHAIR brand
- Registered office
- Delaware (USA) — operational offices in Hong Kong, Shanghai and EU
- DPO
- [email protected]
- Privacy Office
- [email protected]
For EU data subjects, a Representative under Art. 27 GDPR has been designated: [email protected].
2. Principles: Privacy by Design
🔐 Minimization by Protocol
Zero-Knowledge Proofs verify attributes without acquiring underlying data.
👁 Blind Identity
XCircle Token separates operational (pseudonymous) identity from real identity.
🤫 Anonymous Authority
The Blind Council operates in total anonymity to guarantee independence.
🔒 Encryption Everywhere
AES-256 at rest, TLS 1.3 in transit across all domains.
3. Types of data processed
3.1 Navigation data
- IP address (anonymized after 7 days)
- User agent, pages visited, referrer
- Language and timezone
3.2 Data provided voluntarily
- Name, institutional email, role
- Institution name and type
- Country of operation
3.3 XCircle Token (pseudonymized)
{
"username": "TOKEN-CODE-USER",
"checkon": "TOKEN-CODE-VERIFICATION"
}The Token contains no personal data in clear. The username ↔ real identity mapping is kept in a separate HSM vault.
3.4 Data derived from Zero-Knowledge Proofs
ZKPs generate cryptographic proofs of attributes (e.g. "assets > X") without revealing underlying data. We only store the proof, never the original data.
4. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Trust Index candidacy management | Pre-contractual measures (Art. 6.1.b) |
| ZKP verification and Trust Rank | Contract performance / legitimate interest |
| Blind Council evaluation | Legitimate interest (Art. 6.1.f) |
| Market Resonance (vote.inxa.one) | Consent (Art. 6.1.a) |
| Institutional communications | Revocable consent |
| Security and anti-fraud | Legitimate interest |
| Legal compliance (AML) | Legal obligation (Art. 6.1.c) |
5. XCircle Token and pseudonymization
The XCircle Token is a pseudonymous Verifiable Credential:
- Pseudonymous username generated at onboarding
- Real identity mapped in separate HSM vault
checkonas proof-of-possession- Digitally signed token delivered to user
6. Zero-Knowledge Proofs
What we can verify
- ✓ Company seniority, AML/KYC compliance
- ✓ Asset solidity above threshold
- ✓ Possession of specific certifications
- ✓ Absence of material litigation
What we NEVER see
- ✗ Detailed financial statements
- ✗ Identity of clients or suppliers
- ✗ Specific asset data
- ✗ Confidential commercial contracts
7. Blind Shartificator Council
- Evaluator anonymity: non-public identity, protects independence
- Candidacy pseudonymization: evaluators only see XCircle username
- Role separation: exclusion for conflict of interest
- Internal traceability: encrypted logs accessible only to DPO
8. Processing security
Technical measures
- AES-256 encryption (rest) / TLS 1.3 (transit)
- HSM for cryptographic keys and XCircle mapping
- RBAC + MFA for operator access
- Encrypted and immutable audit logs
- Annual third-party penetration testing
- Bug bounty program
9. Recipients and transfers outside EU
Recipients
- External processors (cloud, CRM) with Art. 28 GDPR DPA
- Blind Council (only in pseudonymized form)
- Competent authorities upon legitimate request
- Media partners (only anonymous aggregated data)
Transfers outside EU
USA, Hong Kong, Shanghai — based on:
- EU adequacy decisions
- Standard Contractual Clauses (SCC)
- EU-US Data Privacy Framework
- Transfer Impact Assessment (TIA) available upon request
10. Retention period
| Category | Retention |
|---|---|
| Candidacy form data | 36 months |
| Active XCircle Token | Until revocation or 60 months inactivity |
| ZKP proofs | 24 months |
| Security logs | 12 months |
| Anonymized navigation data | 26 months |
| Blind Council evaluations | 10 years (historical archive) |
11. Data subject rights
🔍 Access (Art. 15)
✏️ Rectification (Art. 16)
🗑️ Erasure (Art. 17)
⏸️ Restriction (Art. 18)
📤 Portability (Art. 20)
🚫 Objection (Art. 21)
🤖 No automated decisions (Art. 22)
🔄 Withdraw consent
Requests to [email protected]. Response within 30 days.
Right to lodge complaint with Italian Data Protection Authority or authority of country of residence.
12. Contacts and DPO
- Privacy Office
- [email protected]
- DPO
- [email protected]
- EU Representative
- [email protected]
- Security
- [email protected]