Legal · Privacy
Privacy notice
EMJ.life is a pre-disclosure evidence layer (Pillar 1). We collect only what is necessary for that role (D-026 Data Minimization).
What we collect
Each category exists because a specific evidence flow requires it. Nothing else is captured.
| Category | What it is | Why we need it |
|---|---|---|
| Identity | Email hash, KYC outcomes, country code | Bind one UID to one real person. |
| Authentication | Password hash (Argon2id), TOTP secret in PII vault, MFA recovery hashes | Sign-in + account recovery only. |
| Evidence | BEA records you create, V-Layer Merkle anchors, DOI metadata | The reason the platform exists; non-repudiable on Bitcoin via OTS. |
| Interactions | API call logs, chat threads | Operational support, rate-limit enforcement, audit trail. |
| Metadata | Timestamps, IP address for audit_log rows | Immutable Pillar-3 audit chain; legally required for evidence integrity. |
What we don't collect
- No behavioral tracking cookies. No cross-site fingerprinting, no third-party analytics that build a profile of you.
- No third-party advertising. Your data is never used to target ads on or off the platform.
- No ESG rating outputs (D-001). EMJ does not emit ratings, scores, or grades. The platform is a non-interpretive evidence layer.
Your rights
You can exercise the following GDPR rights yourself, without a support ticket:
- Art. 15 — Right of access. Download a JSON dump of all rows linked to your UID. Same endpoint as Art. 20.
- Art. 17 — Right to erasure. Submit an erasure request from Account · Privacy tools. A 7-day cooling window applies (NFR-PRI04) so you can reconsider.
- Art. 20 — Right to data portability. Same JSON export, machine-readable, with PII vault entries decrypted (you're asking for your own data).
Data location
- Singapore origin. Primary databases and INC governance records reside under Singapore-jurisdiction infrastructure.
- Crossref (USA). DOI metadata is registered with Crossref; only the published DOI record (no PII) crosses the border.
- OpenTimestamps · Bitcoin mainnet. Hash-only Merkle roots are anchored to the Bitcoin blockchain. No PII is ever placed on-chain.
Contact
For privacy-specific questions, write to privacy@emj.life or open a thread via /chat.
Governed by D-001 (non-interpretive evidence layer) · D-026 (Data Minimization) · D-027 (Interface Integrity). See also Terms of use.