Privacy Policy
Effective 5 November 2026 · we collect the minimum needed to run a public registry and issue verifiable reports.
0 · Who processes your data
The information controller is CHAIN FIR CAPITAL MANAGEMENT CO., LIMITED (Chainfir Capital · 链杉资本), New Zealand company 8225373, NZBN 9429049664744, registered office 新西兰奥克兰市 Hobsonville，6 Thomas Rielly Avenue（c/o WG Associates Limited），邮编 0618 (Companies Office record). We handle personal information in accordance with the information privacy principles of New Zealand's Privacy Act 2020; for users located in mainland China we additionally observe the relevant requirements of the PRC Personal Information Protection Law. Send access, correction, deletion or consent-withdrawal requests to hi@cvin.org — we reply within 7 business days. Complaints about our handling of personal information can be made to the New Zealand Office of the Privacy Commissioner (privacy.org.nz).
1 · Registry data is public — that is the product
The registry (device identity, observations, hash chain) is public by design: verifiability comes from the fact that anyone can replay it. A registrant may request that identifying attributes of a device (such as a serial number) be hidden; the integrity of the historical hash chain is unaffected.
2 · What we additionally collect
Free features (resolve, calculator tools) require no registration and collect no personal identity information. When you buy a report: the fiat routes retain only order id, CVIN, amount and status (the payment gateway handles cards and account data; we never store card numbers); the international card route retains only order id, CVIN and the email you enter (used for the report receipt and manual re-issue); server logs keep IP addresses (traffic statistics and abuse prevention, rolling 30 days).
3 · What we never do
We do not sell data, do not build profiles for resale, and do not share your email with third parties (other than payment processors and where legally required). The ledger is append-only: an issued report id cannot be altered, but you may email us to hide identifying attributes from public entry points.
4 · Your rights
Access, correction and deletion of personal data you provided (excluding the public hash chain, which is technically immutable by design): email us and we reply within 7 business days.
5 · Payment processors
Alipay/WeChat Pay run through Xunhupay; the international card route runs through Creem (Merchant of Record, collecting global taxes on our behalf). Card data is handled inside the gateway's PCI-DSS environment — we only receive "payment succeeded + order id". On-chain x402 payments are inherently anonymous (only an address and an amount are visible).
6 · Where data is stored
The service and registry run on cloud servers outside mainland China, so information you provide is transferred across borders. We transfer only the minimum fields needed to operate the service (order id, CVIN, email, IP logs) — never identity documents, card numbers or biometric data. If you do not consent to cross-border transfer, you can still use every free feature (resolve, tools) that requires no personal information; paid features require that consent.
The Chinese version of this page is authoritative; this English text is a courtesy translation provided for international customers. Entity: CHAIN FIR CAPITAL MANAGEMENT CO., LIMITED · NZ company 8225373 · NZBN 9429049664744 · registry record.