Introduction
The DeliveryTag Protocol Foundation ("we", "us", "Foundation"), a Swiss non-profit entity based in Zug, operates as the primary maintainer of the DeliveryTag decentralized logistics verification protocol. We are committed to maintaining the highest standards of data protection in alignment with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
This protocol document outlines how we process data across our ecosystem, including the DeliveryTag core network, our hardware PIN integration, and the Hedera public ledger interface.
Data We Collect
Protocol Data
- • Wallet Addresses
- • Hashgraph TX IDs
- • Hardware Serial IDs
- • Epoch Timestamps
Operational Data
- • Node Operator Email
- • Server Telemetry
- • API Access Logs
- • Uptime Heartbeats
Website Data
- • Browser Agent
- • Referrer Strings
- • Locale Prefs
- • Cookie Identifiers
Legal Basis
Our processing of your personal data is based on the following legal pillars:
-
contract
Contractual Necessity To facilitate node operations and ensure protocol integrity as per the Node Operator Agreement.
-
verified_user
Legal Obligation Compliance with Swiss financial and non-profit regulatory requirements (AML/KYC where applicable).
Data Processing
Processing occurs via the Hedera Hashgraph consensus service. While metadata is encrypted on-chain using Post-Quantum Cryptography (PQC), certain immutable identifiers may persist on the ledger. This processing is surgical: only the minimum data required for consensus is hashed and transmitted.
Data Retention
On-Chain State
IMMUTABLE / PERPETUAL
Operational Logs
90 DAYS (ROLLING)
International Transfers
As a decentralized protocol, data submitted to the network is distributed across global validator nodes. For our foundation-managed infrastructure, data is strictly stored in Switzerland and the European Economic Area (EEA). Transfers to third countries only occur where adequate protection levels are guaranteed by the FADP.
Your Rights
Security Infrastructure
The Foundation employs industry-leading security protocols:
- Post-Quantum Cryptography (PQC): All foundation-managed database layers are protected against future quantum computing threats.
- PIN Hardware Isolation: Interaction with DeliveryTag hardware uses physical Secure Elements (SE) to prevent key leakage.
- Zero-Knowledge Evidence: Where possible, we utilize ZK-proofs to verify state without exposing underlying sensitive data.
Third Parties
| Entity | Role | Jurisdiction |
|---|---|---|
| Hedera Hashgraph | Public Ledger Layer | Global/Decentralized |
| Infomaniak | Cloud Hosting | Switzerland |
| GitHub Inc. | Code Repository | USA (SCCs applied) |
Protocol Changes
We reserve the right to modify this "Surgical Policy" at any time. Major revisions will be broadcasted via the DeliveryTag Governance portal and recorded as an on-chain event. Continued use of the protocol after modifications constitutes acceptance of the updated terms.
Contact & Registry
For Data Protection Officer (DPO) inquiries or to exercise your rights: