Privacy Policy

This Privacy Policy explains how Gold Stone Intelligence LLC ("Gold Stone", "we") collects, uses, and protects personal data when you use our website at goldstoneintel.com (the "Site") and when you engage our digital verification and forensic authentication services (the "Services").

Who we are

Personal data we collect

• Contact data – name, email, phone, organization, role.
• Account/communication data – messages, requests, notes, preferences.
• Technical data – IP address, device/browser info, pages viewed, performance logs (collected via strictly necessary and analytics cookies; see Cookies Policy).
• Evidence & files – images, audio, video and related metadata submitted for authentication, plus context needed to assess provenance. Evidence may contain personal data if provided by you.

Do not submit sensitive personal data unless necessary for the requested verification and authorized by your policies and applicable law.

How we use personal data

• Provide and improve the Services, including forensic analysis and certification.
• Secure evidence intake, maintain chain‑of‑custody, and generate reports/certificates.
• Respond to inquiries, schedule consultations, and manage relationships.
• Operate, secure, and improve the Site (performance metrics, error monitoring).
• Comply with legal obligations and enforce agreements.

Lawful bases (where applicable)

• Contract – to perform a contract or take steps at your request (e.g., process your verification order).
• Legitimate interests – to operate our business, secure systems, prevent abuse, and improve Services (balanced against your rights).
• Consent – for optional cookies or where required for certain processing. You can withdraw consent at any time.
• Legal obligation – to comply with law or lawful requests.

Evidence handling & chain‑of‑custody

• We handle evidence under secure intake with access controls and logging.
• We do not attach advertising identifiers to evidence and do not use evidence to train models without your written permission.
• Where agreed, we can issue a Certificate of Authenticity and optionally register a blockchain‑anchored record.

Sharing your data

• Vendors/Processors – secure hosting, analytics (configured to minimize personal data), email, and security services under contract.
• Professional advisors – legal counsel, auditors, insurers where necessary.
• Legal/Compliance – to comply with law, protect rights, or respond to lawful requests.
• With your direction – sharing reports/certificates with your designated recipients.

We do not sell personal data.

International transfers

We operate from the United States and Iraq and may process data in those or other jurisdictions. Where required, we implement appropriate safeguards for international transfers (e.g., contractual clauses).

Security

We employ administrative, technical, and physical measures designed to protect personal data and evidence, including encryption in transit, role‑based access, and logging. No system is 100% secure; please follow your own security policies when transmitting data.

Retention

We retain personal data and evidence for as long as necessary to provide Services, meet legal obligations, and resolve disputes. Evidence retention periods are defined in the applicable SOW or engagement terms. Upon request and subject to legal holds, we will delete or return materials.

Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal data, and to object to certain processing. You may also have the right to data portability and to lodge a complaint with a supervisory authority. We will respond to verifiable requests consistent with applicable law.

Children

Our Site and Services are not directed to children under 16, and we do not knowingly collect personal data from children.

Changes

We may update this Policy from time to time. Material changes will be posted here with a new effective date.

Contact