Terms of Service and Privacy Policy

1. Terms of Service

1.1 Purpose

This agreement defines the rights, obligations, and responsibilities between BPN Solution Co., Ltd. ("Company") and users in relation to the use of the mobile app "CVA" ("Service").

1.2 Conclusion of Service Agreement

Users enter into the service agreement through the sign-up process in the app, which includes email verification and blockchain-based push notification authentication.

1.3 Service Contents

Creation and management of coffee value assessments
Access to assessments via QR code scanning
User identification via login and authentication

1.4 User Obligations

Users must comply with relevant laws, terms, and notices when using the service.
Users must not use others’ information or access the service fraudulently.

1.5 Limitation of Liability

The Company is not responsible for any inability to provide services due to force majeure, such as natural disasters.

2. Privacy Policy

2.1 Items of Personal Information Collected

Required: Email address
Optional: Name (freely entered, not verified)
Automatically collected: Device information, access logs, push tokens, QR code scan logs

2.2 Purpose of Collection and Use

Purpose: Membership registration and management

Category: Registration

Required item: Email

Retention period: Until membership withdrawal

Purpose: Data identification

Category: Coffee value evaluation

Required item: Device info, access logs, push tokens

Retention period: Until evaluation is completed

✔ Users have the right to refuse consent, but service use may be limited if consent is refused.

✔ The Company does not currently outsource personal data processing. If outsourcing occurs, the policy will be updated accordingly.

2.3 Retention and Use Period

Personal information is destroyed immediately upon account deletion, unless retention is required by law.

2.4 Personal Data Protection Measures

Data transmitted via HTTPS encryption
Session management using JWT
Passwords are stored only on the user’s device
Blockchain-based authentication system applied

2.5 User Rights

Users may request access, correction, deletion, or suspension of personal data
Requests can be made via app settings or email (bp.service@bpnsolution.com)

2.6 Personal Information Protection Officer

Officer: R&D team personal data protection officer
Email: bp.service@bpnsolution.com

Effective Date: June 1, 2025