Privacy notice.

Who is responsible

Popoola Kayode is responsible for ChainEvidence, an independent voluntary investigative initiative. For privacy questions and rights requests, contact chainevidence@proton.me. The initiative has no claimed affiliation with law enforcement.

Information and purposes

The reporting service collects the incident date and eligibility confirmations, the account you choose to provide, reported categories, optional transaction and suspected scammer information, optional contact details and consent choices. Optional JPEG, PNG and PDF evidence is uploaded only after a report is accepted and enters private quarantine for security scanning. Do not provide passwords, recovery phrases or unnecessary identification records.

Information is used to receive, assess and document reports, conduct proportionate investigation, maintain security and audit records, consider lawful referrals and handle rights requests. Providing contact details enables follow-up if you choose it. Information about third parties is treated as reported information until verified.

Processing basis and separate choices

The controller must assess each campaign and processing purpose under applicable law, which may include EU GDPR, UK GDPR, Nigeria Data Protection Act and other national requirements. Country selection alone does not determine jurisdiction. Acknowledgement is not a universal lawful basis or a claim of compliance. Campaign and country notices are versioned and retained with the submission.

Optional follow-up contact and an approach about publication are separate choices. Agreement to be approached about a story does not authorise publication of identifiable information. Separate informed permission and editorial review are required before such publication, subject to applicable law.

Access, recipients and transfers

Access is restricted by investigator role and case permissions. No report is automatically published or disclosed to suspected persons, exchanges or authorities. Any necessary disclosure requires authorised review and a documented basis, including lawful disclosure obligations.

The website, self-hosted database, authentication, private evidence storage and malware scanner run on SecretVM. A hosted Supabase account is not used. Confidential material is not sent to external AI services. Contact the operator for questions about hosting, service providers or cross-border handling. This notice does not certify data residency or international-transfer compliance.

Retention and your choices

The operator has chosen no fixed deletion schedule and no automatic deletion for investigation reports. This is an operational preference, not a claim that indefinite retention is required by law. The initial Nigeria campaign records a 365-day retention review reminder; it does not delete records or set an investigation deadline. Privacy requests, documented holds, authorised deletion and backup handling remain separate processes.

You may request information, access, correction, deletion or restriction as applicable through the privacy channel listed on the contact page. Identity and authority must be verified proportionately without exposing a report to impersonation. Some requests may be limited by lawful obligations or documented exceptions.

Technical information and security

The application uses necessary authentication cookies for investigators and does not store reporter answers in browser storage. Security systems may process limited request metadata for abuse prevention. No absolute anonymity, security certification or legal compliance is claimed.

Requirements depend on the processing and applicable jurisdiction. The operator is responsible for assessing requests, processing arrangements and any disclosure. Technical configuration and the availability of this website do not establish legal compliance or independent certification.