Terms & Conditions

1. Agreement to these terms & who we are

These Terms & Conditions (the "Terms") form a binding agreement between you and eTech Consulting (ABN [ABN / ACN — TO BE COMPLETED]), of [REGISTERED BUSINESS ADDRESS — TO BE COMPLETED], Australia ("we", "us", "our", or the "operator"). We operate myProfile247, available at myprofile247.com (the "Service"). We also run our own analytics and secrets infrastructure under the name "Asset of Things".

By creating an account, accessing or using the Service, you confirm that you have read, understood and agree to be bound by these Terms and by our Privacy Policy and Cookie Policy, which are incorporated by reference. If you do not agree, you must not use the Service.

We may update these Terms from time to time (see "Changes"). The version, effective date and last-updated date appear at the top of this page.

2. Eligibility

You must be at least 16 years old and have the legal capacity to form a binding contract to use the Service. The Service is not directed to, and must not be used by, anyone under 16.

We currently do not operate an age gate at signup and do not collect a date of birth on the core profile; an "age over 18" status exists only as an optional, self-asserted or verifiable attribute that you may choose to add. We do not knowingly collect personal information from children, and if we become aware that we hold such information we will delete it. How we handle minors' personal information, and this no-age-gate position, are described further in the children's-data section of our Privacy Policy. If you use the Service on behalf of an organisation, you confirm you are authorised to bind that organisation to these Terms.

3. Definitions

Service

The myProfile247 web and mobile applications, application programming interfaces, and related features operated by us, including the attribute wallet, attestation, verification and selective-disclosure functions.

Account

The profile we create when you register, identified by your email, names, optional handle, an access role, a UI colour and a directory code (for example, MP-XXXXX).

Attribute

A fact about you that you store in your wallet — comprising a key, label, category and value — each carrying a confidence score (0 to 100) and a trust tier (self, peer, official or authority).

Collection

A group of attributes you create that can be public or private.

Verifier

A person or organisation to whom you selectively disclose attributes, and who may rely on those disclosures.

Content

Anything you submit to the Service, including attribute values and media assets (such as images and documents) you attach to attributes.

Attestation

A confirmation by another user that contributes to an attribute's confidence score.

Receipt

A tamper-evident record of an action, derived from our append-only transparency log and periodically anchored to the public XRP Ledger as described in our Privacy Policy.

4. The Service

myProfile247 is a user-owned attribute wallet and self-sovereign identity service. It lets you store attributes about yourself, attach media to them, group them into collections, have them attested by peers or verified through optional third-party identity-verification providers, and selectively disclose them to verifiers of your choosing.

Attribute values and media are encrypted. Some are end-to-end encrypted on your device, so that we store only opaque ciphertext we cannot read; others are encrypted at rest on our servers. Your device's private keys remain on your device — we store only your public keys. Your identity root key can be backed up in a way that is sealed by a passphrase-derived key and/or social-recovery shards that we cannot open. These features are described in detail in our Privacy Policy.

We may add, change or remove features over time. We do not guarantee that any particular feature, attribute type, integration or interface will remain available.

5. Your account

To use most features you must register an account. You agree to provide accurate, current and complete information and to keep it up to date. When you sign up locally we collect your email, first name and last name (and optionally a middle name and a handle). A password is optional; if you set one, we store it only as a salted hash and never keep your plaintext password. You may instead sign in with Facebook, Google or LinkedIn, in which case we receive the provider's subject identifier and your email address.

You are responsible for safeguarding your credentials, your device keys and your recovery passphrase, and for all activity that occurs under your account. Because some keys exist only on your device and some backups can only be opened by you, losing them may make the associated data permanently unrecoverable — we cannot recover it for you.

You must notify us promptly at support@myprofile247.com if you suspect any unauthorised access to or use of your account. We maintain session records (with a hashed IP address, a device label and a user-agent string) to help you and us manage account security.

6. Acceptable Use Policy

You must not, and must not attempt to or permit others to:

• use the Service for any unlawful purpose or in breach of any applicable law;
• upload, store, disclose or share content that is illegal, infringing, defamatory, or that violates another person's rights;
• impersonate any person or organisation, or make false or misleading identity claims or attestations;
• upload or share personal information about another person without that person's authority or consent;
• scrape, crawl, harvest or otherwise collect data from the Service by automated means except as we expressly permit;
• attack, probe, scan, test the vulnerability of, or circumvent any security or authentication measure of the Service;
• misuse attributes that other users have shared with you, including using them beyond the purpose for which they were disclosed;
• disregard others' rights or consent when sharing or relying on attributes;
• reverse engineer, decompile or disassemble any part of the Service, except to the extent this restriction is prohibited by law;
• resell, sublicense or commercially exploit the Service or access to it;
• interfere with, disrupt or impose an unreasonable load on the Service or its infrastructure.

You must respect others' rights and obtain any necessary consent when sharing or relying on attributes.

We may investigate suspected breaches of this policy and take action, including removing content and suspending or terminating accounts (see "Suspension & termination").

7. Your content & your attributes

You retain all ownership of and rights in your Content, including your attributes and the media you attach to them. We do not claim ownership of your Content.

You grant us a limited, non-exclusive, worldwide, royalty-free licence to host, store, back up, encrypt, transmit, process and display your Content solely to the extent necessary to operate, maintain and provide the Service to you and to the verifiers you choose. This licence ends when your Content is deleted or crypto-shredded, except for content you have already disclosed to others and for backups or records we are required to keep by law.

You are responsible for the accuracy, completeness and legality of everything you upload, store and share, and you confirm that you have the right to provide it. Confidence scores and trust tiers reflect attestations and inputs — they do not make your Content true, and we do not verify it for you except through the optional features described below.

8. Verification, confidence scores & receipts

Confidence scores (0 to 100) and trust tiers are informational signals computed from attestations and the tier of the source. They are shown to you and to the people you share with, and are intended to help judgment — they are not guarantees. We do not use them to make solely-automated decisions that produce legal or similarly significant effects on you.

We do not warrant the accuracy, currency or completeness of any claim, attribute or attestation supplied by you, by other users, or by third parties. Where you choose to verify an attribute through an optional third-party identity-verification provider, we store only the verification outcome and a provider reference — never your raw identity documents or selfies.

Receipts are tamper-evident records derived from our append-only, cryptographically signed transparency log, and are periodically anchored to the public XRP Ledger. A receipt evidences that an action was recorded; it is not a representation about the truth of the underlying attribute. Verifiers rely on shared attributes, scores and receipts at their own risk and should apply their own checks before acting on them.

9. Selective disclosure & sharing

You decide which attributes and collections to disclose, to whom, and when. Collections can be public or private, and you control each disclosure. You are responsible for choosing your verifiers carefully and for the consequences of what you share.

Once you disclose an attribute to a verifier, that verifier may retain or use the disclosed information independently of the Service, subject to their own obligations and any applicable law. We cannot recall information you have already shared, and we are not responsible for a verifier's handling of it. Only share what you are comfortable for the recipient to keep.

10. Our intellectual property

We (and our licensors) own all intellectual property rights in the Service, including the platform, software, designs, the "myProfile247" name and branding, and all related materials, other than your Content. Nothing in these Terms transfers any of those rights to you.

We grant you a limited, personal, non-exclusive, non-transferable, revocable licence to access and use the Service for its intended purpose, subject to these Terms. You must not use our names, logos or branding without our prior written consent.

11. Third-party services & links

The Service can connect to third-party services that you choose to use, including OAuth / OpenID Connect login providers (Facebook, Google and LinkedIn), optional identity-verification providers, and the public XRP Ledger network used to anchor receipts. The Service may also contain links to third-party sites.

Those third parties are independent of us and are governed by their own terms and privacy policies. We do not control them, do not endorse them, and are not responsible for their availability, content, conduct or handling of your information. Your use of a third-party service is at your own risk and subject to that third party's terms. The XRP Ledger is a public, permissionless network we do not operate or control.

The hosting and infrastructure subprocessors we use to operate the Service (for example, our database hosting, reverse proxy, DNS, self-hosted analytics and secrets management) are listed and described in our Privacy Policy.

12. Privacy

Our handling of personal information is described in our Privacy Policy, and our use of cookies and local storage is described in our Cookie Policy. By using the Service you acknowledge those documents. They explain, among other things, our encryption model, what is and is not written to the XRP Ledger, how erasure is achieved off-chain through crypto-shredding, our subprocessors, and your access, correction, complaint and other rights.

13. Fees

The Service is currently provided free of charge, and there are no paid features at this time. We may introduce paid features or fees in the future. If we do, we will give you reasonable advance notice and the applicable terms before you incur any charge, and any paid feature will be optional unless you agree to it.

14. Disclaimers

This clause does not exclude, restrict or modify the consumer guarantees that apply under the Australian Consumer Law and that cannot be excluded (see clause 16). To the extent any exclusion or disclaimer below would limit such a guarantee, it does not apply.

To the maximum extent permitted by law, and subject to clause 16 (Australian Consumer Law), the Service is provided "as is" and "as available", and we do not give any warranties or make any representations beyond those that the law requires and that cannot be excluded — including as to accuracy, availability, security, fitness for your particular purpose, or non-infringement.

In particular, and subject to clause 16, we do not warrant that the Service will be uninterrupted, error-free or secure; that any attribute, confidence score, attestation or verification is accurate or reliable; or that crypto-shredding, encryption or key backup will protect against every risk. Crypto-shredding is intended to render the associated encrypted data permanently unrecoverable, and its effectiveness depends on sound key management and on current cryptographic assumptions continuing to hold. You are responsible for your own decisions made in reliance on the Service.

15. Limitation of liability

To the maximum extent permitted by law, and subject to clause 16 (Australian Consumer Law), we are not liable for any indirect, incidental, special, consequential or punitive loss, or for any loss of profits, revenue, data, goodwill or anticipated savings, arising out of or in connection with the Service or these Terms, whether in contract, tort (including negligence) or otherwise, even if we have been advised of the possibility of such loss.

To the maximum extent permitted by law, and subject to clause 16, for liability that is not the subject of a non-excludable consumer guarantee, our total aggregate liability arising out of or in connection with the Service or these Terms is limited to the greater of (a) the total fees you have paid us for the Service in the 12 months before the claim (currently nil, as the Service is provided free of charge) and (b) one hundred Australian dollars (AUD 100).

This cap does not apply to, and does not limit, our liability for failure to comply with any consumer guarantee that cannot be excluded under the Australian Consumer Law; that liability is governed by clause 16. Nothing in this clause limits liability that cannot lawfully be limited or excluded.

16. Australian Consumer Law

Nothing in these Terms excludes, restricts or modifies any consumer guarantee, right or remedy that you may have under the Australian Consumer Law (Schedule 2 to the Competition and Consumer Act 2010 (Cth)) or any other right that cannot lawfully be excluded. To the extent any part of these Terms is inconsistent with such a non-excludable right or guarantee, this clause prevails and that part has no effect.

The Service is of a kind ordinarily acquired for personal, domestic or household use or consumption. Where you acquire the Service as a consumer for such use, the non-excludable consumer guarantees apply in full and are not limited by these Terms, and the limitation on re-supply of services in section 64A of the Australian Consumer Law does not apply.

Only where the Service is acquired other than for personal, domestic or household use or consumption (for example, for business or commercial purposes), and where we are permitted by law to limit our liability for a failure to comply with a consumer guarantee in relation to services, our liability for that failure is limited, at our option, to supplying the services again or paying the cost of having the services supplied again. The disclaimers and limitations in clauses 14 and 15 apply only to the extent permitted by law and are read subject to this clause.

17. Indemnity

To the maximum extent permitted by law, and subject to clause 16, you agree to indemnify and hold us harmless from and against any claims, liabilities, losses, damages, costs and expenses (including reasonable legal costs) arising out of or in connection with your breach of these Terms, your misuse of the Service, your Content, or your infringement of any law or any third party's rights — including any claim arising from personal information about others that you upload or share without authority. This indemnity is reduced to the extent any loss is caused by our own act or omission.

18. Suspension & termination

You may stop using the Service at any time. You may request that we close your account and delete your data by contacting privacy@myprofile247.com.

We may suspend or terminate your access, in whole or in part, if you breach these Terms (including the Acceptable Use Policy), if we reasonably believe suspension is needed to protect the Service or other users, or if we are required to do so by law. Where practicable and lawful, we will give you notice.

On termination, your right to use the Service ends. We will close your account and, on a valid deletion or erasure request, destroy the relevant data — including by crypto-shredding the associated keys, after which the associated encrypted data is intended to become permanently unrecoverable. The effectiveness of crypto-shredding depends on sound key management and on current cryptographic assumptions continuing to hold. As explained in our Privacy Policy, the value previously anchored to the public XRP Ledger is a salted, one-way hash of an aggregate transparency-log tree head that we consider is not reasonably identifiable to you; it contains no attribute values, names, emails or per-record data and cannot be altered or removed. We retain it on lawful bases — including integrity, tamper-evidence and fraud prevention — and it is not affected by deletion of your off-chain data. We do not yet offer self-service deletion or export; these are handled on request and self-service tools are planned. Clauses that by their nature should survive termination (including those on your content licence for already-shared content, intellectual property, disclaimers, liability, the Australian Consumer Law clause, indemnity, governing law and general provisions) survive.

19. Changes to the Service and to these terms

We may change, suspend or discontinue the Service or any feature at any time. We may also update these Terms from time to time — for example, to reflect changes in the Service, our practices, or the law. When we make a material change, we will update the version and dates at the top of this page and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the updated Terms. If you do not agree, you should stop using the Service.

20. Governing law & jurisdiction

These Terms are governed by the laws of Victoria, Australia, and the Commonwealth laws of Australia that apply there. You and we submit to the non-exclusive jurisdiction of the courts of Victoria, Australia, and the courts that may hear appeals from them. Nothing in this clause limits any right you may have to bring or pursue a matter in another forum where the law gives you that right.

21. Dispute resolution

If a dispute arises, we ask that you first contact us at support@myprofile247.com so that we can try to resolve it. You and we agree to negotiate in good faith for a reasonable period before commencing court proceedings, except where urgent relief (such as an injunction) is needed. If the dispute is not resolved, it may be referred to the courts of Victoria, Australia. This clause does not limit any right you have to complain to a regulator, including, in relation to privacy, the Office of the Australian Information Commissioner as described in our Privacy Policy.

22. General

Entire agreement. These Terms, together with the Privacy Policy and Cookie Policy, are the entire agreement between you and us about the Service and supersede any prior arrangements about its subject matter.

Severability. If any provision is found to be unenforceable, it is severed to the minimum extent necessary and the remaining provisions continue in force.

Waiver. A failure or delay by us in exercising a right is not a waiver of that right, and any waiver must be in writing to be effective.

Assignment. You may not assign or transfer your rights under these Terms without our consent. We may assign our rights and obligations to a related entity or in connection with a reorganisation, sale or transfer of our business, where your rights are not materially diminished.

Force majeure. We are not liable for any failure or delay caused by events beyond our reasonable control, including acts of God, outages, network or infrastructure failures, or the unavailability of third-party services or public networks such as the XRP Ledger.

Notices. We may give you notices through the Service or, where we are able to, by email to the address associated with your account; notices posted in the Service or on this page are our primary channel. You may give us notice at support@myprofile247.com.

23. Contact us

If you have questions about these Terms, please contact us at support@myprofile247.com, or write to eTech Consulting, [REGISTERED BUSINESS ADDRESS — TO BE COMPLETED], Australia (ABN [ABN / ACN — TO BE COMPLETED]). For privacy and data-rights matters, contact privacy@myprofile247.com as described in our Privacy Policy. You can also reach the Service online at myprofile247.com.