Acceptable Use Policy

This policy applies to everyone, individuals and organisations, who uses Jobchain ID: the app, the web version, the business dashboard and the API. It forms part of the General Terms of Use and the Business Terms.

Identity and impersonation

• passing yourself off as another person or organisation, or implying that you act on someone's behalf without being authorised;
• verifying a document that is not yours, or one that is forged or tampered with, or using photos, videos, masks or any other means to fool the liveness check;
• creating several verified identities with the same document, or selling, renting or lending your identity, your credentials or your seat;
• registering an organisation with a name that imitates that of another, a third-party trademark, a public body or a financial institution.

Fraud and deception

• phishing: asking for data, keys, recovery phrases, codes or payments by passing yourself off as someone else or by deception;
• scams, pyramid schemes, fraudulent investment schemes or misleading promises of returns;
• issuing credentials that are false or do not reflect reality, or failing to revoke them when they stop being true;
• asking people for more data than you need or using it for something other than what you told them.

Illegal activities

• laundering money, financing terrorism or evading international sanctions;
• selling or promoting illegal goods or services;
• any child sexual abuse material, which we always report to the authorities;
• content that incites hatred or violence, harasses or threatens other people, or reveals their data without permission;
• infringing third parties' intellectual or industrial property rights.

Spam and abuse of channels

• sending unsolicited messages, data requests or documents in bulk or to people who have no relationship with you;
• automating sends to get around the limits of the service.

Security of the service

• attacking, overloading, scanning or testing the security of the service without our written permission;
• modifying the app, bypassing device attestation or tampering with the verification process;
• accessing other people's accounts, data or keys;
• using the API or the dashboard to build a database of people or to resell the service.

If you find a vulnerability, tell us at soporte@jobchain.com before making it public.

• Without a verified domain, an organisation can only act towards its own members. It cannot send messages, request data, verify, issue credentials or request signatures from other people.
• The verified domain is always shown next to the organisation's name. It cannot be hidden or replaced by another.
• Similar names and protected trademarks go through manual review before receiving the verified mark. We may ask for evidence (trademark registration, powers of attorney) and refuse or change the displayed name.
• Each person acting on behalf of the organisation does so with their own verified identity and their own seat.

Plans and tiers have limits and allowances so that the service works well for everyone. You may not get around them (for example, by opening several accounts to multiply a free allowance). We may temporarily limit a use that endangers the stability of the service, letting you know.

• Use the "Report" option wherever the app or the website offers it, or write to soporte@jobchain.com with the subject "Report".
• Tell us what is happening, where it is (for example, the organisation's name and domain or the link to the document), why you think it is unlawful or abusive and, if you wish, your name and email so we can reply. If you are reporting an infringement of your rights, say which ones.
• We will confirm that we have received it and tell you what we decide. We handle reports diligently and without arbitrariness; impersonation reports, with priority.
• Please note that we cannot read end-to-end encrypted messages: to report a message, send us a screenshot or the content you want to share with us.
• Point of contact (articles 11 and 12 of Regulation (EU) 2022/2065, the Digital Services Act): authorities and users can contact us at soporte@jobchain.com, in Spanish or English.

Depending on the seriousness, we may:

• warn and ask for it to be corrected;
• remove or block content, a displayed name or a credential;
• withdraw an organisation's verified mark;
• restrict features, suspend or close the account;
• keep the evidence and report the facts to the authorities when the law requires it or there is a risk to people.

In case of impersonation or phishing, we suspend the account immediately and without prior notice, and we may warn the people who received its messages. In other cases, except in urgent situations or where the law prohibits it, we warn beforehand and explain why.

Whenever we restrict or remove something, we will tell you what decision we have taken, why (the facts and the rule or clause applied) and whether the decision was automated.

If you disagree with a decision of ours (or with the one we took on a report of yours), you can ask us to review it by writing to soporte@jobchain.com within the following 6 months. It will be reviewed by a person other than the one who took the decision and we will give you a reasoned answer. You may also go to the courts or to the out-of-court dispute settlement bodies that apply.

We will publish each version of this policy here with its number and date, and give at least 30 days' notice of important changes, unless they are due to a change in the law or a security risk.