Privacy Policy

1. Information We Collect

Account Information

• Email address (provided during subscription)
• Subscription plan and billing information (processed by our payment provider)
• API key (generated upon subscription)

Usage Data

• Number of verification requests per month
• API request timestamps and response codes
• Claim text submitted for verification

Technical Data

• IP address
• User agent string
• Request headers

2. How We Use Your Data

• Processing verifications: Claim text is processed to generate verification results. This is the core function of the Service.
• Billing and account management: Email and subscription data are used to manage your account and process payments.
• Usage enforcement: We track verification counts to enforce plan limits.
• Service improvement: Aggregate, anonymised usage patterns may be used to improve the Service.
• Support: Account and usage data may be accessed to respond to support requests.

3. Data Retention

• Claim text and results: Stored for up to 90 days after processing, then automatically deleted.
• Proof certificates: Stored for up to 90 days. You should download and retain certificates you need.
• Account data: Retained for the duration of your subscription plus 30 days after cancellation.
• Billing records: Retained as required by applicable tax and accounting law.

4. Data Sharing

We do not sell your personal data.

We may share data with:

• Payment processor: Subscription and billing data is processed by our payment provider (currently Polar).
• Cloud infrastructure: Data is processed on cloud infrastructure. Claim text is transmitted to and processed on our servers.
• Legal compliance: We may disclose data if required by law, court order, or governmental regulation.

We do not share claim text or verification results with any third party for marketing, analytics, or any purpose other than processing your verification request.

5. Security

• All data in transit is encrypted using TLS 1.2+
• API keys are stored securely and hashed
• Proof certificates are signed with ED25519 keys stored in hardware-backed secret management
• Access to production systems is restricted and audited

No system is perfectly secure. We cannot guarantee absolute security, but we implement industry-standard protections.

6. Your Rights

You may request:

• Access: A copy of the personal data we hold about you
• Deletion: Removal of your account and associated data
• Correction: Updates to inaccurate personal data
• Export: Your verification history in a machine-readable format

To exercise any of these rights, email privacy@proofledger.com. We will respond within 30 days.

7. Cookies

The ProofLedger website does not use tracking cookies. The API does not use cookies. We do not use third-party analytics on the marketing website.

8. Children

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email. The effective date at the top of this page indicates the latest revision.

10. Contact

Questions about this Privacy Policy? Email privacy@proofledger.com