Privacy Policy

1. Information We Collect

We collect information you provide directly when you create an account, use our services, or contact us. This includes your name, email address, organization name, and billing information.

When you upload content for verification, we store it securely so you can access your verification history and reports. You can delete your uploaded content at any time from your dashboard.

We automatically collect certain technical information when you use our platform, including IP address, browser type, and operating system. We use this information to help operate and maintain our services and to detect and prevent unusual or unauthorized activity on your account.

2. How We Use Your Information

We use your information to provide and improve our verification services, process payments, send account-related communications, and comply with legal obligations. We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

Your content is stored securely and you can delete it at any time from your dashboard.

3. Data Security

We take the security of your data seriously. Our platform is hosted on DigitalOcean cloud infrastructure, and verification processing occurs in isolated environments.

We use encryption for data in transit and at rest, and we conduct regular security reviews and maintain monitoring across our infrastructure. While no system can guarantee absolute security, we are committed to protecting your information using current best practices.

4. Data Retention

Uploaded content and verification reports are retained by default so you can access your verification history. You may delete individual items or your entire account at any time from your dashboard, and deletion is permanent.

Account information is retained for the duration of your account and for a limited period afterward as needed to comply with legal, tax, and accounting obligations.

5. Payment Information

We use Paddle.com to process payments. Paddle is the Merchant of Record for all orders placed through AuthProof. Payment card data is collected and stored directly by Paddle in accordance with PCI-DSS standards — we do not store your full card number, expiration date, or CVV.

We retain only the last four digits of your card number and the card brand for identification purposes, along with your plan, billing contact details, and invoice history. Paddle's use of your information is governed by Paddle's Privacy Policy (https://www.paddle.com/legal/privacy).

6. Your Privacy Rights

You have the right to access, correct, or delete your personal information at any time. You can delete your uploaded content directly from your dashboard. For any other request relating to your account, including account closure or full data deletion, please contact us and we will assist you.

If you are located in the European Economic Area or United Kingdom, we process your personal information on the basis of contractual necessity (to provide our services), legitimate interest (to operate and secure our platform), and consent (where applicable, such as certain cookies). You have additional rights under the GDPR or UK GDPR, including data portability, the right to object to or restrict processing, and the right to lodge a complaint with your local data protection supervisory authority.

Where we transfer personal information outside the EEA or UK, including to service providers in the United States, we rely on Standard Contractual Clauses or another lawful transfer mechanism to protect your information.

AuthProof may run optional duplicate-registration lookups. Any resulting advisories are informational only. Cryptographic integrity proof remains the primary evidentiary output.

To exercise any of these rights, contact us at [email protected].

7. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the right to know what personal information we collect, use, and disclose; the right to delete your personal information; the right to correct inaccurate personal information; and the right to non-discrimination for exercising these rights.

In the preceding 12 months, we have collected the categories of personal information described in Section 1 (identifiers, commercial information, and internet or network activity information). We do not sell personal information. We use limited analytics cookies as described in Section 8, and we do not use this data for cross-context behavioral advertising.

To exercise your California privacy rights, contact us at [email protected]. Residents of other states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, and Utah, may contact us at the same address to exercise similar rights available under those laws.

8. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We use analytics cookies to understand how our platform is used and to improve the user experience. You can manage your cookie preferences at any time. See our Cookie Policy for complete details.

9. Third-Party Service Providers

We work with a limited number of third-party service providers to operate our platform, including Paddle for payment processing (as Merchant of Record) and DigitalOcean for cloud infrastructure. Each provider is contractually required to protect your data and is bound by applicable privacy regulations.

We do not share your personal information with third parties for their own marketing purposes.

10. Children's Privacy

AuthProof is a business platform intended for organizations and adults who create accounts on behalf of their teams. We do not market to children, do not offer a separate product for minors, and do not knowingly collect personal information from anyone under 16. If you believe a minor has submitted personal information through our services, contact [email protected] and we will take appropriate steps to delete it. We may introduce additional age-related controls if we expand into consumer-facing workflows in the future.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via email or through a notice on our platform prior to the changes taking effect. Continued use of our services after the effective date of any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at [email protected].