Privacy Policy

1. Information We Collect

1.1 Document Information

• Document Hash: A SHA-256 cryptographic hash of your document (NOT the document itself)
• File Metadata: File name, file size, and timestamp
• Payment Information: Processed securely through Stripe (we don't store credit card details)

1.2 Optional Account Information (OAuth Login)

• Profile Data: Name, email address, and profile picture from Google/Facebook
• Authentication Tokens: Secure session tokens for logged-in users
• Usage History: Your timestamp history for dashboard functionality

1.3 Technical Information

• Browser Data: IP address, browser type, and device information
• Usage Analytics: How you interact with our service (anonymized)

2. How We Protect Your Privacy

2.1 Document Security

• Documents remain on your device at all times
• Only SHA-256 hashes are transmitted to our servers
• Hashes cannot be reversed to recreate original documents
• Blockchain storage contains only the hash and timestamp

2.2 Data Encryption

• All data transmission uses HTTPS/TLS encryption
• Database connections are encrypted
• Session tokens are securely generated and stored

3. How We Use Your Information

3.1 Core Service

• Recording document hashes on the Polygon blockchain
• Processing payments through Stripe
• Sending confirmation emails with verification details
• Providing proof of document existence and timestamp

3.2 Optional Features (Logged-in Users)

• Displaying your timestamp history in the dashboard
• Personalizing your user experience
• Providing customer support

4. Information Sharing

4.1 Third-Party Services

• Stripe: Payment processing (they have their own privacy policy)
• Google/Facebook: OAuth authentication (optional, you control what data is shared)
• Polygon Blockchain: Document hashes are publicly recorded (anonymous)

4.2 We Never Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Your Rights and Choices

5.1 Account Control

• Anonymous Use: You can use our service without creating an account
• Account Deletion: Request deletion of your account and associated data
• Data Export: Request a copy of your stored data

5.2 Cookie Preferences

• Essential cookies for service functionality
• Optional analytics cookies (you can opt-out)
• Session cookies for logged-in users

6. Data Retention

6.1 Blockchain Data

Document hashes recorded on the Polygon blockchain are permanent and immutable by design. This ensures the integrity and permanence of your timestamp proof.

6.2 Account Data

• User account data is retained while your account is active
• Payment records are retained as required by law (typically 7 years)
• You can request account deletion at any time

7. International Transfers

Our service operates globally. Your data may be processed in countries other than your own, but always with appropriate safeguards and in compliance with applicable data protection laws.

8. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to Privacy Policy

We may update this privacy policy from time to time. We will notify users of significant changes via email or prominently on our website.

11. Legal Basis (GDPR)

For users in the European Union, we process your data based on:

• Legitimate Interest: Providing our core timestamping service
• Contract: Fulfilling our service agreement with you
• Consent: Optional features like analytics and marketing (you can withdraw consent)

� Back to EternalKeep