Privacy Policy

Effective date: April 2, 2026

This Privacy Policy describes how Fulcrum Enterprises LLC ("we," "us," or "our") collects, uses, and protects your information when you use ProofAnchor ("the Service").

1. Information We Collect

Information you provide

• Email address — used for account creation, authentication (login codes), and transactional emails (proof confirmations, billing receipts)
• Display name — optional, used only within the Service
• Payment information — processed entirely by Stripe. We do not store credit card numbers, bank account details, or other payment credentials on our servers.

Information we generate

• Cryptographic hashes (SHA-256) — computed from files you choose to anchor. These are one-way hashes; the original file cannot be reconstructed from the hash.
• Blockchain transaction records — hash, timestamp, transaction ID, and block number on the Polygon blockchain. These are public and permanent by design.
• Proof metadata — filename, title (if provided), proof status, and timestamps stored in our database to power your dashboard and public verify pages.

Information we do NOT collect

• Your files — files are hashed in your browser and never uploaded to our servers. We never see, store, or process your actual file content.

2. How We Use Your Information

• To provide and operate the Service
• To send login codes and transactional emails
• To process payments and manage subscriptions via Stripe
• To display proof information on your dashboard and public verify pages
• To respond to support inquiries

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services:

• Stripe— payment processing. Stripe's privacy policy governs how they handle your payment data.
• Brevo — transactional email delivery (login codes, proof confirmations). Only your email address and message content are shared with Brevo for delivery.
• Polygon blockchain — proof hashes and timestamps are written to a public blockchain. This data is permanent and publicly accessible by design.
• Cloudflare — DNS and CDN. Cloudflare may process request metadata (IP addresses, headers) as part of its standard operation.

4. Data Retention

• Account data — retained as long as your account is active. If you request account deletion, we will delete your account data from our database.
• Blockchain records — permanent and immutable. These cannot be deleted by anyone, including us. This is a core feature of the Service, not a limitation.
• Proof metadata — retained in our database to power verify pages. If you delete your account, metadata may be retained for existing public proof URLs.

5. Security

We use industry-standard security practices to protect your data, including encrypted connections (HTTPS/TLS), secure authentication (passwordless email codes), and restricted server access. No system is 100% secure, but we take reasonable measures to protect your information.

6. Your Rights

You may:

• Access the information we hold about you via your Settings page
• Update your display name at any time
• Delete your account via the Settings page, which removes all account data from our database

Note that blockchain records are permanent and cannot be deleted, even upon account deletion. Hash values on the blockchain cannot be used to reconstruct your files or identify you personally.

California Residents (CCPA)

We do not sell, share, or rent your personal information to third parties for monetary or other valuable consideration. We do not use your personal information for cross-context behavioral advertising. Because we do not sell or share personal information, no "Do Not Sell or Share" opt-out mechanism is required, though you may contact us at any time to exercise your rights under the California Consumer Privacy Act.

European Union Residents (GDPR)

If you are located in the European Union, you have rights under the General Data Protection Regulation including the right to access, rectification, erasure, and data portability. You may exercise these rights by contacting us at [email protected].

Important: Blockchain records are immutable by design. When you anchor a proof, the cryptographic hash and timestamp are permanently recorded on the Polygon blockchain and cannot be modified or deleted by anyone, including us. By using the Service, you consent to this permanent recording. This is a fundamental feature of the Service and is necessary for its operation. The hash value alone cannot identify you or reconstruct your file content.

7. Cookies

ProofAnchor uses a single session cookie for authentication. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

8. Children

ProofAnchor is not intended for use by anyone under the age of 18. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service.

10. Contact

Questions about this Privacy Policy? Contact us at [email protected].