Privacy Policy

Effective date: August 27, 2026

1. What we collect

• Your email address and what you send us, when you contact us, hold an account, or have a commercial agreement with us.
• Billing details, when a paid agreement exists, handled by our payment processor. We do not store card numbers.
• Service logs: timestamps, request data, and IP addresses, used for security, rate limiting, abuse prevention, and diagnosing failures.
• Protocol records: file fingerprints (SHA-256 digests), positions, signatures, anchors, and related proof metadata.

2. What we do not collect

File contents are not part of recording. Files are fingerprinted on your machine, and recording sends only the fingerprint and the protocol metadata a proof needs. A SHA-256 fingerprint does not contain the file and cannot by itself be used to reconstruct arbitrary file contents. We do not collect file names unless you supply one yourself.

3. How we use it

To operate, secure, and maintain the service, to diagnose failures, to administer accounts and billing, to prevent fraud and abuse, to enforce our terms, to respond when you contact us, and to comply with applicable law. We do not sell personal data, and we do not use service data for advertising.

4. Third parties

• Amazon Web Services, for infrastructure, in a US region.
• Railway, for the anchoring service.
• Cloudflare, for network routing to the recording environment.
• Vercel, for hosting this site.
• Resend, for delivering contact form messages.
• Google Workspace, for email.
• Adobe Fonts, for the site's typeface, loaded by your browser.
• A payment processor, for billing under paid agreements.

This site runs no analytics scripts and sets no non-essential cookies.

5. Retention

Ordinary service data (email, billing, support messages, and logs) is kept only as long as the purposes above need it. Protocol records may be retained indefinitely: they form part of BitGraph's append-only verification history, and later records are computed over the history that includes them.

6. Your rights

Depending on where you live, applicable law may give you rights to access, correct, or delete personal information we hold about you. Send requests to mike@bitgraph.ing and we will handle them as applicable law requires. These requests can reach ordinary service data. Protocol records are append-only, so a fingerprint already committed to the chain may not be technically removable without altering the history that later records are computed over.

7. Children

The service is not directed at anyone under 13, or under 16 where local law sets that age. We do not knowingly collect data from children.

8. Changes and contact

If this policy changes materially we will give prominent notice on this site, and notice by email where we have an address for you. Questions: mike@bitgraph.ing.