Privacy Policy

Who we are

TruthSeal helps people prove the integrity of photos, videos, and documents by generating cryptographic fingerprints, UTC timestamps, and QR verification links.

Contact: info@truthseal.pro

What we collect

• Account data: Google sign-in ID, email, name, and profile image (if provided by Google).
• Seal metadata: File hash (SHA-256), optional content fingerprint, file size & MIME type, UTC timestamp, IP address, and user-agent at the time of sealing/verification.
• Verification logs: Time of check, result (Original / Minor change / Altered / Needs review), IP and user-agent.
• Optional originals: By default we do not store your original files. If you opt-in to storage later, we keep encrypted copies solely to provide the service.
• Cookies: Strictly-necessary session cookies for login and security; no marketing cookies.

Why we collect it (lawful purposes)

• Provide the service: Create and verify seals; maintain chain-of-custody context (legitimate interests / contract performance).
• Security and abuse prevention: Detect misuse, protect users, and maintain service integrity (legitimate interests).
• Compliance: Meet legal obligations and respond to lawful requests (legal obligation).
• Communication: Respond to support and upgrade requests you initiate (consent or legitimate interests).

How we protect your data

• Transport security: HTTPS is enforced; secure, http-only cookies; HSTS recommended via your browser.
• Minimal data design: We store hashes and essential metadata. Originals remain with you unless you opt-in to encrypted storage.
• Access control: Account access via Google OAuth; administrative access is restricted and logged.
• Time integrity: Events use UTC timestamps to align with world clock standards.

Sharing & third parties

• We do not sell personal data.
• Processors: We may use reputable providers to deliver features (e.g., QR image generation/CDN, hosting). They process data under our instructions and cannot use it for their own purposes.
• Legal requests: We may disclose data if required by applicable law or to protect users and the service.

Data location & transfers

Our infrastructure may operate across regions. Where data is transferred across borders, we rely on appropriate safeguards (such as contractual clauses) and limit data to what is necessary to provide the service.

Retention

• Account data: Kept while your account is active and for a reasonable period thereafter to meet legal and operational needs.
• Seal metadata & logs: Kept to preserve verification value. We may aggregate/anonymize older logs.
• Optional stored originals: Retained only while your storage option is active or as required to provide the service.

Your choices & rights

• Access & correction: You can request a copy of your personal data and ask us to correct inaccuracies.
• Deletion: You can request deletion of your account and associated personal data, subject to our need to retain certain records for integrity or legal obligations.
• Objection & restriction: You may object to certain processing or request restriction in specific circumstances.
• Opt-out of storage: Keep originals on your own devices; use TruthSeal only for hashes and verification.
• Contact: Email info@truthseal.pro to exercise your rights. We will verify your identity before fulfilling requests.

Your local privacy rights may vary by jurisdiction. We respond in line with applicable laws.

Children

TruthSeal is intended for use by adults. If you believe a child has provided personal data, contact us and we will take appropriate action.

Changes to this policy

We may update this policy to reflect changes in our service or legal requirements. Significant changes will be noted on this page with a new “Last updated” date.

Contact

Email: info@truthseal.pro

If you have concerns, contact us first so we can help. Where applicable, you may also have the right to contact your local data protection authority.