Privacy

Verification records are built to be unlinkable to a person. IP addresses are stored only as salted hashes, first 24 bits masked for velocity counting, and are never written to logs in plaintext. Behaviour is summarised into numeric aggregates at the client before it is sent.

Records are retained for the window you configure, 7 to 90 days, and are purged by the worker on a schedule. Account data (email, name, organisation) is retained while the account exists.

No third-party scripts are loaded by the widget, and no data is shared with advertising networks. Payment processing is handled by our payment provider, which receives only what a checkout session requires.

Export or deletion requests can be made from the workspace settings or by writing to [email protected].