Privacy Policy
Draft — align with the Digital Personal Data Protection Act, 2023 and have it reviewed before launch.
1. Who we are
CreatorProof is operated by [Company legal name] (“we”), the data fiduciary for personal data processed through the Service.
2. What we collect
- Account data: name, email, mobile number (optional), password (hashed).
- Profile data you choose to add: photo, headline, country, links.
- Records: titles, categories, descriptions, your stated creation dates, file names, sizes, types and SHA-256 fingerprints, timestamps and audit history.
- Files you choose to keep in your vault, stored encrypted.
- Technical data: IP address and log events used for security and fraud prevention.
- Payment data handled by our payment partner; we do not store card numbers.
3. Why we use it
To provide the Service, verify records, prevent fraud and abuse, handle reports, provide support, process payments and comply with law.
4. What is public
Only the record details you make verifiable and your public profile if you enable it. Original files are never published by the verification service.
5. Third parties
Independent timestamp authorities receive only fingerprints, never your files. We use hosting, storage, email and payment processors under contract.
6. Security
HTTPS everywhere, encryption of stored files with a separate key per file, access controls, rate limiting and tamper-evident audit logs.
7. Retention and erasure
You can delete stored copies of your files at any time and request erasure of your personal data. Fingerprints, timestamps and the audit history are retained in anonymised form because deleting them would compromise the integrity of other users’ records.
8. Your rights
You may access, correct and request erasure of your personal data, withdraw consent and nominate another person, by contacting our Grievance Officer.
9. Contact
[Grievance Officer name], [email], [address].