Privacy Policy
Effective [EFFECTIVE DATE]
In short: we keep what's needed to run Proofs Cloud for you, we don't sell it, and we don't use advertising trackers. Verify never receives the files it checks.
Who is responsible
[DURENDAL SYSTEMS LEGAL NAME] ("Durendal Systems", "we") runs Proofs Cloud and is responsible for the personal information described here. Contact: proofsupport@durendalsystems.com.
What we collect
- Account details: your name, email address and sign-in information, through our sign-in provider, Clerk. Team names and who belongs to each team.
- Your content: the packets, files, captions, clients, projects, templates and settings you save to Proofs Cloud.
- Issue records (seals): when you issue a packet, its fingerprint, the time, your user ID and name, the packet's name and its number of exhibits.
- Billing: your plan, subscription status and Stripe customer ID. Card details are handled by Stripe; we never see or store full card numbers.
- Usage and technical data: how much storage and how many packets you use, and the request information our host processes (such as IP address), which is used for security and to limit abuse of Verify.
Kept in your browser
The app keeps a working copy of your packets in your browser (local storage and IndexedDB) so they open quickly and work offline until changes sync. If you connect Google Drive or OneDrive, the sign-in for it stays in your browser and packets are saved to your own drive.
Verify
Verify checks files inside the browser of the person checking them. Only the fingerprint is sent to us. The answer shows when the packet was issued, by whom, its name and its number of exhibits.
How we use it
- To provide the service: saving, syncing, exporting, sealing and verifying packets, and sharing them within your team.
- To bill for paid plans and enforce plan limits.
- To keep the service secure and working, and to answer your questions.
- To send service messages, such as receipts and notices about changes. We don't send marketing email without your permission.
We don't sell your personal information, share it for advertising, or use your content to train AI models.
Who we share it with
- Cloudflare: hosting and storage. Proofs Cloud storage is in North America.
- Clerk: sign-in and account management.
- Stripe: payments and billing.
- Google Fonts: the website and app load fonts from Google, which sees your IP address.
- Your team: people in a team can see the team's packets and its member list.
- Anyone you send an export to: they can look up its issue record on Verify.
- The law: where we're legally required to, or to protect people's safety or our rights.
How long we keep it
- Your content stays until you delete it. Deleted packets are kept for 30 days in case you need them back, then removed.
- When you delete your account or team, its packets, files and settings are removed, and any paid plan is cancelled.
- Issue records are kept after deletion so exports you've already sent can still be verified. The packet's name is removed; the fingerprint, the issue date, the number of exhibits and the account or team name remain.
- Billing records are kept as long as tax and accounting law requires.
Your choices and rights
- Download your work at any time as a backup (Settings → Storage → Back up all).
- Correct your details in your account settings, and delete your account in Settings → General.
- Depending on where you live, you may have rights to access, correct, delete or port your information, or to object to some uses. Email us to use them; we'll reply within 30 days.
Security
Everything travels over HTTPS. Each workspace's files are kept apart, and only signed-in members of that workspace can open them. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.
Children
Proofs Cloud is for professional use and isn't meant for anyone under 18.
Changes
We'll post changes here and update the date above, and tell you in the app or by email about significant ones.