Privacy Policy
How we handle your data
1. Overview
ProofChain Pvt. Ltd. ("we", "us", or "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your personal information.
This policy applies to all ProofChain products: ProofScript, ProofBooks, ProofSound, ProofLegal, and ProofVerify.
2. Data We Collect
- Account Information: Name and email address, collected via Firebase Authentication when you create an account.
- Payment Information: Processed securely by Razorpay. We do not store credit card numbers or payment card details on our servers.
- Usage Data: Basic usage patterns to improve our service, such as which features you use and timestamps of your actions.
- Support Communications: Content of emails and support tickets when you contact us.
3. AI Data Processing
When you use ProofIntelligence (AI Analysis), Training Analysis, ProofScript Lab, ProofBooks Lab, or AI Chat, your submitted text is sent to third-party AI providers (Anthropic, OpenAI) via encrypted connection (HTTPS/TLS) for processing.
How your data is handled by AI providers:
- AI providers do not use your content for model training
- API data may be retained for a short safety monitoring window — up to 7 days by Anthropic and up to 30 days by OpenAI — after which it is permanently deleted
- No human at any AI provider reads your content unless flagged for abuse
- Providers do not receive your name, email, or account information — only the submitted text
- For timestamping, only the SHA-256 hash is transmitted — your file stays on your device. For AI analysis, your file is uploaded to Cloud Storage for text extraction and processing. Both the original file and extracted text are deleted immediately after analysis is complete. Only the analysis results are stored in your account
Analysis results (scores, Cinema DNA, insights), Training Analysis results, viral tool results (roast text, cast suggestions, predictions, DNA matches, OTT scores), and AI Chat conversation history are stored in our Firestore database and associated with your account.
4. Public Data
Certain data you create on ProofChain is publicly visible:
- Viral tool results shared via generated links are viewable by anyone with the link
- Analysis showcase cards (if you opt to share them) are publicly visible on the showcase page
- Public writer profiles display your name, portfolio of protected works, AI analysis scores, and protection history
- Leaderboard rankings (based on analysis scores) are publicly visible
- Marketplace listings show your work's metadata (title, genre, language, AI scores) to logged-in users
You can control your profile visibility and marketplace listing status through your account settings. Shared viral tool result links cannot be revoked once generated.
5. Marketplace Data
When you list a protected work on the marketplace:
- Work metadata (title, genre, language, budget tier, AI analysis scores) is visible to all logged-in users
- For timestamping, only the hash is stored — your file stays on your device. For AI analysis, the file is processed on our servers but not retained after analysis
- Industry professionals may request time-limited read access; you approve or decline each request
- Read access requests and their status are logged for both parties
6. Competition & Gig Data
When you participate in competitions or gigs:
- Your submission metadata (title, genre, protected work reference) is visible to competition organizers and gig posters
- AI analysis scores may be shared with organizers as part of competition evaluation
- Winner announcements may include your display name and submission title
- Gig proposals and communications are stored and visible to both parties
7. Referral Data
When you use our referral program, we store your referral code, the accounts referred by you, and reward status. Referred users can see the name of the person who referred them. Referral earnings and redemption history are visible only to you.
8. Data We Do NOT Collect
Privacy is fundamental to our service. Here is what we explicitly do not collect:
- Your files (timestamping): For timestamp protection, files are hashed locally on your device using SHA-256. Only the hash — a 64-character string — is transmitted. We never see or store your actual file. Note: For AI analysis (a separate opt-in service), your file is uploaded for processing — see Section 3 (AI Data Processing) for details.
- Third-party analytics: We do not use Google Analytics, Facebook Pixel, or any third-party tracking tools.
- Location data: We do not collect precise geolocation information.
- Device identifiers: We do not track device fingerprints or advertising identifiers.
9. Third-Party Services
We use the following third-party services to operate ProofChain:
- Firebase (Google): Authentication, database, and hosting. Subject to Google's Privacy Policy.
- Razorpay: Payment processing. Subject to Razorpay's Privacy Policy.
- Anthropic (Claude): AI analysis and scoring. Your submitted text is sent for processing. Not used for model training. May be retained up to 7 days for safety monitoring per Anthropic's Privacy Policy.
- OpenAI: AI chat and supplementary analysis. Your submitted text is sent for processing. Not used for model training. May be retained up to 30 days for safety monitoring per OpenAI's Privacy Policy.
- OpenTimestamps: Blockchain timestamping protocol. Only cryptographic hashes are submitted to the Bitcoin blockchain. No personal data is ever stored on the blockchain.
10. How We Use Your Data
- To provide and maintain our timestamp verification services
- To process payments and manage subscriptions
- To communicate service updates and respond to support requests
- To comply with legal obligations
We do NOT sell, rent, or share your personal data with third parties for marketing purposes.
11. Data Retention
- Account data is retained while your account is active.
- Blockchain timestamps are permanent and cannot be deleted. This is by design — the immutability of your timestamp is the core value of our service.
- You may delete your account at any time from your account settings. Upon deletion, all analysis results, AI chat history, and associated personal data are permanently removed. Blockchain timestamps cannot be deleted.
- Analysis deletion — when you delete an analysis, the entire result is permanently removed from our database. Only a minimal audit log entry is retained (recording that a deletion occurred, with the analysis ID, tier, and timestamp — no analysis content).
- System logs are retained for up to 90 days for debugging and security purposes.
12. Cookies
We use only essential cookies required for Firebase Authentication to keep you signed in securely.
No advertising, tracking, or third-party cookies are used across any ProofChain product.
13. Your Rights
You have the following rights regarding your personal data:
- Access: You can request a copy of the personal data we hold about you.
- Correction: You can update your profile information at any time through your account settings.
- Deletion: You can request deletion of your account and personal data by contacting us.
- Portability: You can request your data in a portable format.
To exercise any of these rights, email support@proofchain.in.
14. Digital Personal Data Protection Act, 2023
ProofChain is committed to complying with the Digital Personal Data Protection Act, 2023 (DPDP Act). We process personal data only for lawful purposes and with your consent.
We implement reasonable security safeguards to protect your data as required under the Act. Details of our Data Protection Officer will be published as DPDP Act implementation rules are finalized by the Government of India.
15. Children's Privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.
If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.
16. Security
- All data is encrypted in transit using HTTPS/TLS
- Firestore data is encrypted at rest by Google Cloud
- Firebase Authentication provides secure access control
- For timestamping, files are processed locally on your device and only the hash is transmitted. For AI analysis, files are uploaded via encrypted connection for processing and are not retained after analysis
- All account data and analysis results are stored in Google Cloud's Mumbai (asia-south1) region. For AI analysis, submitted text is processed by Anthropic and OpenAI servers outside India and is subject to their respective retention policies
- Regular security reviews and updates are performed
17. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email to registered users. The "Last Updated" date at the top of this page will be revised accordingly.
Privacy concerns? Contact us at support@proofchain.in. Grievance Officer: Aravinth Raj SC — aravinthrajsc@proofchain.in. Visit our Grievance Officer page for formal complaints.