Privacy Policy

1. Introduction

This Privacy Policy explains how Popsall Ltd ("we", "us", or "our") collects, uses, and protects your personal data when you use RedactProof ("the Service").

Data Controller:
Popsall Ltd
Company Number: 16306252
71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Email: privacy@redactproof.com

2. Our Privacy-First Approach

RedactProof is designed with privacy at its core. Unlike traditional document processing services, we use client-side processing - your documents are never uploaded to our servers.

3. Data We Collect

3.1 Account Information

When you create an account, we collect:

• Email address: For account authentication and communication
• Account preferences: Settings you configure in the Service
• Subscription information: Plan type, billing period, payment status

3.2 Verification Data

When you create verification certificates, we store:

• Document hashes: Cryptographic fingerprints (SHA-256) of your documents - these cannot be reversed to reveal document content
• Certificate metadata: Timestamp, entity counts, certificate ID
• Attribution: Your email or reference ID (depending on your settings)

3.3 Usage Data

We collect anonymous usage statistics to improve the Service:

• Feature usage patterns
• Error reports
• Performance metrics

4. How We Use Your Data

We process your personal data for the following purposes:

• Providing the Service
• Processing payments
• Sending transactional emails
• Fraud prevention
• Service improvements
• Marketing communications (opt-in only)
• Legal compliance

5. Data Sharing

We share your data only with:

• Stripe: Payment processing (see Stripe Privacy Policy)
• Resend: Transactional email delivery
• Cloudflare: Infrastructure and security

We do not sell your personal data. We do not share your data for advertising purposes.

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Receive your data in a machine-readable format
• Withdraw consent: Withdraw marketing consent at any time

To exercise these rights, contact us at privacy@redactproof.com. We will respond within 30 days.

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your rights

We do not sell your personal information. To exercise your CCPA rights, contact us at privacy@redactproof.com.

8. Cookies and Tracking

We use minimal cookies:

• Essential cookies: Session management, authentication (required)
• Preference cookies: Your settings and preferences

We do not use advertising cookies or third-party tracking pixels.

9. Security Measures

We protect your data through:

• TLS encryption for all data in transit
• Encryption at rest for stored data
• Access controls and authentication
• Regular security reviews
• Client-side processing (documents never leave your device)

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights:

Email: privacy@redactproof.com
Post: Data Protection, Popsall Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom