Privacy Policy

Last updated: October 11, 2025

1. Introduction

ProofMark ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, password (encrypted), name
  • Payment Information: Processed securely through Stripe (we do not store credit card details)
  • Content: Images you upload for watermarking
  • Communications: Messages you send to our support team

2.2 Automatically Collected Information

  • Usage Data: Pages visited, features used, time spent, click data
  • Device Information: IP address, browser type, operating system, device identifiers
  • Cookies: Session cookies, authentication tokens, preference settings
  • Log Data: Access times, error logs, performance metrics

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Process watermarking requests and generate forensic proofs
  • Manage your account and subscriptions
  • Process payments through Stripe
  • Send service-related notifications and updates
  • Respond to your support requests
  • Detect and prevent fraud, abuse, and security incidents
  • Analyze usage patterns to improve user experience
  • Comply with legal obligations

4. Data Storage and Security

4.1 Storage: Your data is stored on secure cloud servers with encryption at rest and in transit.

4.2 Image Storage: Uploaded images are stored securely and only accessible by you through your account.

4.3 Forensic Metadata: Forensic proof data is stored separately and used solely for verification purposes.

4.4 Security Measures: We implement industry-standard security measures including encryption, access controls, and regular security audits.

4.5 No Guarantee: While we strive to protect your data, no method of transmission or storage is 100% secure.

5. Data Sharing and Disclosure

We do NOT sell your personal data. We may share information with:

5.1 Service Providers

  • Stripe: Payment processing (subject to Stripe's privacy policy)
  • Cloud Hosting: Infrastructure providers for data storage and computing
  • Analytics: Usage analytics to improve the Service

5.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or to:

  • Enforce our Terms of Service
  • Protect our rights, property, or safety
  • Investigate fraud or security issues
  • Comply with legal processes

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data (subject to retention requirements)
  • Export: Download your watermarked images
  • Opt-Out: Unsubscribe from marketing emails (service emails are required)
  • Cookies: Manage cookie preferences through your browser settings

To exercise these rights, contact us at [email protected]

7. Data Retention

  • Account Data: Retained while your account is active
  • Images: Deleted within 30 days of account cancellation
  • Forensic Proof Records: May be retained longer for verification and legal purposes
  • Payment Records: Retained as required by tax and accounting regulations
  • Logs: Typically retained for 90 days for security and troubleshooting

8. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential Cookies: Required for authentication and security
  • Functional Cookies: Remember your preferences and settings
  • Analytics Cookies: Understand how you use the Service

You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

9. Third-Party Links

The Service may contain links to third-party websites (e.g., reverse image search engines). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information.

10. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately and we will delete it.

11. International Data Transfers

Your information may be processed in countries outside your residence. By using the Service, you consent to the transfer of your data to jurisdictions that may have different data protection laws.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed (we do not sell personal information)
  • Right to request deletion of personal information
  • Right to opt-out of sale (not applicable as we don't sell data)
  • Right to non-discrimination for exercising privacy rights

13. GDPR Compliance (European Users)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

  • Legal basis for processing: Contract performance, legitimate interests, consent
  • Right to lodge a complaint with a supervisory authority
  • Right to data portability
  • Right to restrict processing
  • Right to object to processing

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or prominent notice on the Service. The "Last Updated" date at the top reflects the latest revision.

15. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact us at:

Email: [email protected]