This Privacy Policy describes how DataSeal.net ("DataSeal", "we"), operated by Codework Labs, Sydney, NSW, Australia, collects, uses, and protects information when you use our services at dataseal.net.
By using the Service you also agree to our Terms of Service, including limitations of liability regarding User Content and use of the platform.
1. Operator
- Operator: Codework Labs
- Service: DataSeal.net (dataseal.net)
- Address: Sydney, NSW, Australia
2. Information we collect
Account data
- Email address and authentication credentials (via Supabase Auth)
- Profile settings (display name, notification preferences)
- Credit balance, transaction history, and plan tier
- Terms acceptance timestamps
Proof records
- Content hashes (SHA-256 fingerprints)
- Titles, descriptions, and optional metadata you provide
- Blockchain transaction IDs and proof status
- Uploaded files or ciphertext (when not using hash-only mode)
- Encryption key hints (first/last characters only — never full keys)
Usage data
- API request logs (hashed IP, user agent, endpoint, status codes) for Developer API users
- Server logs for error diagnosis and security
3. What we do not collect
- Full encryption keys (generated and held by you in the browser)
- Payment card numbers (processed by Stripe when enabled — we receive only Stripe customer IDs)
- Plaintext file contents for hash-only mode
4. How we use information
- Provide timestamping, proof pages, and API services
- Process credit purchases and subscriptions
- Send transactional emails (account verification, proof confirmations, billing)
- Improve service reliability and security
- Enforce our Terms and protect the Service
5. User content and public sharing
When you create a public proof link, selected metadata (title, hash, blockchain details, optional payload) becomes accessible to anyone with the link. This is by design. You control whether downloads are enabled.
You are solely responsible for User Content you upload or share. Codework Labs and dataseal.net do not monitor all User Content, do not endorse it, and—to the maximum extent permitted by law—are not liable for User Content, how others use shared links, or any consequences of publishing or downloading material via the Service. See our Terms of Service.
6. Third-party services
- Supabase — database, authentication, and file storage
- Google — optional sign-in via Google OAuth (when enabled); Google Analytics for site usage measurement
- Stripe — payment processing (when enabled)
- Resend — transactional email delivery (when enabled)
- Blockchain networks — public transaction data anchored on-chain
Each provider has its own privacy policy. We are not responsible for third-party processing outside our instructions, except as required by law.
7. Data retention
We retain account and proof data for as long as your account is active or as needed to provide services. Deleted accounts may have data removed from our database, but blockchain anchors persist independently. API usage logs may be retained for operational and billing purposes. We do not guarantee permanent retention; maintain your own backups.
8. Security
We use industry-standard practices including encrypted connections, row-level security on database tables, and service-role isolation for public proof API routes. No system is perfectly secure. You remain responsible for protecting credentials, keys, and backups. To the maximum extent permitted by law, we are not liable for unauthorised access arising from your acts or omissions, or from circumstances beyond our reasonable control.
9. Your rights
You may access, update, or delete your account data through Settings. Contact us for data export requests. Depending on your jurisdiction, you may have additional rights under applicable privacy laws (including the Australian Privacy Principles where they apply).
10. Cookies
We use essential session cookies for authentication. We do not use third-party advertising trackers.
11. International users
The Service is operated from Australia. If you access it from elsewhere, you consent to processing of information in Australia and in locations where our processors operate.
12. Changes
We may update this policy. Material changes will be posted here with an updated date. Continued use after changes constitutes acceptance where permitted by law.
13. Contact
Privacy questions relating to DataSeal may be directed to Codework Labs, Sydney, NSW, Australia, or through your account dashboard support channels when available.