Privacy Policy

This Privacy Policy explains what personal data Dokaz collects, how we use it, and the rights you have. It covers the Dokaz application and website.

1. Data we collect

Account data — names, email addresses, and organisation details for you and the users you invite. Service data — the database targets you register, drill results, signed evidence, webhook delivery records, and an append-only audit log. Billing data — a billing contact and subscription status; card details are handled by Stripe and never reach our servers. Technical data — IP address, user agent, and request logs, used for security and diagnostics.

2. Customer database content

The database dumps you register may contain personal data. We process that content only to perform the verification you request: each drill restores the dump into a temporary database that is dropped when the drill finishes. Backup files you sync to us for drilling stay on our infrastructure until you ask us to remove them or close your account. For this content we act as a processor on your behalf — see our Data Processing Addendum.

3. How we use data

We use personal data to provide and secure the Service, authenticate users, process billing, send transactional email (verification, invitations, drill notifications), prevent abuse, meet legal obligations, and improve the product. We do not sell personal data and we do not use it for advertising.

4. Legal bases

Where the GDPR applies, we rely on: performance of a contract (to provide the Service), legitimate interests (security, abuse prevention, product improvement), legal obligation (tax and accounting records), and consent where specifically requested.

5. Sharing and sub-processors

We share data only with the sub-processors needed to run the Service — listed on our Sub-processors page — and where required by law. We do not otherwise disclose personal data to third parties.

6. International transfers

Where personal data is transferred outside its country of origin, we rely on appropriate safeguards such as the Standard Contractual Clauses with our sub-processors.

7. Retention

Drill evidence and audit logs are retained for seven years to meet auditor requirements. Login-attempt records are kept for 30 days. The temporary database or restore sandbox a drill uses is destroyed when the drill finishes; a backup the sandbox downloads from a bucket you connect exists only inside it. Backups you push to us are deleted once their drill finishes, or after the retention you choose (at most 7 days); unfinished uploads are removed after 24 hours. Backup files set up with you during early access are kept until you ask us to remove them or close your account. Account and user records are retained while your account is active and deleted after closure as described below.

Every signed report is also recorded in our public, append-only transparency log at /log so anyone can check it existed at a given time. A log entry holds only hashes, the signing key fingerprint and the signing time: no name, email, account, database or drill identifier. Because the log is append-only, entries are kept permanently, including after account closure; on their own they cannot be linked back to you.

8. Security

Passwords are hashed with Argon2id, sessions are protected with secure cookies and CSRF defences, evidence is encrypted at rest with per-account keys, and each drill restores into a temporary database that is dropped afterwards. Access to production data is restricted and audited.

9. Your rights

Depending on your location you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can export everything we hold for your account as JSON from Account → Export, and close your account from Account → Danger zone. Closure is a soft delete followed by a permanent hard delete after a 30-day grace period, which crypto-shreds your evidence encryption keys. To exercise any other right, contact us.

10. Cookies

The application sets only strictly-necessary cookies — see our Cookie Policy.

11. Changes

We may update this Policy; material changes will be notified by email or in the application before they take effect.

12. Contact

Privacy questions or requests: privacy@dokaz.net.