Privacy Policy

1. Information We Collect

When you create an account, we collect your name, email address, and a hashed password. When you verify files, we process the file content temporarily for analysis and store the resulting cryptographic fingerprints (SHA-256, perceptual hashes), AI analysis scores, and certificate metadata.

When you connect a cryptocurrency wallet (e.g., MetaMask), we may record the public wallet address and transaction hashes associated with your actions (NFT minting, document registration, payments). We never have access to your private keys.

2. How We Use Your Information

We use collected information to: provide verification results, maintain your account and verification history (Dashboard), track free-tier usage credits, send transactional emails (verification completed, welcome emails), process plan upgrades, and respond to support/contact inquiries.

3. AI Processing of Uploaded Content

Uploaded files (or relevant excerpts/images) may be sent to third-party AI providers (such as Anthropic's Claude API) for analysis purposes. This content is processed to generate authenticity scores and is not used by UHRATE to train AI models. Refer to the relevant AI provider's policies for how they handle data sent via API.

4. Blockchain and Public Data

Information you choose to register on a blockchain (document hashes, registry metadata, NFT certificates) becomes permanently public and immutable on that blockchain. This data cannot be deleted or modified by UHRATE once submitted. Do not register sensitive personal information on-chain that you do not want to be publicly visible forever.

5. Decentralized Storage (IPFS)

Certificate data may be uploaded to IPFS (via Pinata) for decentralized storage. Content pinned to IPFS may be accessible by anyone with the corresponding hash and may persist on the network independently of UHRATE.

6. Data Storage and Security

Account and verification data is stored in our database (Supabase) with access controls. While we take reasonable measures to protect your data, no system is completely secure, and we cannot guarantee absolute security.

7. Third-Party Services

We use third-party services including Supabase (database), Anthropic (AI analysis), Resend (email delivery), Pinata (IPFS storage), and public blockchain networks (BNB Smart Chain and others). These providers may process your data according to their own privacy policies.

8. Data Retention

We retain account and verification records for as long as your account is active. Data registered on a blockchain or IPFS cannot be retained or deleted on a fixed schedule, as it is permanent by design once submitted.

9. Your Rights

You may request access to, correction of, or deletion of your account data (excluding immutable on-chain or IPFS records, which cannot be altered) by contacting us through our contact form (uhrate.xyz/contact).

10. Cookies

We use minimal local storage in your browser to keep you logged in and remember preferences. We do not use third-party advertising trackers.

11. Children's Privacy

UHRATE is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact

For privacy-related questions, please use our contact form (uhrate.xyz/contact).