Privacy Policy

Last updated 19 July 2026

Signet Verification LLC ("Signet," "we," "us") builds authentication infrastructure for digital media. This policy explains what personal data we collect, how we use it, and the choices you have. It applies to our website and, once available, the Signet application and related services.

Information we collect

• Account information. Name, email address, and credentials you provide when you create an account or contact us.
• Device and integrity signals. Identifiers used to confirm that a request comes from a genuine, registered device, which is part of how we establish authenticity.
• Media and capture metadata. Media you choose to capture or submit, along with associated technical metadata such as time of capture and, only if you enable it, location. The cryptographic hash of your media is generated on your device. Depending on how you use Signet, we may hold only that hash and its record rather than the media itself. Where we do store your media, we do so because you asked us to, for example to keep it in your library or to support a verification record.
• Validator information. If you take part in the Signet validator network, we collect the information needed to verify your identity, record your validations, and pay you, which may include payout and tax details.
• Usage and diagnostic data. Log data, app performance, and error information used to operate and improve the service.

If you capture or submit media that includes other people, you are responsible for obtaining any consent their inclusion may require.

Biometrics

Signet does not perform facial recognition and does not collect biometric identifiers. We establish that a real person was present through human attestation and device integrity signals, not through biometric analysis of faces or bodies.

Cookies and analytics

Our website uses only the cookies needed for it to function, along with privacy-respecting analytics that help us understand general site usage. We do not use third-party advertising or tracking cookies.

How we use information

• To provide, operate, and improve the service.
• To authenticate users and devices and to establish and verify the authenticity of media.
• To communicate with you about your account, security, and updates.
• To protect against fraud, abuse, and security threats.
• To comply with legal obligations.

We do not use your personal data for advertising. Signet carries no ads and no engagement-based ranking or recommendation algorithms.

How we share information

We do not sell personal data. We share it only as follows:

• Service providers. Vendors who process data on our behalf to run the service, under contracts that require them to protect it and use it only for the services they provide to us. These currently include Google Firebase for authentication and Cloudflare for storage and compute, and, once payments are available, our payment processors.
• Legal and safety. When required by law or to protect the rights, safety, and security of users, the public, or Signet.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.
• With your direction. When you choose to share a verification record or media, for example by publishing a Signet verification page or a QR code that links to one. Anyone with that page or code can view the record, which may include the time of capture and the affirmations attached to it. Sharing this way is public, and you may not be able to make it private again afterward.

Payments

When paid features are available, payments are handled by third-party processors such as Stripe and Apple Pay. Signet does not store full payment card numbers.

Blockchain anchoring

Signet can anchor a cryptographic hash of your media to a public blockchain (Polygon). This is optional and off by default. You turn it on for a specific capture or transaction when you want a record anyone can verify independently, without relying on Signet.

What goes on the blockchain is a hash, a short one-way fingerprint of the file. It is not the media, your name, or the contents of what you captured, and the media cannot be reconstructed from it. The blockchain is public and permanent. Once an anchor is written, it cannot be changed or removed by Signet or anyone else, including in response to a deletion request.

If you do not use anchoring, no part of your record is written to a blockchain.

Data retention

We keep personal data for as long as needed to provide the service and for legitimate business or legal purposes, then delete or anonymize it. If you ask us to delete your data, we remove your account and the data we hold, including any media stored on our systems. The one exception is a hash you chose to anchor to a public blockchain: because that record is public and permanent, we cannot delete or change it. Everything we hold off-chain can be deleted.

Your choices and rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. To make a request, email us at the address below. You can also request deletion of your account and associated data. Deletion covers the data we hold. It does not reach a hash you chose to anchor to a public blockchain, which is permanent once written.

Legal bases for processing

Where this applies, such as for users in the European Economic Area and the United Kingdom, we process personal data to perform our contract with you in providing the service, for our legitimate interests in operating, securing, and improving the service and preventing abuse, with your consent where we ask for it, such as for location or blockchain anchoring, and to meet our legal obligations.

International transfers

We operate in the United States, and our providers may process data there and elsewhere. Where we transfer personal data from the European Economic Area or the United Kingdom, we rely on appropriate safeguards, such as standard contractual clauses.

Security

We use technical and organizational measures designed to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

The service is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, by additional notice.

Contact

Questions or requests: contact@signetverification.com. Signet Verification LLC. A mailing address for written correspondence is available to registered users on request through your account or by emailing us.