Privacy Policy

Last updated: February 25, 2026

TrustedIndex ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use our blockchain content-verification platform.

Information We Collect

We collect the following categories of information:

• Account data — your name, email address, and organization name provided at registration.
• Content metadata — article titles, URLs, and cryptographic hashes you submit for verification. We do not store the full text of your content.
• API credentials — hashed API key values and usage timestamps.
• Usage logs — IP addresses, request timestamps, and action types for security and audit purposes.
• Session cookies — a signed, HTTP-only cookie used to maintain your authenticated session.

How We Use Your Information

• To authenticate you and manage your account.
• To register your content hashes on the blockchain and issue verification seals.
• To maintain an immutable audit trail of all registrations.
• To send password-reset emails when requested.
• To detect and prevent abuse or unauthorized access.

Cookies

We use a single session cookie (session) to keep you logged in. This cookie is HTTP-only, same-site, and expires after 7 days of inactivity. We do not use third-party tracking or advertising cookies.

Blockchain Data

Content hashes, publisher identifiers, and timestamps recorded on the blockchain are permanent and publicly visible by design. This is core to the verification guarantee TrustedIndex provides. Do not submit content you do not have the right to register.

Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data in the following limited circumstances:

• With service providers acting on our behalf under confidentiality obligations.
• When required by law, court order, or governmental authority.
• To protect the rights, property, or safety of TrustedIndex or its users.

Data Retention

Account data is retained for as long as your account is active. You may request deletion of your account and associated personal data by contacting us. Note that blockchain records cannot be deleted due to the immutable nature of the ledger.

Security

Passwords are stored using bcrypt hashing. API keys are stored as hashed prefixes. All data in transit is encrypted via TLS. We apply the principle of least privilege to all internal data access.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via your Profile settings.
• Request deletion of your account data.
• Object to or restrict certain types of processing.

Children's Privacy

TrustedIndex is not directed at children under the age of 16. We do not knowingly collect personal data from minors.