Privacy Policy

This Privacy Policy explains how CustodyTrack ("CustodyTrack," "we," "us"), a service owned and operated by Lexeprint Inc., collects, uses, and safeguards information when you use our website and application (the "Service").

CustodyTrack is designed to minimize the sensitive data we hold. For chain of custody records, we store cryptographic hash values and limited metadata needed to authenticate and verify records — not the full contents of your forms where avoidable.

Account information: your name, email address, organization, and authentication details managed by our identity provider.

Form and custody data: the chain of custody information you enter, the custody events you generate, and the hash values computed from them.

Transfer information: the names, email addresses, organizations, and signatures of parties involved in a custody transfer.

Payment information: processed by our payment processor, Stripe. We do not store full card numbers.

Usage and device data: standard log information such as IP address, browser type, and pages accessed, used to operate and secure the Service.

To provide the Service, including creating, transferring, and verifying records; to process payments; to send transactional email (such as transfer links and receipts); to secure and monitor the Service; to provide support; and to comply with legal obligations.

Public verification and audit responses are intentionally limited to integrity metadata (whether a record exists, when it was created, how many custody events it has, and whether its seal is intact). They do not expose your evidence contents or party details.

We use trusted third parties to operate the Service, including Supabase (database and authentication), Vercel (hosting), Stripe (payments), and Resend (email delivery). These providers process data on our behalf under their respective terms.

Custody records and their event history are retained to preserve evidentiary integrity, even after an account is closed. Because these records are append-only by design, they cannot be altered or selectively deleted without breaking verification. Account and billing records are retained as required for legal and accounting purposes.

We use industry-standard measures including encryption in transit, row-level access controls, hashed transfer tokens, and append-only records enforced at the database level. No system is perfectly secure, but our architecture is designed so that tampering is detectable.

You can access and update your account information in Settings and request deletion of your account at any time. Note that append-only custody records are retained for evidentiary integrity as described above and cannot be selectively deleted without breaking verification.

Depending on where you live, you may have rights to: access the personal information we hold about you; correct inaccurate information; request deletion; obtain a portable copy; and object to or restrict certain processing. Residents of California and similar jurisdictions may also request disclosure of the categories of personal information collected and the purposes for which it is used.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. To exercise any of these rights, contact us using the details in the Contact section; we will respond consistent with applicable law and may need to verify your identity first. You will not be discriminated against for exercising your rights.

We and our service providers operate in the United States, and information you provide may be processed there. Where required, we rely on appropriate safeguards for international transfers of personal information.

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.

Questions about this policy, or requests to exercise your privacy rights, can be directed to info@custodytrack.io or by mail to:

Lexeprint Inc., 2100 Park Ave, PO Box 681057, Park City, UT 84098, United States.