agwitness

Privacy Policy

Your data, your control. How we collect, use, and protect your information.

Data sovereignty

You stay the owner of your deeds. We are custodians and processors— not a marketplace for your negotiation data.

Below: what we collect, why, how long we keep it, and the rights you can exercise. Nothing here replaces legal advice; it is written to be clear for operators and counsel alike.

Rights at a glance

High-level reference—see sections below for full detail and legal context.

Access & correct

30 days

Typical response for privacy requests

Export

Vault

PDF, JSON, and tiered batch options

Deletion

Account

Flows aligned with GDPR-style erasure

No ads profile

None

We do not sell deeds for marketing

What we collect

We store deeds you notarize—including agent logs, parties, terms, and your signature. This data is essential to provide the notary service and maintain the audit trail.

We do not sell or share this data with third parties for marketing. Your deeds belong to you. We act as the custodian and notary, not the owner.

We collect minimal account information (email, name) for authentication and support. We use analytics (e.g. page views, API usage) to improve the product—no tracking of individual deed content.

How we use it

Deeds are used solely to provide the notary service: generating PDFs, maintaining the audit trail, enabling verification, and supporting Cold Storage exports.

We never train AI models on your data. We do not use deed content for advertising or any purpose other than delivering the service you requested.

Aggregate, anonymized metrics (e.g. total deeds notarized, API latency) may be used for capacity planning and product improvements.

Data retention

You retain ownership of your deeds. Export your vault at any time in PDF or JSON format. Cold Storage exports send physical-grade archives to your personal cloud or email on a schedule you choose.

We retain deeds as required for legal and audit purposes unless you request deletion. Deleted deeds are removed from active storage within 30 days; backups may retain data for up to 90 days before purging.

If you close your account, we will provide a final export and then delete your data within 60 days, except where retention is required by law.

Security

Deeds are encrypted at rest (AES-256) and in transit (TLS 1.3). Access is restricted to authenticated users and our operational systems. We follow industry best practices for key management.

We undergo regular security reviews. For vulnerability reports, see our Bug Bounty program. We will notify affected users in the event of a data breach.

Cookies (GDPR / ePrivacy)

We use essential cookies to provide the service: a session cookie (__session) for authentication after you sign in, and agwitness_owner to associate checkout flows with your account. These cookies are strictly necessary and do not require consent under GDPR.

We do not use analytics, marketing, or tracking cookies. If we introduce non-essential cookies in the future, we will ask for your consent first and allow you to change your preference at any time via the cookie banner or Privacy page.

You can clear session cookies by signing out. Your consent preference (stored in localStorage) can be updated by managing cookie settings when the banner is shown.

Your rights

You have the right to access, correct, export, and delete your data. Contact privacy@agwitness.com for requests. We respond within 30 days.

We comply with GDPR (EU) and CCPA (California) where applicable. EU users can lodge complaints with their local data protection authority.

Contact

Questions about privacy? Contact privacy@agwitness.com. Our Data Protection Officer can be reached at the same address for formal inquiries.

Security & vulnerability disclosure

For how we protect sessions, APIs, and infrastructure—not only privacy—see our security overview.

Security protocol

privacy@agwitness.com