Privacy Policy

Last Updated: February 2026

Note: DocuChain is currently operating as an early-stage beta project. We are not yet a registered corporate entity. The following principles guide our data practices but do not constitute a legally binding agreement at this time.

1. Data Minimization

DocuChain is designed to operate on a zero-knowledge basis for document contents. We do not store, view, or process the actual contents of your sensitive documents. We only generate and store cryptographic hashes (SHA-256) of your files.

2. Public Ledger

When a document is anchored to the DocuChain ledger, its cryptographic hash and associated metadata (Issuer Name, Holder Name, Credential ID) become part of a permanent, immutable public record necessary for verification. This data cannot be deleted or forged.

3. Personal Information

We collect minimal personal information such as names and optionally, a profile picture (which is securely stored on our servers and uniquely referenced by its hash). We will never sell, lease, or distribute your email or personal information to third parties.

4. Security Practices

We use industry-standard security measures, including bcrypt for password hashing and secure session tokens, to protect user accounts.

For data-related inquiries, please contact the development team directly.