Privacy Policy

This Privacy Policy describes how 8th Floor Retail Inc. ("we", "us") processes personal information when you use Audifact at https://audifact.io.

For account, billing, and site operations, we act as a data controller. For event payloads you submit about your applications and end users, you are typically the controller and we act as a processor on your instructions. Enterprise customers may request a Data Processing Agreement (DPA) at support@audifact.io.

Effective date: 15 July 2026.

This policy applies to the website, dashboard, API, Explorer, and related support channels. It does not cover third-party sites you link to from our Service.

• Account data: email address, name, optional organization name, password (stored in hashed form), and account settings.
• Authentication and usage: API keys (stored in protected form), session cookies, event counts, subscription tier, billing ledger entries, and support correspondence.
• Payment data: billing is handled by Stripe. We receive customer IDs, subscription status, and payment metadata — not your full card number.
• Event and ledger data: decisions, outcomes, metadata, hashes, timestamps, and content you submit via the API or SDKs, including fields you mark as public summaries.
• Technical data: IP address, browser type, request logs, and security-related information collected automatically when you use the Service.

We use essential cookies to keep you signed in and to operate the dashboard. Stripe may set cookies or similar technologies when you checkout or manage billing for fraud prevention and payment processing.

We do not use third-party advertising or analytics trackers on the Service today. If we add privacy-oriented analytics in the future, we will update this policy.

• Provide, secure, and maintain the Service (authentication, metering, verification, support).
• Process payments and manage subscriptions and Event Credits.
• Send transactional messages (account, billing, security).
• Detect abuse, protect integrity of the ledger, and comply with law.
• Improve the Service based on aggregated or de-identified usage patterns.

Some information may be visible without logging in, including on the Explorer and proof URLs (/e/{hash}). This can include event hashes, sequence numbers, timestamps, agent identifiers, verification metadata, and public summaries you choose to submit.

You are responsible for what you place in public fields. Do not submit sensitive personal data or secrets you do not intend to expose.

Audifact is an immutable audit ledger. Event records are retained to preserve hash-chain integrity and independent verification.

To request account closure, email support@audifact.io. We disable access and anonymize or delete account-identifying information where feasible.

Submitted event content and cryptographic chain records may remain after account closure. Where privacy law grants erasure rights, we will honor requests for personal data we control (such as your email and name) subject to exceptions for integrity, legal obligations, and information you knowingly made public.

We do not sell your personal information.

• Service providers: hosting (United States — currently DigitalOcean, New York City area), payment processing (Stripe), and business email (Google Workspace) — only as needed to operate the Service.
• Legal: when required by law, court order, or to protect rights, safety, and integrity of the Service.
• Business transfers: in connection with a merger, acquisition, or asset sale, with notice where required.

We use administrative, technical, and organizational measures appropriate to a beta SaaS platform. The Service is designed so that unauthorized tampering with recorded chain data is detectable through verification tools.

No method of transmission or storage is completely secure. You are responsible for safeguarding API keys and for decisions about what data you submit, especially in public fields.

We are based in the United States and process information on servers located in the United States. If you access the Service from outside the U.S., you understand that your information may be transferred to, stored in, and processed in the U.S. and other countries where our providers operate.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, or to data portability. Contact support@audifact.io to exercise these rights. We may need to verify your identity.

California residents: we do not sell personal information. You may request information about categories of data we collect and disclose as described in this policy.

EEA/UK: our lawful bases include contract performance, legitimate interests (security, product improvement), consent where required, and legal obligations.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us personal information, contact support@audifact.io.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the effective date. Material changes may be communicated by email or through the Service.

8th Floor Retail Inc.
30 N Gould St Ste R, Sheridan, WY 82801
Email: support@audifact.io