GDPR — how C-NDA handles personal data

Working draft — a complete version reviewed by counsel will replace this page before public launch.

EU data residency

All personal data is stored in the European Union (Frankfurt region), encrypted at rest. What is published on the blockchain is only a cryptographic hash: it contains no personal data and reveals nothing about names, documents or contents.

What we process, and why

For signers: email address, name, optional company and role, plus timestamp, IP address and user agent at the moment of acceptance — recorded as evidence of the agreement itself. For account holders: profile and billing data. We process this data to deliver the service you asked for: legally defensible proof.

Your rights, and the immutability exception

You can access, rectify and export your data, and request deletion. One documented exception: sealed evidence packages are immutable by design — corrections produce a new certificate in a revision chain, and stored audio can be destroyed on request while the hash remains as evidence that the recording existed as certified. This is the immutability exception described in our Privacy Policy.

Contact

Data requests: hub@witup.ai. Data controller: WitUp Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.