Legal information
Last updated: 29/10/2026
This policy explains what personal data Rightkeeper processes when you use the rightkeeper.io website and the app.rightkeeper.io application, why, for how long, and how to exercise your rights.
The data controller is Rightkeeper SAS, 348 route de la Marchande, 47310 Sérignac-sur-Garonne, France, registered with the Agen Trade and Companies Register under number 991 272 477.
For any question about your data or to exercise your rights, write to us at privacy@rightkeeper.io. This is the only address used in this policy.
Category | Data |
|---|---|
Account | Email address, password, last name, first name, postal address. |
Deposits | The information linking your deposits to your account: file name, digital fingerprint, deposit and transaction dates, blockchain transaction references, proof certificate |
Shares | Share settings: recipients’ email addresses and view tracking, data recorded at each view: date and time |
Payment | Plan subscribed, billing history. Your card details are entered directly with Stripe. Rightkeeper has no knowledge of your banking information. |
Technical data | Connection and activity logs |
An email address is required to create an account: without it, we cannot provide the service. The other profile information is optional.
You are responsible for the content of your files; you must only deposit and share files you are entitled to use.
Purpose | Legal basis |
|---|---|
Create and manage your account | Performance of the contract (terms and conditions) |
Deposit your files, calculate their fingerprint, time-stamp, anchor on the blockchain, issue and store certificates | Performance of the contract |
Share your files and, depending on your plan, track views | Performance of the contract with you; for recipients, our legitimate interest and yours in tracing access to shared files |
Send you service-related emails (confirmations, alerts, invoices) | Performance of the contract |
Manage payments and billing | Performance of the contract; legal obligation to retain invoices via Stripe |
Ensure the security of the service and prevent fraud | Legitimate interest: protecting the service and its users |
Send you our newsletter | Your consent, except where the law allows us to write to you without prior consent (for example, if you are a customer, about Rightkeeper services similar to those you use); you can object at any time |
We do not sell your data and do not make any automated decisions producing legal effects concerning you.
Your file is never published on the blockchain. Only a digital fingerprint is written to it, on the Polygon public blockchain.
A fingerprint cannot be used to reconstruct the content of the file. However, anyone holding a copy of the same file can verify that it was deposited.
An entry on a public blockchain is permanent: neither Rightkeeper nor anyone else can delete it. If you delete a file or close your account, its fingerprint remains recorded, but it is no longer linked to you in our systems.
Within Rightkeeper, only the people who need it to operate the service and assist you have access.
We use the following service providers:
Provider | Role |
|---|---|
OVHcloud | Hosting of the website, the application and files |
Stripe | Card payments only |
Mailjet | Sending emails |
Your files are also accessible to the people you choose to share them with, under the conditions you set.
Fingerprints written to the blockchain can be viewed by anyone (section 4).
Finally, we may disclose data to the authorities when required by law.
Your files and account data are hosted by OVHcloud in France.
Payment processing: Stripe, an international provider subject to GDPR contractual safeguards.
Data | Period |
|---|---|
Files and certificates | Until the account is closed |
Account data | Until the account is closed |
Inactive account | Deleted at your request |
Invoices | 10 years, in accordance with accounting obligations |
Technical logs | Indefinitely |
Deleting a file. You can delete a file at any time from your account.
Deleting a file does not delete the proof. We delete the physical file and anonymise all associated metadata.
The fingerprint written to the blockchain remains (section 4).
Deleting an account. You can close your account at any time: your files, certificates and account data are then deleted (see Deleting a file) within the period stated above. Remember to download your files and certificates beforehand, as we will no longer be able to provide them afterwards.
You can:
You can object at any time, without having to give a reason, to receiving our marketing communications, using the unsubscribe link in each message.
To exercise your rights, write to the address given in section 1. We reply within one month, which may be extended by two months for a complex request; we will inform you if so. We may ask you to prove your identity in case of reasonable doubt.
Some rights have limits: for example, we keep your invoices despite a deletion request; fingerprints written to the blockchain cannot be deleted (section 4).
If you believe your rights are not being respected, you can contact the CNIL, the French data protection authority (www.cnil.fr).
Some cookies are essential for the website and application to work (login, security, remembering your choices): they do not require your consent.
Others are only set with your consent:
Category | Tool | Purpose |
|---|---|---|
Audience measurement | Google Analytics | Understanding how the site is used |
You can accept or refuse these cookies just as easily, and change your choice at any time via the “Manage consent” link at the bottom of each page. We keep your choice for [To be confirmed: 6 months].
We implement technical and organisational measures to protect your data against loss, unauthorised access and alteration. For your part, protect your credentials and only share your files with the right people.
We may amend this policy to reflect changes in the service or regulations. The date of the last update is shown at the top. In the event of a significant change, we will inform you by email or in the application.
