What we never store
Raw identity-document images and biometric data never reach our systems. Identity verification is provider-hosted; we store a session reference, the decision, reason codes and timestamps only.
An IP address is a risk signal used to decide when stronger verification is needed. It is never treated as proof of identity and never accepted from client-supplied fields.
What we collect
Account details (email, display name), the evidence you contribute together with capture metadata, the vehicles you follow, purchase records, and device and behaviour signals used for abuse prevention.
How evidence is public
Evidence you publish into a record is public together with your handle and trust level. Private drafts are visible to you alone until you publish them.
Deletion
You can delete your account. Personal data is crypto-shredded; evidence you published remains on the record with its origin reduced to a tombstone so the record does not silently lose history.
Effective for this build. Replace with counsel-reviewed text before launch.