Legal
Your trust matters. This policy explains what ConsentSync collects, how we use it, and the controls you have.
When you create an account, we collect your name, email address, and company details. When you send or approve an asset request or creator agreement, we record the creator's name, email, IP address, timestamp, and consent decisions to produce a legally valid audit trail.
We use your data to operate the platform, generate consent records and certificates, process subscription payments via Stripe, send service notifications, and prevent fraud or abuse. We never sell your personal information.
Your data is stored on secure cloud infrastructure with encryption in transit and at rest. Access is restricted to authorized personnel and scoped by role. Consent records are retained for the life of your account to preserve legal validity.
We use Stripe to process payments. Stripe handles your card data under its own PCI-DSS compliant infrastructure — we never see or store full card numbers. We may use analytics providers to understand platform usage.
You can export or delete your data at any time from your account settings. You may also request a full data export or account deletion by contacting us. Deleting your account removes your personal data within 30 days, subject to legal retention requirements.
Consent records and signed agreements are legal artifacts. Even after account deletion, anonymized consent receipts may be retained to preserve the integrity of the audit trail for both parties.
Questions about this policy? Reach us at info@consent-sync.com.
Last updated: September 2026. ConsentSync is a product of ConsentSync Inc.