ConsentSync

Trust Centre

How ConsentSync handles your data.

ConsentSync provides documented electronic records of permission and usage rights. Legal requirements may vary by jurisdiction and circumstance — this page explains what we record, how we protect it, and how you control it.

Jurisdiction-aware consent

ConsentSync captures electronic consent evidence designed to align with E-SIGN (US), UETA (US state), and eIDAS (EU) frameworks. The enforceability of any specific license depends on your jurisdiction and the specific circumstances. ConsentSync provides the audit trail; consult legal counsel for jurisdiction-specific advice.

What ConsentSync records

For every approved consent request, ConsentSync captures: the creator's name and email, their IP address at the time of approval, a UTC timestamp, confirmation of age (18+), and explicit agreement to the usage terms. This creates an audit-ready electronic record designed to satisfy E-SIGN, UETA, and eIDAS consent-evidence requirements.

Encryption & security

Data is encrypted in transit using TLS and at rest in the platform database. Access to your account is protected by authentication tokens, and row-level security ensures each account can only access its own records. Backend functions run in a sandboxed runtime with secrets stored separately from application code.

Subprocessors & infrastructure

ConsentSync is built on Base44, which provides application hosting, database, and file storage. Payment processing is handled by Stripe. Email delivery uses the platform email service. We do not share your consent records or creator data with advertising networks or data brokers.

Data retention

Consent records are retained for the duration of your subscription and beyond, as they serve as legal evidence of permission. You control whether records are kept after a subscription ends. License expiry dates are tracked automatically, and you receive alerts before rights lapse.

Data deletion & account closure

You can delete your account and all associated data from the dashboard at any time. Account deletion removes your profile, agreements, and consent records permanently. Creators can withdraw their consent at any time via the withdrawal link provided in their consent receipt.

Account & data export

You can export your consent records and request data at any time from the dashboard. Printable verification certificates are available for every approved request and can be downloaded as PDF for offline record-keeping or sharing with platforms and legal teams.

Backups & business continuity

The platform maintains automated backups of application data. In the event of an incident, the platform provider manages recovery procedures. We recommend you also keep your own copies of critical records using the export and certificate features.

Incident response

If a security incident is identified, affected users will be notified through the email address on their account. We recommend keeping your contact information current. If you believe your account has been compromised, contact support immediately.

GDPR & data protection

Under the GDPR, creators have the right to access, rectify, and withdraw their consent. ConsentSync supports these rights: creators can withdraw consent at any time via the link in their receipt, and account holders can export or delete their records from the dashboard.

For data processing agreements (DPAs) or specific compliance documentation, please contact us — we can provide the information your legal or security team needs for procurement review.

Full legal documentation

Read the full Privacy Policy and Terms of Service for complete details.