ChoiceProof Cloud / data handling

Your evidence and your workspace.

This notice describes the current Cloud service operated by 株式会社ChoiceProof. Company information and contact are available on the company website.

What Cloud receives

Google or email codes through the managed Neon authentication service handle sign-in. Cloud receives your verified account identity and email. Cloud stores workspace membership, project metadata, saved setup, reusable rules, approved numeric profiles and source public keys, signed observations, approved public-evidence policies and artifacts, reports, API-key digests, usage and administrative audit events.

An optional GitHub connector stores an encrypted repository-scoped, read-only token, authorized rules and workflow/artifact metadata. It does not store artifact contents. Signed results go only to the HTTPS receiver you configure. Disconnect the repository to revoke its Cloud connection and remove its saved source credential.

Do not upload raw business receipts, personal customer data, signing keys or private source records. Enter a connector credential only in its dedicated connection form. The local collector sends only the approved profile and signed count observations. Verification does not send these materials to a model provider or blockchain. Existing public protocol publication is a separate, explicit workflow.

Access and processors

Results are private to authorized workspace members and project keys. Vercel runs the application; Neon provides authentication and PostgreSQL storage. Resend delivers sign-in codes and content-free operational notifications. Cloud checks membership and key status on each authenticated operation. There is no public report-sharing link.

Retention and deletion

Verification materials are available for 30 days. A maintenance job scheduled every five minutes removes expired materials from active storage; service outages can delay physical removal. Input digests and retry identifiers remain to prevent duplicate quota usage. Workspace owners can delete a project and its keys, profiles and results from Settings. Usage counters and content-free audit events remain for abuse prevention and operational accountability. Support and account-deletion requests use the existing company contact form.

Deletion from active storage does not erase earlier database recovery points immediately. Neon provides a six-hour point-in-time recovery window, daily snapshots retained for seven days and weekly snapshots retained for thirty days. Recovery copies can retain deleted data until their retention expires. The recovery runbook requires reapplying recorded deletions and retention rules before restored data becomes accessible. Do not submit regulated or sensitive personal evidence to Cloud.

Logs and cookies

Authentication cookies maintain your session. This tab retains only an input digest and retry identifier for recovery; it does not retain your evidence or API key. Application logs contain request IDs, status/error codes and elapsed times, not evidence contents or credentials. There is no advertising tracking in this Cloud implementation.

Your choices

Export your reports, revoke keys, remove members, delete project data or sign out in the console. For data questions, use the existing company contact channel and include the request reference when available.