Privacy policy

Last updated 4 November 2026

Your documents never leave your machine

The JidoSeal Self-Check audit runs locally, in your own browser or on your own machine. The contents of your knowledge base — file names, file text, structure, everything — are read there and never transmitted to us. What travels to JidoSeal when you submit for certification is the result: a score, a tier, a count of the OKF §11 rules that pass, a sha256 digest of your scan config if the folder has one, and a cryptographic Merkle root that proves a real scan happened without revealing what was scanned.

What we do hold

Certification records — your organisation name, the submitter’s name and email address, the tier and score awarded, the OKF §11 count and config digest from the scan, and the date. An approved certification’s organisation name, tier and date are shown publicly on its verification page and in the public registry; that is the point of a certification.
Payment records — handled by Stripe. JidoSeal never sees or stores your card number. We keep Stripe’s identifiers for a payment so a certification can be tied to the payment that produced it.
Support correspondence — what you send us when you get in touch.

Site analytics

We use Vercel Web Analytics and Speed Insights to count visits and measure page speed. They use no cookies and do not identify or follow individual visitors. We also count a few steps in the Self-Check (for example, that a check was run, which tier it reached, and that a certification was purchased), and how often the founding-offer pop-up is shown and clicked, as anonymous totals. These counts never include your file names, folder names, file contents or anything else from your documents, which still never leave your machine.

To show visitors in India the India business price, the site reads which country your connection comes from, as reported by our host (Vercel). It is used for that page view only and is not stored. If you buy at the India business price, the GSTIN you enter is passed to Stripe with your order and kept on your certification's record, so we can check it.

Who else receives your personal information

We use a few service providers to run JidoSeal. Each gets only what it needs to do its job for us:

Stripe (payments) — your name, email address, organisation name and card details when you pay, plus your billing or delivery address and GSTIN where the order needs them.
Resend (email) — your name and email address, and the content of the emails we send you, such as your certificate, owner link and support replies.
Vercel (hosting and database) — runs the site and stores the records listed above, and sees your IP address when you visit.
Prodigi (framed prints) — only if you order a frame; see below.

The homepage video loads from YouTube only if you press play.

Framed certificates: your address goes to our print partner

Your delivery name and address go to our print partner. To print and post a physical certificate, JidoSeal sends your recipient name and shipping address to Prodigi, our third-party print and fulfilment provider, together with the certificate image. That transfer happens only for orders you place, and only for the purpose of fulfilling that order. Read the privacy policy.

Specifically, when you order a framed certificate we send Prodigi — our print and fulfilment partner — the recipient name and full delivery address you enter at checkout, along with the certificate image to be printed and the shipping method you chose. Prodigi needs these to make and post the item, and its carrier needs the address to deliver it.

Scope. The transfer happens only when you place an order, and only for that order. We do not send Prodigi your certification history, your score, your audit results, or the details of any other order.
No card details. Payment stays with Stripe. Prodigi is never sent payment information.
Not marketing. Your address is used to fulfil the order and for nothing else. We do not sell or rent personal information, and we do not share it with anyone else for their own purposes.
If you never order a frame, none of this applies to you — no address is collected and nothing is sent to any print vendor.

Prodigi processes this information as our service provider, under its own published privacy terms, and its carriers process the delivery address to complete delivery.

Children

JidoSeal is a business service. It is not directed to children under 13, and we do not knowingly collect personal information from them.

Retention

Certification records are kept for as long as the certification is live plus the period we need for the public registry and for our own tax and accounting obligations. Order and shipping records are kept for the same reason. You can ask us to correct anything we hold about you, or to delete what we are not required to keep.

Getting in touch

Questions about any of this, or a request about your own data — contact us. See also the refund and cancellation policy.