Privacy

What this service is

Proof is a freemium product for a written agreement, scene photos, dual confirmation, and a shareable read-only /p link (plus a PDF). It is a shared record — not a notary, not a court filing, and not legal advice.

What we collect

When you use Proof we may store:

• The email you use to sign in (magic link) and a session after you click it
• Packet title and the agreement text you type
• Photos you upload (originals are stored; we keep a SHA-256 of each original file)
• Optional photo captions
• Device-reported capture time (captured_at) when the phone or camera provides it — this is not notarized and is not an independent clock
• Party names and emails, invite/confirm events, and confirmation timestamps
• Public share ids so /p/... links work
• If you subscribe: PayPal subscription identifiers. We do not store card numbers
• Limited server logs needed to run and debug the app

Opening or confirming a shared link does not require creating an account. We still receive the email used to confirm that packet.

Magic-link sign-in

Creating packets needs an account. We email a one-time sign-in link that expires in about 20 minutes. If you did not ask for a link, ignore the email.

After you sign in we set a session cookie. We also store a language cookie (proof_locale) so the UI can stay in the language you picked.

Photos, hashes, and metadata

Originals are stored. SHA-256 is of the file as uploaded. Capture time is whatever the device reports. We do not claim that a photo was taken at a certified time or that the file is authentic beyond the hash of what we received.

Photo limits today: JPEG, PNG, WebP, or HEIC; 20 MB per file; Free up to 20 photos per packet; Pro up to 50.

Retention

• Free: packets are kept about 90 days
• Pro: packets are kept 2 years or more

After that window we may delete packet text, photos, and related records. Limited billing or security logs may last longer. Retention is a product policy, not a legal hold.

Cookies

We use a session cookie for signed-in users and a locale cookie. We do not use advertising cookies. Payment checkout happens on PayPal.

Share links

Anyone with a /p/... link can read that packet. Invite links may include a one-time confirm token. Treat links like the record they open.

Third parties

We use other companies to operate Proof, including:

• PayPal — paid Pro subscriptions
• Resend (or similar) — transactional email (sign-in, invite, confirm receipt)
• Hosting — the app, database, and file storage

We do not sell your personal data. Those providers process data so the feature you used can run.

Contact

Privacy questions: hello@yuefetch.com. This product is published at makepacket.help.

Governing law

These Privacy terms are governed by the laws of the Hong Kong Special Administrative Region. Disputes shall be submitted to the courts of Hong Kong SAR, except where applicable consumer law requires otherwise.