Privacy Policy
Last updated: July 31, 2026
This policy explains what data Beleg collects, why, and how it's handled.
What we collect
Account information: your email address and name, collected through Clerk (our authentication provider) when you sign up.
Venture data: the venture names, entry titles, entry bodies, dates, and hash values you create. This is the core of what Beleg does — recording your milestones in a sealed, append-only chain.
Attestation data:when you request an attestation, we store the attester's name and email, their confirmation statement, and the confirmation timestamp. Attesters do not create accounts — their data is limited to what they provide through the attestation link.
Anchoring data: when you anchor your ledger, we submit a cryptographic hash (not your content) to public Bitcoin timestamp servers via OpenTimestamps. The hash is a fingerprint — it cannot be reversed to reveal your entries.
Usage data: basic server logs (page visits, errors) retained for debugging. We do not use analytics trackers, advertising pixels, or any third-party tracking scripts.
What we do NOT collect: payment information, government IDs, phone numbers, location data, or the contents of your emails (the email ingestion feature, when built, will be covered by an updated policy before launch).
How data is stored
All data is stored in Supabase (PostgreSQL) hosted in the United States (us-west-1). Authentication is handled by Clerk. Both services maintain their own security practices and compliance certifications.
Public proof pages
When you create a venture on Beleg, it generates a public proof page at a URL you control. Anyone with that URL can view your venture name, tagline, entry titles, entry bodies, dates, hash values, and confirmed attestations. Pending attestations are never shown publicly. You choose what to record and when to share the link — Beleg does not publish or index your proof page without your action.
Data retention and deletion
Entries are append-only by design — this is a core product feature, not a limitation. You cannot edit or delete individual entries because the integrity of the chain depends on every entry remaining as recorded. If you want your entire venture and all its data permanently deleted, email privacy@beleg.app (or the contact below) and we will delete your venture, all entries, all attestations, and your account within 30 days.
Third-party services
Clerk (authentication), Supabase (database), Vercel (hosting), OpenTimestamps (Bitcoin anchoring). We do not sell, share, or provide your data to any other third party.
Children
Beleg is not directed at children under 13. If you are under 13, do not create an account.
Changes
If this policy changes, the updated version will be posted here with a new "Last updated" date.