Privacy Policy

Last updated:

BastionProof is a claim documentation tool that helps you capture photos with verifiable context such as capture time and (optionally) GPS location. This Privacy Policy explains what we collect, how we use it, and your choices.

What BastionProof needs to function

Camera access — required to take photos inside the app.
Location access (optional) — used to attach GPS coordinates when you choose to include location context.

Local storage: BastionProof does not intentionally store captured photos or location data in persistent local browser storage (for example: localStorage, IndexedDB, or offline caches). Photos are captured and handled in-memory for upload and reporting workflows. Your device/browser may still maintain temporary system caches as part of normal operation.

Information we may collect

Depending on how you use the service, we may collect:

Account information such as your email address (if you create an account or request access).
Uploaded content such as photos you submit for documentation and reporting.
Metadata associated with uploads, which may include server-recorded timestamps and (if enabled) GPS coordinates.
Device/usage data such as basic logs needed to operate and secure the service (e.g., IP address, user agent, error logs).

How we use information

To provide the BastionProof service (capture, verification context, evidence pages, and exports).
To maintain security, prevent abuse, and troubleshoot errors.
To communicate with you about your requests, account, or support inquiries.

Location data

If you grant location permission, BastionProof may capture GPS coordinates at the time you take or upload a photo. You can deny or revoke location access at any time in your device/browser settings. When location is disabled, BastionProof will continue to function without GPS context.

Sharing and disclosure

Read-only sharing: If you generate a share link, people with that link may be able to view the associated evidence page.
Service providers: We may use hosting, email, storage, or security providers to operate BastionProof. They process data only to provide their services to us.
Legal requirements: We may disclose information if required by law or to protect rights, safety, and security.

Retention

We retain data only as long as needed to operate the service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary based on account status and operational needs.

Your choices

You can control camera and location permissions in your device/browser settings.
You can request access, updates, or deletion of your account information by contacting us.

Security

We implement reasonable safeguards designed to protect information. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

Children’s privacy

BastionProof is intended for business and professional use and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Contact

Questions about this Privacy Policy or data handling can be sent to: mail@bastionproof.com