Privacy Policy

Where your data lives

All data is stored in the European Union (Frankfurt region), encrypted at rest. What is published on the blockchain is only a cryptographic hash: it reveals nothing about names, documents or contents.

What signers consent to

Signers verify their email address and accept an NDA; timestamp, IP address and user agent are recorded as evidence of that acceptance and included in the sealed evidence package. For certified meeting sessions, recording consent is an explicit, integral part of the acceptance flow.

Deletion and the immutability exception

You can delete your account at any time: your personal data as an account holder (profile, drafts, pending registrations) is deleted permanently. What deletion does not remove are the certificates already issued and their public verifiability: a certificate is evidence that belongs to every bound party, not only to you — the counterparties keep their permanent access, and anyone holding the code can still verify existence and integrity. This exception is deliberate and is part of the evidence design. Stored audio can be destroyed on request while keeping the certificate — its hash remains as evidence.

The Chrome extension and the desktop app

Both are optional tools for the person who organises a meeting; participants never install anything. Neither one stores credentials: they act only through the session cookie you already hold on this site, and if you are not signed in they simply send you to the sign-in page. They collect no analytics, contain no advertising or tracking code, and send data to no third party — every request goes to C-NDA and nowhere else.

The Chrome extension runs on meet.google.com pages for one purpose: to read the meeting code out of the page address, so it can ask whether that meeting already has a C-NDA session and let you start one. It does not read the contents of your meeting, your other tabs, your browsing history or your cookies, and it does not record anything — recording is always performed by the C-NDA bot in the call, visible to everyone in the participant list. The meeting code travels to C-NDA as a one-way fingerprint rather than as a link, and is only ever matched against sessions belonging to your own account.

Contact

WitUp Ltd — Company No. 16572774, registered in England and Wales. 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Privacy requests: hub@witup.ai or via the account settings page.