Privacy Policy

What we collect

Account holders: email, name/studio name, password (stored as a salted hash, never readable), optional logo and brand color, and the proofs, comments, and files you upload.

Reviewers (your clients): the name they type, optional email, their comments, and — when they record a decision — a hashed IP address and browser user-agent string, kept as part of the approval record’s integrity.

What we use it for

Running the service: showing proofs to the right people, keeping approval records accurate, sending the occasional service email (receipts, security notices). No advertising, no selling data, no third-party trackers.

Who else touches your data

Infrastructure only: Vercel (hosting), Neon (database), Vercel Blob (file storage), and Stripe (payments — card details never touch our servers). Each processes data solely to provide their service to us.

Cookies

One httpOnly session cookie to keep you logged in. Reviewers get none — their name lives in their own browser’s local storage.

Retention & deletion

Deleting a proof removes its files, comments, and records permanently. Deleting your account removes everything. Email hello@okaystamp.com and it’s done within 30 days.

Your rights

Wherever you live, we honor access, correction, export, and deletion requests at hello@okaystamp.com.

Changes

If this policy changes materially, we’ll notify account holders by email before it takes effect.