osmarks

Privacy Policy

Last updated: October 12, 2026

osmarks (https://osmarks.com) is built on one principle: your record belongs to you. This policy explains what we collect, why, and what you can do about it.

1. What we collect

  • Account: your email address, used to sign you in with one-time codes and to send service messages.
  • Your work records: the descriptions of work you enter, and the confirmation requests you send.
  • Client confirmations: the client's name, their email address (used only to verify the confirmation), their company if they give it, what they wrote, and the date.
  • Payments: handled entirely by our Merchant of Record, Waffo.com Limited. We receive your plan, payment status and the email used at checkout. We never see or store your card details.
  • Technical logs: minimal server logs (such as truncated IP address and browser type) kept for security, for a limited time.

2. What is public

  • Your Proof Page is public when you choose to publish it. It shows confirmed work, counts (such as number of clients and time span), and the client's description. By default it shows the client's industry and company size rather than their name.
  • The public log contains signed fingerprints (hashes) of confirmations and their dates, not the full text or email addresses. It is append-only and copied daily by an independent public archive on GitHub, so entries cannot be removed afterwards. That is what makes confirmations verifiable.

3. What we never do

  • We don't sell or rent personal data.
  • We don't use advertising trackers or third-party analytics scripts.
  • We don't use your records or your clients' words to train AI models.

4. Who processes data for us

  • Cloudflare (hosting and database)
  • Resend (sending sign-in codes and confirmation emails)
  • Waffo.com Limited (payments, as Merchant of Record)

Each receives only what it needs to provide its service.

5. Your choices and rights

  • Download your records at any time.
  • Hide any confirmation from your Proof Page, or unpublish the page.
  • Delete your account. We delete your account data and the stored text of confirmations; signed fingerprints already in the public log remain, but they contain no readable personal information. Revocations are recorded.
  • A client can ask us to withdraw their confirmation at any time by writing to support@osmarks.com.

Depending on where you live (for example California or the EU/UK), you may have further rights to access, correct or delete your data. Write to support@osmarks.com and we will respond within 30 days.

6. Children

osmarks is not intended for anyone under 18, and we don't knowingly collect their data.

7. Changes

If we change this policy in a material way, we will tell you by email or on the site before it takes effect.

8. Contact

support@osmarks.com