Trust Center · Privacy
Subprocessors & data retention
Rightshold uses the following processors. The list names only services the platform's code and configuration actually use; if a service is not listed here, the platform does not send it data. Changes to this list are announced on /changelog before they take effect.
| Processor | Purpose | Data involved |
|---|---|---|
| Railway | Application hosting and database | Account records, ledger data, application content |
| Resend | Transactional email delivery | Recipient email address, message content |
| Anthropic | Dispute/arbitration assistance (input-minimized: the model receives no names, emails or account identifiers) | Dispute facts submitted to an arbitration case |
| Google Analytics (GA4) | Aggregate page measurement on public pages, IP anonymization on | Pseudonymous page-view data |
| Microsoft Clarity | Session insight on public pages — how visitors use the site | Session interaction data (see /privacy) |
| OpenTimestamps | Bitcoin timestamping of ledger heads | Ledger head hashes only — no personal data |
Retention
| Record | Kept for |
|---|---|
| Ledger entries | Indefinite — the ledger is append-only by design; entries are the product |
| Receipts & statements | Life of the account + the published archive period |
| API activity records | A limited period (see the tracking notice on /privacy) |
| Backups | Rolling, per the operator's backup schedule |
| Web analytics | Per the analytics providers' standard retention (GA4 default) |