Private by architecture.

This policy describes the Credhalo public MVP and the data boundaries visible in the product.

What the product stores

Role details, skills, evidence entries, public wallet identity, growth receipts, and proof-history records are stored in versioned browser localStorage on your device. Credhalo does not provide a product account or cloud workspace in this release.

What leaves the browser

Nothing is uploaded by the core workspace. A browser may request ordinary hosting assets and limited deployment analytics. A linked evidence URL is opened only when you select it. Receipt data leaves the browser only when you copy, download, publish, or otherwise share it.

Wallet data

If you choose Connect Wallet, the interface requests the selected public address and active chain ID from your wallet provider. These public values are stored locally for display. Connection does not request a signature or transaction. A separate proof action sends its fully displayed request to your wallet only after additional user confirmation.

Hosting

The production host may process IP address, device, request, security, and operational data necessary to deliver the site. Credhalo does not add product analytics in this MVP. The hosting provider applies its own retention and security practices.

Retention and deletion

Local data remains until you delete site storage, use browser controls, or the browser removes it. Downloaded files remain wherever you save them. Public proof, if independently submitted, may be permanent and cannot be erased by this interface.

Security

Credhalo uses local-first data flow and cryptographic digests to reduce unnecessary transfer and expose receipt changes. No system is perfectly secure. Local access, extensions, wallet software, shared devices, and published links remain user-controlled risks.

Your choices

You may use the map without a wallet, decline wallet requests, avoid evidence links containing personal data, skip optional proof anchoring, download receipts for backup, or clear site storage. The product does not sell workspace data.

Children and sensitive data

Credhalo is not directed to children. Do not enter confidential employer material, government identifiers, health data, financial account data, private keys, seed phrases, or information you lack permission to process.

Changes and contact

Material policy changes will be reflected by a new effective date on this page. No external privacy inbox is configured in this MVP; keep sensitive information out of support or public channels.