Legal & Trust Center

Privacy Policy

  1. 1. Account and invitation requests — Account and contact details, including email addresses, are personal data. Account details are used to run your account. Invitation requests sent by email are used to respond to those requests.
  2. 2. Data we process — GoVidence receives agent action metadata (agent ID, action type, timestamps, input/output text, tokens, cost) sent by the client's own systems.
  3. 3. PII redaction — Personal data is expected to be redacted by the client, client-side, before sending. GoVidence does not intentionally process raw PII.
  4. 4. Hosting & sovereignty — GoVidence data is hosted on Lovable Cloud.
  5. 5. Security — Each recorded trace receives an HMAC-SHA256 integrity code (a shared-secret mechanism, not a publicly verifiable signature); newer traces are also signed with Ed25519, verifiable with the published public key.
  6. 6. Data retention & deletion — In the application, signed evidence is not deleted automatically, and plan history windows are not applied during the pilot. Retention, backups and deletion at the hosting-provider and infrastructure level are not covered by this statement. Clients may request account deletion; retained logs may be subject to legal retention obligations independent of account status.
  7. 7. Third parties — GoVidence does not sell or share client data with third parties for marketing purposes. Subprocessor: Lovable Cloud (hosting, database and authentication emails).
  8. 8. Contact — For privacy requests, contact: contact@govidence.app

Terms of Service

  1. 1. Service — GoVidence provides independent signing, timestamping and evidence generation for AI agent actions. Access is currently by invitation only.
  2. 2. Nature of reports — Generated reports and compliance indicators are technical evidence based on signed logs. They do not constitute legal advice and do not guarantee compliance with any specific law or regulation. Users remain solely responsible for their own legal and regulatory compliance.
  3. 3. Client responsibilities — The client is responsible for the accuracy of data sent to GoVidence, obtaining any required consents from third parties, and fulfilling any compliance obligations not covered by GoVidence's technical evidence.
  4. 4. History window — Displayed history windows by plan are Starter 183 days, Business 365 days, Enterprise 365 days. History windows by plan are not applied during the pilot.
  5. 5. Limitation of liability — GoVidence provides evidence infrastructure "as is" and is not liable for indirect damages, loss of business, or regulatory penalties arising from the client's use or misuse of the platform.
  6. 6. Account & API key — The client is responsible for keeping their API key confidential.
  7. 7. Termination — GoVidence may suspend or terminate access for breach of these terms, non-payment, or misuse.
  8. 8. Governing law — France.

Pilot data

During the pilot, GoVidence accepts test data only: do not send real personal data in traces. Account and contact details, such as email addresses, are personal data and are handled as described in the Privacy Policy. No data processing agreement is offered at this stage.

Trust Center

Encryption in transit (HTTPS enforced), hardened security headers, CORS restricted to the production domain, rate limiting (100 requests / 15 min / IP), strict input validation, and API keys stored only as SHA-256 hashes.