Effective Date: January 20, 2026 ยท Last Updated: January 20, 2026
PacSpace Inc. ("PacSpace," "we," "us," or "our") is committed to protecting your privacy while providing recordation infrastructure. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
This policy applies to information collected through our website (pacspace.io), the Balance API, dashboard, and related services (collectively, the "Service"). Please read this policy carefully. By using the Service, you consent to the practices described herein.
When you create an account, we collect:
When you use the Balance API, we process:
We automatically collect:
As neutral infrastructure, our data handling reflects our core commitment to impartiality. These principles are fundamental to how we operate:
All parties' data is handled identically. We do not provide preferential treatment, faster processing, or enhanced access to any party over another. Our systems treat all authorized users equally.
No party receives data advantages. We do not:
Parties can verify records without exposing counterparty details. Our verification proofs allow confirmation of data integrity without revealing the underlying data to unauthorized parties.
Our privacy practices themselves are consistent and auditable. We maintain logs of data access and processing that can be audited by appropriate parties upon request.
We use the information we collect for the following purposes:
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Provide the Service | Account info, API data | Contract performance |
| Process transactions | API usage data, billing info | Contract performance |
| Security and fraud prevention | Technical data, access logs | Legitimate interest |
| Service improvement | Aggregated usage patterns | Legitimate interest |
| Communication | Contact information | Contract / Consent |
| Legal compliance | All relevant data | Legal obligation |
For users in the European Economic Area (EEA), UK, and Switzerland, we process personal data under the following legal bases:
Processing necessary to provide the Service you have requested, including account management, API access, and billing.
Processing for our legitimate business interests, including security, fraud prevention, service improvement, and analytics, where these interests are not overridden by your rights.
Processing required to comply with applicable laws, regulations, or legal processes.
Where required, we will obtain your consent before processing personal data for specific purposes, such as marketing communications.
PacSpace does not sell, rent, or trade your personal information or Customer Data to third parties for their marketing purposes.
We may share data with trusted service providers who assist us in operating the Service, including:
These providers are contractually bound to protect your data and use it only for the services they provide to us.
When you submit the contact form on pacspace.io, we use Resend (https://resend.com) as a transactional email subprocessor to deliver your message to our team. Resend processes your submission in transit; the message content is retained in Resend per its standard retention policy. We also briefly process your IP address for abuse prevention (rate limiting) when you submit the form, but we do not persistently store it. See Resend's privacy policy for details.
As part of our tamper-evident guarantee, content fingerprints of records are committed to verification infrastructure outside any party's control. These fingerprints do not contain readable personal data. They are mathematical proofs that cannot be reversed to reveal the original data.
We may disclose data when required by law, such as in response to valid legal process (subpoenas, court orders), to protect our rights or safety, or to prevent fraud or illegal activity.
In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you of any such change.
We retain account information for as long as your account is active, plus a reasonable period thereafter for legal and business purposes (typically 3 years after account closure).
Consistent with our Data Neutrality Principles, verified records (receipts, proofs, permanent records) are tamper-evident and retained permanently. This is fundamental to the Service's purpose of providing permanent, verifiable truth.
Server logs and technical data are retained for 90 days for security and debugging purposes, then deleted or anonymized.
You may request deletion of your account data. We will comply with such requests except where:
We implement comprehensive security measures to protect your data:
In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.
If you are located in the EEA, UK, or Switzerland, you have the following rights:
You may request a copy of the personal data we hold about you.
You may request correction of inaccurate personal data.
You may request deletion of your personal data, subject to the limitations described in Section 6.4.
You may request restriction of processing in certain circumstances.
You may request your data in a structured, machine-readable format.
You may object to processing based on legitimate interests.
PacSpace does not make automated decisions with legal or significant effects based solely on automated processing.
To exercise these rights, contact us at privacy@pacspace.io. We will respond within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
You may request information about the categories and specific pieces of personal information we have collected, the sources of collection, our purposes, and categories of third parties with whom we share data.
You may request deletion of your personal information, subject to certain exceptions.
You may request correction of inaccurate personal information.
PacSpace does not sell personal information or share it for cross-context behavioral advertising. Therefore, there is no need to opt out.
We will not discriminate against you for exercising your privacy rights.
You may designate an authorized agent to submit requests on your behalf.
To exercise your California privacy rights, contact us at privacy@pacspace.io or call us at the number listed in Section 14.
PacSpace is based in the United States. If you are located outside the U.S., your data may be transferred to and processed in the U.S.
For transfers from the EEA, UK, or Switzerland, we rely on:
We ensure that any international transfers comply with applicable data protection laws and provide adequate protection for your personal data.
We use minimal, functional cookies only. We do not use tracking cookies for advertising or cross-site tracking.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session | Authentication and security | Session |
| Preferences | Remember your settings | 1 year |
| Analytics | Understand Service usage (anonymized) | 1 year |
You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.
The Service is designed for business use and is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by:
Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
PacSpace Inc.
Privacy Inquiries: privacy@pacspace.io
General Inquiries: contact@pacspace.io
Legal: legal@pacspace.io
For GDPR-related inquiries, you may contact our Data Protection Officer at dpo@pacspace.io.
If you are in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.