Privacy Policy

This policy explains what Hewmark collects when you use the capture app, the dealer dashboard, or the public verify pages, and what we do — and deliberately do not do — with it. It is written to match the same plain-language standard as our provenance claims: we would rather say less and mean all of it.

1. What we collect

When a dealer uses Hewmark to certify inventory, the following is recorded as part of a signed provenance event:

• Photographs of the physical timber being certified (not of people).
• Measurements and descriptive data: species, dimensions, condition, and the structure the member came from.
• Geolocation — optional, only if the capturing device provides it, and only attached to removed_from_structure events.
• A device identity (DID) — a public cryptographic key, not a person's name. The private half of that key is generated on the dealer's device and we never receive it, store it, or have any way to reconstruct it.
• Account information for dealer accounts: business name, email, and team member emails for invited users.
• Verify-page visits: a timestamp is logged when someone scans a certificate's QR code, so the dealer can see certificates are being checked. We do not log visitor IP addresses, device fingerprints, or any other identifying detail for anonymous verify-page visitors.

2. Why we collect it

Every field above exists to make one specific promise possible: a buyer can independently verify where a piece of reclaimed timber came from and that its record hasn't been quietly altered. Nothing is collected for advertising, profiling, or resale.

3. Where it lives, and for how long

Signed provenance data (measurements, photo hashes, custody events) is stored in our database and is intended to persist indefinitely — that permanence is the product. Certified members' public verify pages remain live and checkable even if a dealer's subscription lapses or their account closes; a trust product that deletes its own evidence on non-payment isn't one.

Photographs are stored alongside the signed record they belong to. Account and billing records are retained as required for tax, accounting, and fraud-prevention purposes.

4. Key custody

A dealer's signing key is generated on their own device. We never see, store, transmit, or have any technical ability to reconstruct a dealer's private key. This means we also cannot recover a lost key on a dealer's behalf — see the in-app key recovery flow for how to back it up yourself.

5. Your rights

• Export: any dealer can export their complete registry (all lots, members, and signed event history) at any time from the dashboard, in a portable JSON format, with no restriction.
• Deletion of account/business data: on request, we will delete a dealer's account information (business name, email, billing records subject to legal retention requirements).
• Deletion of signed provenance records: because provenance events are cryptographically chained and publicly verifiable by design, we generally cannot delete an individual certified event without breaking the custody chain for that member — the same property that makes the record trustworthy makes it resistant to silent removal. If you need a member's certificate taken down for a legitimate reason (e.g., it was issued in error), contact us and we will work through what's possible on a case-by-case basis.

6. Third parties

We use Supabase for database and authentication infrastructure, and Stripe for payment processing. Both process data under their own privacy policies as our processors, not as independent owners of your data.

7. Children

Hewmark is a business-to-business tool for reclaimed-timber dealers and is not directed at or knowingly used by children.

8. Changes to this policy

If this policy changes materially, we will update the date above and, for registered dealers, notify by email.

9. Contact

Questions about this policy, or a data request: hello@hewmark.com.

← Back to Hewmark