PRIVACY

Privacy during validation

The free Case Check can be completed without creating an account. If you choose to organize evidence after your result, DepositBack creates a private case record containing the case facts you confirmed and any evidence files you upload.

Evidence storage and access

Uploaded evidence is stored outside the public website directory and is accessed through a private case session. Files are not made public and document contents are not sent to analytics.

Data minimization

Upload only information needed for the deposit case. Never upload your full card number, CVV, PIN, banking password, online-banking login details or unnecessary passport information. Hide unrelated sensitive information before uploading bank evidence.

Payments

If you choose a paid preparation option, DepositBack stores only order metadata needed to track the purchase, such as product, amount, currency, payment status and provider session reference. Card numbers, CVV and online-banking credentials must be collected only by the configured checkout provider and are not part of the DepositBack case database.

Generated packs and concierge review

Paid pack preparation uses only the case facts you confirmed and evidence metadata or evidence-derived facts you explicitly confirmed. Generated PDF drafts are private. During validation, the configured concierge-review service may receive the private draft PDF, delivery email and fulfillment metadata for quality checking. The production launch gate requires this review path before paid cases are accepted.

Retention and deletion

Validation-stage case records and source evidence are scheduled for deletion 30 days after case inactivity. Generated packs carry a 30-day deletion timestamp. The active-storage retention job deletes expired private files before deleting their active metadata. You can also delete the whole case from the evidence workspace; that removes uploaded evidence and generated pack files from active storage before the case record is deleted. Backup behavior, when backups exist, is documented separately because backup deletion can follow a different provider-controlled schedule.

Analytics

Validation analytics use approved event names and pseudonymous identifiers to measure the product funnel. Email addresses, file names, document contents, generated pack contents, bank data and arbitrary free-text evidence are not analytics payloads.

External services and links

Configured checkout, extraction or concierge providers and official consumer-resource links are separate services with their own privacy practices. External document extraction remains optional and should not be enabled for real evidence until its data-processing terms have been reviewed.