Custody Proof — Privacy Policy
Effective Date: June 20, 2026 • Last Updated: June 20, 2026
Archuleta Group LLC (“Archuleta Group,” the “Company,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and protect information in connection with the Custody Proof website, mobile and desktop applications, and related services (collectively, the “Service”). This Policy is incorporated into and part of our Terms of Service.
Our Plain-Language Commitments
- We never use the content you upload — your custody logs, messages, documents, images, and recordings — for advertising, and we do not sell it.
- We do not sell your personal information for money, and we do not use it for third-party advertising.
- We use limited cookies and pixels to promote Custody Proof itself. Some state laws may treat this activity as “sharing” or a “sale.” You can opt out at any time, and we honor browser-based opt-out signals such as Global Privacy Control (see Section 7).
- You control what you upload, and you can access, correct, export, or delete your information (see Section 12).
- Questions or requests: privacy@custodyproof.com.
1. Scope & About This Policy
This Policy applies to information we process when you visit the Custody Proof website, create or use an account, communicate with us, or otherwise use the Service. It does not apply to third-party websites, applications, or services that may link to or integrate with the Service, which are governed by their own privacy policies. Capitalized terms not defined here have the meanings given in our Terms of Service.
Archuleta Group is the controller of personal information processed through the Service, except where we act as a service provider, processor, or contractor for a business customer (such as a law firm), as described in Section 9 and Section 12.2.
2. Information We Collect
We collect the categories of information below. “Personal information” means information that identifies, relates to, or could reasonably be linked with you or your household.
| Category | Examples | Source |
|---|---|---|
| Account Information | Name, email address, phone number, postal address, account credentials | You |
| Payment Information | Billing address and partial payment-card details (full card numbers are handled by our payment processor) | You / payment processor |
| User Content | Custody logs, calendar entries, notes, documents, files, images, and audio/video recordings you upload | You |
| Child-Related Data | Information about children entered by a parent, guardian, or authorized adult | You |
| Shared Data | Content you share with co-parents, attorneys, or others you connect with | You / authorized users |
| Communications | Support messages, feedback, and survey responses | You |
| Usage Data | IP address, browser and device type, device and advertising identifiers, pages and screens viewed, actions taken, and crash and diagnostic logs | Automated collection |
| Cookies & Similar Tech | Session and persistent cookies, SDKs, analytics tags, and advertising pixels | Automated / partners |
Sensitive information. User Content and Child-Related Data may include sensitive personal information — for example, information about children, family or legal matters, precise locations, or health-related details. You decide what to upload, and we process it solely to operate the Service at your direction. You are responsible for obtaining any consents required before uploading information about another person. We do not use sensitive information to infer characteristics about you or for advertising.
Categories of sources. We collect information directly from you, automatically from your use of the Service and your devices, and from our service providers, payment processors, and analytics and advertising partners.
3. How We Use Information
- Provide and maintain the Service — authenticate you, process transactions, store and sync User Content, and enable features.
- Customer support — respond to inquiries, troubleshoot, and resolve issues.
- Improve and develop the Service — analyze usage to fix bugs and improve functionality, and develop and improve our own features (including AI features) using de-identified or aggregated data.
- Billing, fraud prevention, and security — process payments, prevent and investigate fraud, abuse, unauthorized access, and chargebacks, and protect the Service and its users (including by sharing transaction and usage records with banks and card networks to resolve payment disputes, as described in our Terms of Service).
- Advertise Custody Proof — promote the Service and measure the effectiveness of our own marketing (see Section 7).
- Communications — send service, security, and transactional messages, and, with your consent where required, promotional messages.
- Legal and compliance — comply with applicable law, respond to lawful requests and legal process, and establish, exercise, or defend legal claims and enforce our Terms.
Legal bases (EEA/UK users). Where the EU or UK GDPR applies, we process personal information: (a) to perform our contract with you; (b) with your consent (which you may withdraw); (c) for our legitimate interests, such as securing and improving the Service, preventing fraud, and promoting Custody Proof, where not overridden by your rights; and (d) to comply with legal obligations.
4. Cookies & Tracking Technologies
We and our partners use cookies, SDKs, pixels, and similar technologies to operate the Service, remember your settings, measure performance, understand usage, and promote Custody Proof. Strictly necessary technologies are required for the Service to function. Analytics and advertising technologies are optional, and where required by law we obtain your consent before using them.
You can manage cookies through your browser or device settings, through any consent banner or preferences tool we provide, and through the opt-out mechanisms in Section 7. Blocking some cookies may affect functionality.
5. How We Share Information
We share personal information only as described below. We do not sell your personal information for money, and we do not share the content you upload for third-party advertising.
| Who We Share With | Why, and What They Receive |
|---|---|
| Service Providers | Cloud hosting, infrastructure, and support providers that operate the Service on our behalf under contracts that restrict their use of the data. |
| Payment Processors | Process payments (e.g., Stripe); they receive billing and transaction data. We do not store full card numbers. |
| Communications Providers | Deliver texts, emails, and notifications (e.g., Twilio); they receive phone numbers or email addresses and message content and delivery status. |
| AI Providers | Power AI features; they receive only the data needed to generate the requested output and may not use it to train their own models (see Section 8). |
| Analytics & Advertising Partners | Measure usage and promote Custody Proof; they receive usage data and pseudonymous or hashed identifiers (see Section 7). |
| Users You Authorize | Co-parents, attorneys, or others you invite receive the Shared Data you choose to share with them. |
| Legal & Safety | Courts, regulators, and law enforcement, to comply with legal process or protect rights, safety, and property (see Section 19). |
| Business Transfers | An acquirer or successor in a merger, financing, reorganization, or sale of assets, subject to this Policy. |
| With Your Direction | Anyone you direct us to share with (e.g., exporting a report to outside counsel). |
6. AI Features & Data
When you use AI-powered features, we may send relevant data to AI service providers to generate insights, summaries, or suggestions. We do not permit AI providers to use your data to train their own models, we use only de-identified or aggregated data to develop and improve our own features, and we recommend you review AI outputs for accuracy before relying on them. AI outputs are not professional advice, as further described in our Terms of Service.
7. Advertising, Analytics & Your Privacy Choices
We use first-party cookies and third-party pixels and tags (for example, from Google and Meta) to promote Custody Proof on other sites and apps, to measure our marketing, and to perform retargeting. We do not use the content you upload for advertising, and we do not permit these partners to use the data they receive for their own independent purposes or to sell it.
“Sharing” and “sale” under state law. Some state privacy laws define “share” and “sell” broadly to include the use of certain advertising and analytics cookies, even when no money changes hands and we do not consider it a sale. To the extent our advertising activity is treated as “sharing” or a “sale” under those laws, we honor your right to opt out.
How to opt out. You may opt out of this advertising activity by: (a) using the “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” control we provide in the Service; (b) emailing privacy@custodyproof.com; (c) adjusting your browser or device settings or using industry opt-out tools such as the DAA (optout.aboutads.info) or, in the EU, YourOnlineChoices; and (d) enabling a Global Privacy Control (GPC) signal in your browser. Where required by law, we treat a GPC signal we detect as a valid opt-out of “sale” and “sharing” for that browser or device.
8. Service Providers, Processors & Contractor Status
We use trusted service providers to operate and improve the Service, including cloud hosting, payment processing (e.g., Stripe, which is PCI-DSS compliant), communications (e.g., Twilio), AI providers, and analytics tools. We contractually require each provider to:
- Process personal information only on our instructions and for the specified purposes;
- Maintain appropriate security measures; and
- Not sell the data or use it for their own marketing or other independent purposes.
When we process personal information on behalf of a business customer (such as a law firm), we act as a “service provider,” “processor,” or “contractor” under applicable law. In that capacity we process the data only for the customer’s specified purposes and do not sell or share it or use it for our own cross-context behavioral advertising.
9. Data Retention
We retain personal information for as long as needed to provide the Service and for the purposes described in this Policy. We determine retention based on the nature and sensitivity of the data, the purposes for processing, applicable legal and tax requirements, and our need to resolve disputes, prevent fraud, and enforce our agreements. User Content is retained until you delete it or close your account, after which we permanently delete or de-identify it within thirty (30) days, subject to routine backup cycles and any legal hold. We may retain de-identified or aggregated data, and limited records necessary for legal, security, billing, or dispute-resolution purposes, after that point.
10. Security
We use industry-standard technical and organizational measures designed to protect personal information, including:
- Encryption in transit (TLS) and at rest;
- Role-based access controls and least-privilege access;
- Secure authentication mechanisms; and
- Regular security reviews and vulnerability assessments.
We also maintain a written information security program appropriate to the sensitivity of the data we handle. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and devices. If we become aware of a security incident affecting your personal information, we will notify you and the appropriate authorities as required by applicable law.
11. Your Privacy Rights
Depending on where you live, you may have some or all of the rights described in this Section. We do not discriminate against you for exercising any privacy right.
11.1 Rights that may be available to you
- Access / know — the categories and specific pieces of personal information we hold about you, and how we use and share it;
- Correct — inaccurate personal information;
- Delete — your personal information, subject to legal exceptions;
- Portability — a copy of certain information in a portable format;
- Opt out — of “sale” or “sharing” of personal information and of targeted advertising;
- Limit — the use of sensitive personal information to what is necessary to provide the Service;
- Opt out of profiling — in furtherance of decisions that produce legal or similarly significant effects (see Section 13); and
- Withdraw consent — where processing is based on your consent.
11.2 How to submit a request
Submit a request by emailing privacy@custodyproof.com or using any in-Service privacy control we provide. We will verify your identity by matching information you provide against our records before fulfilling a request, and we may ask for additional information for security. You may use an authorized agent to submit a request on your behalf; we may require proof of the agent’s authority and verification of your identity. We respond within the time required by applicable law (generally 45 days, extendable where permitted).
11.3 Right to appeal
If we decline your request and you live in a state that provides an appeal right (such as Virginia, Colorado, Connecticut, Texas, and others), you may appeal by replying to our decision or emailing privacy@custodyproof.com with the subject line “Privacy Appeal.” We will respond to your appeal within the time required by law and, if we deny it, tell you how to contact your state attorney general.
12. State-Specific Privacy Disclosures
12.1 California (CCPA/CPRA)
California residents have the rights described in Section 11, including the rights to know, delete, correct, opt out of sale/sharing, limit use of sensitive personal information, and non-discrimination. In the prior 12 months, we collected the categories of personal information listed in Section 2 (including identifiers, commercial information, internet and device activity, geolocation, audio/visual information, and sensitive personal information you choose to upload), from the sources in Section 2, for the purposes in Section 3, and disclosed them to the categories of recipients in Section 5. We do not sell personal information for money. To the extent our advertising activity (Section 7) is a “sale” or “share” under California law, you may opt out as described in Section 7. We do not knowingly sell or share the personal information of consumers under 16.
12.2 Service-provider role for business customers
When we process personal information on behalf of a law firm or other business customer, that customer is the responsible business or controller, and you should direct privacy requests to them; we will assist them as required and act only on their instructions.
12.3 Virginia, Colorado, Connecticut, Texas & other states
Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Texas, Utah, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, and Rhode Island — have the rights described in Section 11, including access, correction, deletion, portability, opt-out of targeted advertising, sale, and certain profiling, and (in most of these states) the right to appeal a denied request under Section 11.3. We obtain your consent before processing sensitive personal information where required by your state’s law, and we honor universal opt-out signals such as Global Privacy Control where required (Section 7).
12.4 EEA, UK & Switzerland (GDPR)
If you are in the European Economic Area, United Kingdom, or Switzerland, you have the rights to access, rectify, erase, restrict, and object to processing, to data portability, to withdraw consent, and to lodge a complaint with your supervisory authority. We process personal information on the legal bases described in Section 3 and transfer data as described in Section 17.
12.5 Nevada
Nevada residents may opt out of the sale of certain covered information by emailing privacy@custodyproof.com. We do not sell covered information as defined by Nevada law.
13. Automated Decision-Making & Profiling
We do not use automated processing or profiling to make decisions that produce legal or similarly significant effects about you without meaningful human involvement. AI features generate suggestions and summaries that you review and act on yourself; they do not make decisions for you. Where applicable law gives you a right to opt out of certain profiling, you may exercise it as described in Section 11.
14. Sensitive & Consumer Health Data
You control whether to upload sensitive information, including any health-related information. We process it solely to provide the Service at your direction and do not use it for advertising or to infer characteristics about you. We are not a HIPAA covered entity or business associate, and the Service is not intended to store Protected Health Information absent a separate written agreement, as described in our Terms of Service. Where a consumer-health-data law (such as the Washington My Health My Data Act) applies, we process consumer health data only as needed to provide the Service you request or as otherwise permitted with your consent, and you may contact us to exercise any rights you have under that law.
15. Children’s Privacy
Custody Proof is not directed to children under 13, children may not create accounts, and we do not knowingly collect personal information directly from children. Any data about a child in the Service is entered by an adult — a parent, guardian, or authorized professional — who is responsible for obtaining any necessary consents and for the accuracy and lawfulness of that data.
Consistent with the Children’s Online Privacy Protection Act (COPPA) and its 2025 amendments, we maintain a written information security program and a written data-retention practice for any child-related data, do not retain such data longer than reasonably necessary, and do not disclose it to third parties except as needed to operate the Service or as directed by the responsible adult. If you believe a child under 13 has provided personal information to us directly, contact privacy@custodyproof.com and we will delete it. We also comply with applicable state laws that provide additional protections for the data of known minors.
16. Recordings
If you use features that record or store audio or video, those recordings are part of your User Content. You are solely responsible for complying with all applicable recording, wiretapping, and consent laws, including all-party (two-party) consent requirements, and for obtaining required consents before recording. Recordings are stored and retained according to your account settings and Section 9.
17. International Data Transfers
We are based in the United States, and we process and store information in the United States and potentially other countries. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or other approved safeguards for cross-border transfers, and you may request a copy of the relevant safeguard by contacting us.
18. Third-Party Links & Services
The Service may link to or integrate with third-party websites and services, such as calendars and cloud storage. We are not responsible for the privacy practices of those third parties, and their use of your information is governed by their own privacy policies. Review them before connecting a third-party service.
19. Compelled Disclosure & Legal Process
We may disclose your information in response to a subpoena, court order, warrant, or other legal process, or when we reasonably believe disclosure is necessary to comply with applicable law, to protect the rights, safety, or property of Archuleta Group, our users, or others, or to enforce our Terms of Service. Where legally permitted and practical, we may attempt to notify you before disclosing your information.
20. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will notify you by email or in-Service notice and update the “Last Updated” date. Changes take effect when posted unless stated otherwise, and your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
21. Contact Us & Complaints
Privacy Officer — Custody Proof
PMB 260, 2121 Lohmans Crossing Rd, Ste 504, Lakeway, TX 78734
Email: privacy@custodyproof.com
If you have an unresolved concern, you may also have the right to complain to your state attorney general, to your data-protection or supervisory authority (EEA/UK), or, in the United States, to the Federal Trade Commission.
© 2026 Archuleta Group LLC. All rights reserved.