Privacy Policy & Cryptographic Vault Security
Effective Date: August 15, 2026 • Classification: Sacred Confidentiality (Amanah)
Core Commitment: Sacred Confidentiality (Amanah)
Marital contracts, financial dowries (Mahr), personal conditions, and family ceremony recordings represent some of the most intimate data individuals generate.
NikahContract.ai is architected around the sacred principle of Amanah (Trust & Confidentiality), employing server-enforced blind-intake boundaries, TLS in-transit encryption, AES-256 storage protection, and strict adherence to global data protection standards including GDPR and CCPA/CPRA.
Blind Intake & Role-Based Security Architecture
During pre-ceremony intake, a party cannot view the unfinalized wishes, Mahr figures, or private stipulations of their partner. Alignment occurs strictly through objective mediation algorithms.
The public verification gateway (/verify/[hash]) displays only non-sensitive metadata: Couple Names, Date, Madhab, and the SHA-256 Ledger Hash. Private financial terms remain restricted to the authorized couple vault.
Biometric, Video & Voice Data Policy
Real-Time Vocal Consent: Audio streams during the Ijab & Qubul exchange are processed in real time for consent confirmation, live multi-party broadcast, and ceremony record verification.
30-Day Retention Schedule: Raw ceremony video and audio streams are preserved for 30 calendar days following solemnization to permit guest recap viewing and video download, after which raw streams are permanently purged unless the couple purchases extended archival storage.
Zero Commercial Model Training: Voice audio and video captured during ceremonies are never sold, licensed, or used to train commercial foundation AI models.
Guest Ceremony Recaps (/g/[slug])
Guest ceremony recap pages display high-level celebratory information: couple names, date, madhab, and optional ceremony video playback. Intimate financial stipulations or intake responses are never exposed on guest recap pages.
Global Regulatory Compliance (GDPR / CCPA)
- GDPR (EU & UK): Right to erasure ("Right to be Forgotten") is fully supported across all user accounts. Users may request permanent deletion of their account data at any time.
- CCPA / CPRA (California, USA): We do not sell or share personal consumer data with third-party advertising networks or data brokers.
- Data Minimization: We collect only the minimum personal information required to execute valid religious contracts and facilitate civil registration.