Security and data handling How Etchv handles your API keys, files and watermarks: encryption, retention, access, and what to check before you go live.
Authentication and permissions
Account administration Requires a signed-in session. An API key can’t stand in for one.
Watermarking operations Use API keys, each scoped to the permissions you choose.
Organizations and roles Control who can reach keys and settings.
Your part Keep machine credentials on your server, never in public browser code. API-key lifecycle
Expiry Every key expires in 1–365 days. The default is 90.
Storage Etchv stores a SHA-256 digest, never the original key.
Revocation Any key can be revoked.
Every request The API checks key status and current membership. Content and reference handling
Uploaded files Stored encrypted while they are processed.
Each successful embed Saves the original and the verified output as assets.
Hosted files Kept for up to a year while your subscription is active, and for 30 days on the trial or after a subscription ends.
Your own bucket Results sent there follow that bucket’s retention.
Asset records Stay, with any optional metadata, until you delete them.
Processing copies Deleted after seven days.
Job results Available for 24 hours.
Job and billing records Kept for accounting and replay protection.
Original embedding JSON Not kept automatically. Encryption and data use
In transit Traffic to the website and API is encrypted with TLS 1.2 or later.
At rest Stored files are encrypted. Storage refuses unencrypted connections and public access.
Model training Never on your files. The watermarking model is fixed, and your content is not sent to third-party AI providers.
Staff access People at Etchv don’t look at your files, unless you ask for help, an abuse or security investigation needs it, or the law requires it.
Breach notice If a breach affects your personal information, Etchv notifies you and the relevant authorities without undue delay, as the law requires. Privacy-aware attribution
Recipient mapping Keep it in your own records.
Embedded data Use opaque references, and keep personal information out.
Digests A digest is not encryption. It does not make sensitive input safe to disclose. Deployment and assurance
SOC 2 In progress. Etchv is not yet certified.
Availability Scale and Business target 99.95% a month. Enterprise agreements can include a contractual SLA.
Watermark survival No watermark is guaranteed to survive every edit.
Sensitive content Before you share it, ask us about hosting region, retention, incident handling and contract terms. Report a concern
Include A short description and steps to reproduce.
Leave out Live credentials and sensitive customer content.
Beautifully invisible.Distinctly yours. Start free and watermark your first image, PDF or video in minutes.
7 days · 200 credits · No card required