Privacy Policy

Last updated: December 2, 2025

Our Commitment to Privacy

At Identa, privacy is at the core of everything we do. We built our platform on the principle that your data belongs to you. Our zero-knowledge architecture ensures that you maintain complete control over your personal information.

1. Information We Collect

Information You Provide

  • Account information (email address, name)
  • Identity documents you choose to store in your vault
  • Profile information you voluntarily provide
  • Communications you send to us

Information Collected Automatically

  • Log data (IP address, browser type, pages visited)
  • Device information (device type, operating system)
  • Usage data (features used, actions taken)

2. How We Protect Your Data

We implement industry-leading security measures to protect your data:

  • End-to-End Encryption: All data is encrypted at rest and in transit using AES-256 encryption
  • Zero-Knowledge Architecture: Your encryption keys never leave your devices; we cannot access your encrypted data
  • Shamir Secret Sharing: Your master key is protected using distributed secret sharing (5 parts, 3 required)
  • User-Controlled Access: Only you decide who can access your data
  • Immutable Audit Trails: All access is logged with tamper-proof records

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the Service
  • Verify your identity when you access your account
  • Process transactions and send related information
  • Send technical notices, updates, and security alerts
  • Respond to your comments, questions, and support requests
  • Monitor and analyze usage patterns to improve the Service
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities

4. Data Sharing

We do not sell your personal data. We may share your information only in these circumstances:

  • With Your Consent: When you explicitly authorize sharing with specific companies
  • Service Providers: With trusted partners who assist in operating our Service
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Your Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate data
  • Deletion: Request deletion of your personal data
  • Export: Download your data in a portable format
  • Restriction: Limit how we process your data
  • Objection: Object to certain processing of your data
  • Withdraw Consent: Revoke previously given consent at any time

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain it.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with GDPR and other applicable data protection laws.

8. Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you signed in
  • Remember your preferences
  • Understand how you use our Service
  • Improve our Service based on usage patterns

You can control cookies through your browser settings.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn we have collected such information, we will delete it promptly.

10. GDPR Compliance

We are committed to GDPR compliance. Our legal bases for processing include:

  • Consent: When you explicitly agree to processing
  • Contract: When processing is necessary to provide our services
  • Legal Obligation: When required by law
  • Legitimate Interests: For our business operations that don't override your rights

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us.