Privacy Policy

Effective date: May 1, 2026

1. Information We Collect

We collect information you provide directly, including your username, phone number, identity verification details (legal name, date of birth, country), and organization information. We also collect usage data, log data, and device information when you interact with the Platform.

2. How We Use Your Information

We use the information we collect to: provide, maintain, and improve the Platform; generate and manage your DNA Identity ID; verify your identity and credentials; send you service-related communications; comply with legal obligations; and detect and prevent fraud or abuse.

3. Encrypted Communications

Messages sent through ConnecDNA are encrypted end-to-end using AES-GCM encryption. ConnecDNA does not store or have access to the plaintext content of your messages. Message metadata (timestamps, thread participants) is stored to enable delivery and notification features.

4. Identity Data

Identity verification data (legal name, date of birth, government ID details) is stored securely and used solely for the purpose of verifying your identity and issuing your DNA ID. This data is never sold to third parties. Access is restricted to authorized ConnecDNA personnel for verification purposes only.

5. Data Sharing

We do not sell your personal information. We may share information with: service providers who assist in operating the Platform under confidentiality agreements; law enforcement or regulatory authorities when required by law; and other parties with your explicit consent. ConnecDNA-to-ConnecDNA credential sharing only occurs when you explicitly initiate a relationship or evidence exchange.

6. Data Retention

We retain your account information for as long as your account is active. Identity records and audit logs are retained for a minimum of 7 years to comply with regulatory requirements. You may request deletion of your account and associated data, subject to legal retention requirements.

7. Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, row-level security on all database tables, access controls, and regular security audits. No method of electronic storage or transmission is 100% secure; we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to or restrict processing of your data; and data portability. To exercise these rights, contact us through the Platform.

9. Cookies

ConnecDNA uses session cookies necessary for authentication and platform functionality. We do not use third-party tracking or advertising cookies.

10. Children's Privacy

The Platform is not directed to children under 18. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by updating the effective date. Continued use of the Platform after changes constitutes acceptance of the updated policy.