Privacy Policy

1. Introduction

Welcome to Defenty. This Privacy Policy explains how Defenty ("we," "our," or "us") collects, uses, discloses, and protects your personal information when you use our digital identity protection platform and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Account Information: Name, email address, phone number, and password when you create an account
• Profile Information: Security preferences, notification settings, and account recovery information
• Contact Information: Emergency contacts and trusted persons you designate for account recovery purposes
• Security Assessment Data: Information about your digital accounts' security status (we do not store passwords or login credentials)

2.2 Technical Information

• Device Information: IP address, browser type, operating system, and device identifiers
• Usage Data: How you interact with our Service, features used, and time spent
• Log Data: Server logs, error reports, and performance data
• Cookies and Tracking: We use cookies and similar technologies to enhance your experience

2.3 Information We Do NOT Collect

Importantly, Defenty does NOT collect, store, or have access to:

• Your social media passwords or login credentials
• Content from your social media accounts (posts, messages, photos)
• Banking or financial account information
• Government identification numbers (except where legally required)

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Provide and maintain our digital protection services
• Conduct security assessments and generate security scores
• Monitor for data breaches and security threats
• Provide emergency response and account recovery assistance
• Send security alerts and notifications

3.2 Communication

• Respond to your inquiries and support requests
• Send important service updates and security notifications
• Provide educational content about digital security
• Notify emergency contacts when authorized by you

3.3 Service Improvement

• Analyze usage patterns to improve our Service
• Develop new features and security tools
• Conduct research on cybersecurity trends
• Prevent fraud and abuse of our Service

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Information

Defenty does not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Limited Sharing

We may share your information only in the following circumstances:

• Emergency Contacts: When you explicitly request notification of trusted contacts during a security incident
• Service Providers: With trusted third-party vendors who assist us in providing our Service (under strict confidentiality agreements)
• Legal Requirements: When required by law, court order, or government request
• Safety and Security: To protect our users, prevent fraud, or respond to security threats
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with user notification)

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit and at rest using AES-256 encryption
• Access Controls: Strict access controls and authentication for our staff
• Regular Audits: Regular security assessments and penetration testing
• Secure Infrastructure: Our servers are hosted in secure, certified data centers
• Zero-Knowledge Architecture: We cannot access your sensitive account credentials

6. Data Retention

We retain your information for as long as necessary to provide our Service and comply with legal obligations:

• Account Data: Retained while your account is active and for 12 months after closure
• Security Logs: Retained for 24 months for security and fraud prevention
• Communication Records: Retained for 36 months for support and legal purposes
• Emergency Response Data: Retained for 60 months for incident reference and improvement

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access your personal information we hold
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Export your data in a portable format
• Opt out of non-essential communications
• Restrict certain processing of your information

7.2 Cookie Management

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our Service.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

9. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

10. Third-Party Services

Our Service may contain links to third-party websites or services. This Privacy Policy does not apply to such third-party services. We recommend reviewing the privacy policies of any third-party services you access.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website
• Sending you an email notification
• Displaying a prominent notice in our Service

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Information

13. Regulatory Information

13.1 GDPR Compliance (EU Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to data portability
• The right to object to processing
• The right to lodge a complaint with a supervisory authority
• The right to withdraw consent at any time

13.2 CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information is collected
• The right to delete personal information
• The right to opt-out of the sale of personal information
• The right to non-discrimination for exercising CCPA rights

This Privacy Policy is effective as of January 1, 2025, and was last updated on January 1, 2025.