C2FA ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and verification services. Bu site Shortmox Agency tarafından yapılmıştır.
Information We Collect
We collect the following types of information:
- Content Data: Photos, videos, and media files you capture or upload for verification
- Device Information: Device type, operating system version, and app version
- Usage Data: How you interact with the app, feature usage, and performance metrics
- Cryptographic Data: SHA-256 hashes, digital signatures, and verification receipts
- Contact Information: Only if you choose to contact us via email
How We Use Your Data
Your data is used for the following purposes:
- To provide content authenticity verification services
- To generate and verify digital signatures
- To improve app performance and user experience
- To ensure security and prevent fraud
- To comply with legal obligations
We do NOT:
- Sell your personal data to third parties
- Use your content for advertising
- Share your data with unauthorized parties
Data Security
We implement industry-standard security measures:
- Encryption: All data in transit uses TLS 1.3 encryption
- Secure Storage: Cryptographic keys stored in secure enclaves
- Access Control: Strict authentication for all API endpoints
- Regular Audits: Security assessments and penetration testing
- Incident Response: 24/7 monitoring and rapid response protocols
Data Sharing
We only share data in the following circumstances:
- Service Providers: Trusted partners who help operate our services (e.g., cloud hosting)
- Legal Requirements: When required by law or to protect our rights
- With Your Consent: When you explicitly authorize sharing
- Verification Parties: Public verification data is accessible via receipt IDs
All third parties are bound by strict confidentiality agreements.
Data Retention
We retain data according to these policies:
- Verification Receipts: Retained indefinitely (blockchain immutability)
- User Content: Stored for 30 days unless you delete it earlier
- Usage Logs: Retained for 90 days for security purposes
- Contact Data: Retained for 2 years after last interaction
You can request deletion of non-receipt data at any time.
Contact Us
For privacy-related questions or to exercise your data rights, please contact us.
This privacy policy is provided by Shortmox Agency. For users in Turkey, please also review our KVKK disclosure.