Privacy Policy

Last updated: June 2026

Bu site Shortmox Agency tarafından yapılmıştır

C2FA ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and verification services. Bu site Shortmox Agency tarafından yapılmıştır.

Information We Collect

We collect the following types of information:

  • Content Data: Photos, videos, and media files you capture or upload for verification
  • Device Information: Device type, operating system version, and app version
  • Usage Data: How you interact with the app, feature usage, and performance metrics
  • Cryptographic Data: SHA-256 hashes, digital signatures, and verification receipts
  • Contact Information: Only if you choose to contact us via email

How We Use Your Data

Your data is used for the following purposes:

  • To provide content authenticity verification services
  • To generate and verify digital signatures
  • To improve app performance and user experience
  • To ensure security and prevent fraud
  • To comply with legal obligations

We do NOT:

  • Sell your personal data to third parties
  • Use your content for advertising
  • Share your data with unauthorized parties

Data Security

We implement industry-standard security measures:

  • Encryption: All data in transit uses TLS 1.3 encryption
  • Secure Storage: Cryptographic keys stored in secure enclaves
  • Access Control: Strict authentication for all API endpoints
  • Regular Audits: Security assessments and penetration testing
  • Incident Response: 24/7 monitoring and rapid response protocols

Data Sharing

We only share data in the following circumstances:

  • Service Providers: Trusted partners who help operate our services (e.g., cloud hosting)
  • Legal Requirements: When required by law or to protect our rights
  • With Your Consent: When you explicitly authorize sharing
  • Verification Parties: Public verification data is accessible via receipt IDs

All third parties are bound by strict confidentiality agreements.

Data Retention

We retain data according to these policies:

  • Verification Receipts: Retained indefinitely (blockchain immutability)
  • User Content: Stored for 30 days unless you delete it earlier
  • Usage Logs: Retained for 90 days for security purposes
  • Contact Data: Retained for 2 years after last interaction

You can request deletion of non-receipt data at any time.

Contact Us

For privacy-related questions or to exercise your data rights, please contact us.

This privacy policy is provided by Shortmox Agency. For users in Turkey, please also review our KVKK disclosure.