Privacy Policy
Last updated: April 8, 2026
1. Information We Collect
Attested Intelligence™ collects only the information necessary to provide our cryptographic governance services:
- Contact information (email, name, organization) when you request access or demos
- Cryptographic hashes of governed artifacts (not the artifacts themselves)
- Account identifiers and timestamps for seal/evidence records
- User-submitted contact form requests
What We Do NOT Collect
- Your file contents - Files are hashed locally; we do not store your file contents
- Biometric data - We do not collect biometric data of any kind
- Private keys - Cryptographic keys remain on your device
2. Lawful Basis for Processing
Under the General Data Protection Regulation (GDPR), we process personal data on the following lawful bases:
| Data Type | Lawful Basis | GDPR Reference |
|---|---|---|
| Strictly necessary cookies | Legitimate interest | Art. 6(1)(f) |
| Analytics cookies (if enabled) | Consent | Art. 6(1)(a) |
| Contact form submissions | Consent / Legitimate interest | Art. 6(1)(a), (f) |
| Service provision data | Contract performance | Art. 6(1)(b) |
3. How We Use Information
We use collected information to:
- Provide and maintain our cryptographic governance services
- Respond to inquiries and support requests
- Improve and optimize our platform
- Comply with legal obligations
4. Data Security
We implement industry-standard security measures including Ed25519 cryptographic signatures, SHA-256 hashing, and encrypted data transmission. Our systems are designed with privacy-preserving verification capabilities that allow proof of compliance without exposing sensitive data.
5. Data Retention
We retain data only as long as necessary to provide our services and comply with legal obligations. Specific retention periods are as follows:
| Data Type | Retention Period |
|---|---|
| Contact form submissions | 24 months or until request fulfilled |
| Analytics data (if consented) | 26 months |
| Cookie consent records | Duration of consent cookie (365 days) |
| Server logs (Vercel) | Per Vercel retention policy |
| Cryptographic receipts and evidence bundles | Per customer-specified policies |
6. Cookies
Cookies are small text files stored on your device by websites you visit. We do not use third-party advertising or behavioral tracking cookies. As of the date of this policy, our site does not set any non-essential cookies.
Our hosting provider (Vercel) may set technical cookies required for content delivery. These are strictly necessary for the website to function. If we add analytics or other non-essential cookies in the future, this section will be updated and a cookie consent mechanism will be implemented.
You can control cookies through your browser settings. Here are links to cookie management instructions for common browsers:
7. Third-Party Services & Tracking
We use third-party services for hosting and email delivery. These services are selected for their security and privacy practices.
- Vercel Inc. (United States) - Website hosting and deployment
- Formspree / Resend - Contact form processing and email delivery
No third-party behavioral trackers: We do not use Google Analytics, Facebook Pixel, or other third-party behavioral tracking services on our websites.
8. Data Processors and International Transfers
We use the following third-party service providers who may process your data:
- Vercel Inc. (United States) - Website hosting and deployment. Vercel Privacy Policy
Data collected through our websites may be transferred to and processed in the United States. For users in the European Economic Area (EEA), these transfers are conducted pursuant to Standard Contractual Clauses (SCCs) as adopted by the European Commission, or other appropriate safeguards under GDPR Article 46.
9. Your Rights
9a. Rights for EEA/UK Residents (GDPR)
If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent at any time (Art. 7(3))
- Right to lodge a complaint with a supervisory authority
To exercise these rights, contact us at privacy@attestedintelligence.com. We will respond within 30 days.
9b. Rights for California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale of personal information
- Right to non-discrimination for exercising privacy rights
We do not sell personal information.
10. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.
11. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we learn we have collected data from a child under 16, we will delete it promptly.
12. Contact Us
For privacy-related inquiries, contact us at privacy@attestedintelligence.com