Legal
Privacy Policy
Identity Inc. stores attestations, hashes, DIDs, and operational metadata. Passport and ID images stay with the IDV provider.
What we collect
Work email, organization name, end-user email and mobile phone number when used for one-time verification codes and account reachability, account short name, billing identifiers (Stripe customer / subscription ids), API request logs (redacted), device/IP hashes for anti-abuse, and verifiable credential hashes.
What we do not store
Government ID images, full legal names in cleartext from ID documents, or raw biometric templates.
Processors
Infrastructure hosting, Stripe (payments), Twilio (transactional SMS delivery when SMS is enabled), optional Resend (receipts), optional OpenAI (checkout advisor), Google Analytics 4 on the public marketing site (after consent; no advertising features), and Shufti Pro (or equivalent IDV) when live KYC is enabled.
SMS and mobile information
When an end user provides a mobile number and selects “Send Verification Code” in a partner application (for example Blocksfinity Vaulta account registration), Identity Inc. sends a transactional one-time SMS verification code to confirm that number. Message and data rates may apply. Users may reply STOP to opt out or HELP for assistance. Mobile information is not shared with third parties or affiliates for marketing or promotional purposes. Messaging providers such as Twilio receive numbers only as processors to deliver transactional messages the user initiated or that are necessary for the verified-contact service.