Privacy Policy

1. Introduction

ELONZYA INC. ("ELONZYA," "TRUSTTICA," "we," "our," or "us") provides TRUSTTICA, an identity and presence verification platform designed to help individuals and organizations verify identity, confirm presence when applicable, and maintain records relating to verification interactions.

This Privacy Policy explains how information is collected, used, disclosed, protected, retained, and deleted when you use the TRUSTTICA website, mobile applications, verification services, dashboards, APIs, and related services (the "Services").

By using the Services, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, TRUSTTICA will request consent separately — see our Biometric Information & Consent Notice.

2. Information We May Collect

Depending upon the feature used, we may process:

Account information

• Name
• Email address
• Telephone number
• Account type
• Authentication information
• Account preferences

Identity-verification information

• Government-issued identification
• Name appearing on identification
• Identification type
• Issuing country/jurisdiction
• Identification attributes required for verification
• Verification status and results

Images and identity-verification media

• Identification-document images
• Selfie images
• Images showing an individual with identification where required
• Liveness-verification inputs/results

Biometric-related information

Some identity-verification and liveness functions may involve analysis of facial characteristics or other information that may constitute biometric information or biometric identifiers under applicable law.

A separate Biometric Information and Consent Notice applies where required.

Presence/location information

When a user initiates or participates in a feature requiring presence confirmation, TRUSTTICA may process device location or other presence-related signals necessary to determine whether the participant is within the required proximity or location context. TRUSTTICA requests device permission before accessing location where required by the operating system or applicable law. See our Location & Presence Data Notice.

Verification interaction information

• Initiator and recipient identifiers
• Verification request
• Date and time
• Verification status
• Presence-confirmation status
• Trust Token/session identifier
• Relevant audit events
• Evidence Vault records

Device and security information

• IP address
• Device/browser information
• Application version
• Login and authentication events
• Security events
• Error and diagnostic information
• Fraud/risk signals where implemented

Transaction/subscription information

Where paid services are purchased, card and payment details are processed directly by TRUSTTICA's payment providers, Stripe and Paystack. TRUSTTICA does not store full card numbers or card security codes — only a provider-issued customer/transaction reference, the plan, amount, currency, and status of each transaction.

3. How We Use Information

We may process information to:

• create and secure accounts
• authenticate users
• verify email addresses and telephone numbers
• perform identity verification
• perform selfie/document matching and liveness verification where applicable
• facilitate presence confirmation
• generate verification results and Trust Tokens
• maintain Evidence Vault records
• detect and prevent fraud, impersonation and abuse
• protect users and the Services
• provide customer support
• process subscriptions
• maintain audit and security records
• troubleshoot and improve the Services
• satisfy legal obligations
• investigate violations of our Terms
• respond to valid legal process

4. Verification Is Not a Background Check

TRUSTTICA primarily verifies identity and/or presence according to the particular workflow used.

Unless a feature expressly states otherwise, a successful TRUSTTICA verification does not mean that TRUSTTICA has performed a criminal-background check, credit check, employment investigation, or comprehensive assessment of the person's character, intentions, safety, financial condition or history.

A verified person can still engage in misconduct.

5. Information Sharing

Information may be disclosed to:

• identity/KYC/liveness service providers
• cloud/infrastructure providers
• communications providers used for OTP/SMS/email
• payment processors
• security/fraud-prevention providers
• authorized business customers where a verification was initiated within their legitimate workflow
• professional advisers
• authorities where disclosure is legally required
• a successor organization in a lawful corporate transaction

Service providers receive only information reasonably necessary for their function and are subject to appropriate contractual and data-protection requirements. See our Subprocessors / Service Providers page for the current list.

6. We Do Not Sell Identity or Biometric Data

TRUSTTICA does not sell or lease biometric identifiers or identity-verification information for advertising purposes.

7. Security

TRUSTTICA uses administrative, technical and organizational safeguards designed to protect personal information. No internet-connected system can guarantee absolute security. TRUSTTICA's controls are designed to protect the integrity of verification records and detect unauthorized alteration — see Security at TRUSTTICA for details.

8. Data Retention

TRUSTTICA retains categories of information only for as long as reasonably necessary for the purposes for which they were collected, applicable contractual requirements, fraud/security needs and legal obligations. Specific retention periods are published in the Data Retention & Deletion Policy once confirmed against the production backend and reviewed by legal.

9. User Rights

Depending on jurisdiction, users may have rights to:

• access
• correct
• delete
• obtain a copy
• restrict certain processing
• withdraw applicable consent
• appeal certain privacy decisions
• exercise other statutory privacy rights

To exercise any of these rights, contact support@trusttica.com with the subject line "Privacy Request," or use the button below.

10. Account Deletion

Users may initiate account deletion from their account settings or at trusttica.com/account-deletion. Deletion may be subject to limited lawful retention obligations, which are clearly identified to the user during the deletion flow.

11. Children

TRUSTTICA is not intended for independent use by children below the minimum age permitted by applicable law unless a particular service has been expressly designed and lawfully configured for such use with appropriate parent/guardian or organizational authorization. See Children's Privacy.

12. Changes

Material changes will be reflected by updating the "Last Updated" date above and, where legally required, by providing additional notice or obtaining renewed consent.

13. Contact

TRUSTTICA / ELONZYA INC.
Privacy inquiries: support@trusttica.com
Support telephone: +1 (512) 884-0373