Privacy Policy
Compliant to India Jurisdiction
# Privacy Policy
## Effective Date
April 1, 2026
---
# 1. Introduction
Formalcy (“Platform”, “we”, “our”, or “us”) is a platform designed for accountable public statements issued under verified identities.
This Privacy Policy explains:
* what information we collect, * how we use it, * how statements and verification records are handled, * and the rights available to users regarding their personal data.
This Policy is intended to be read together with the Platform’s Terms of Use and related policies.
---
# 2. Applicability
This Privacy Policy applies to:
* users of the Formalcy website and applications, * verification applicants, * verified users, * verifiers, * and visitors interacting with the Platform.
By using the Platform, you consent to the collection and processing of personal data in accordance with this Policy and applicable law.
---
# 3. Information We Collect
The Platform may collect the following categories of information.
## 3.1 Account Information
When creating an account, users may provide:
* name, * email address, * password, * jurisdiction details, * profile information, * and other account-related data.
---
## 3.2 Verification Information
For identity verification purposes, users and verifiers may provide:
* identity documents, * professional credentials, * verification codes, * jurisdictional details, * photographs, * or other supporting information.
Verification-related records may be retained for integrity, compliance, and dispute-resolution purposes.
---
## 3.3 Statement Data
The Platform stores:
* submitted statements, * publication timestamps, * edits made during waiting periods, * withdrawal records, * QR-linked records, * and related metadata.
Published statements form part of a continuous platform record.
---
## 3.4 Technical Information
We may automatically collect:
* IP addresses, * browser information, * device identifiers, * access timestamps, * cookies, * session identifiers, * and diagnostic logs.
---
# 4. Purpose of Data Collection
Information may be collected and processed for purposes including:
* account management, * identity verification, * operation of the Platform, * statement publication, * fraud prevention, * platform integrity, * dispute handling, * legal compliance, * communication with users, * security monitoring, * and improvement of services.
---
# 5. Public Nature of Statements
Users are specifically advised that:
* published statements are publicly visible, * statements are associated with verified identities where applicable, * statements may remain visible even after withdrawal, * and statements are intended to form part of a continuous public record.
Users should avoid publishing sensitive personal information unless necessary and intended for public disclosure.
---
# 6. Verification and Accountability Records
Verification records and related audit trails may be retained in order to:
* preserve chain-of-trust integrity, * investigate misuse, * review verification actions, * maintain platform accountability, * and comply with legal obligations.
Such records may include:
* verifier actions, * approval timestamps, * rejection reasons, * and associated jurisdictional records.
---
# 7. Waiting Period and Statement History
The Platform may temporarily store:
* draft statements, * unpublished statements, * edits, * and withdrawal actions.
Published statements may remain part of platform history even if later withdrawn.
The Platform does not ordinarily provide permanent deletion of published statements in order to preserve continuity and integrity of record.
---
# 8. QR Code and External Publication
Statements may be linked through QR codes for verification and authentication purposes.
Users who publish or distribute QR-linked statements externally, including through print or media publications, acknowledge that such statements may become publicly accessible to third parties.
---
# 9. Cookies and Session Data
The Platform may use cookies and related technologies for:
* authentication, * session management, * security, * analytics, * and user experience improvement.
Users may modify browser settings to restrict cookies; however, certain platform functions may be affected.
---
# 10. Sharing of Information
We do not sell personal data.
Information may be shared:
* with verification participants, * with service providers assisting platform operations, * where legally required, * pursuant to lawful governmental or judicial requests, * for fraud prevention, * or for enforcement of platform policies.
Public statements and associated public profile information may remain accessible to users of the Platform.
---
# 11. Data Security
Reasonable technical and organisational measures are implemented to protect information from:
* unauthorised access, * misuse, * loss, * alteration, * or disclosure.
However, no digital system can guarantee absolute security, and users acknowledge the inherent risks of online communication.
---
# 12. User Rights
Subject to applicable law, users may have rights relating to:
* access to personal data, * correction of inaccurate information, * updating account information, * withdrawal of consent where applicable, * grievance submission, * and account closure requests.
Certain records may nevertheless be retained where required for:
* legal compliance, * dispute resolution, * security, * audit purposes, * or continuity of platform records.
---
# 13. Compliance with Indian Law
The Platform seeks to operate in a manner consistent with applicable Indian law, including:
* the Digital Personal Data Protection Act, 2023, * the Information Technology Act, 2000, * and applicable intermediary-related regulations.
Nothing in this Policy shall be interpreted as limiting any statutory rights available under applicable law.
---
# 14. Children and Minors
The Platform is not intended for use by persons who are not legally competent to enter into binding arrangements under applicable law.
Additional verification or restrictions may apply in relation to minors where permitted.
---
# 15. Data Retention
Information may be retained:
* for operational purposes, * for legal compliance, * for integrity of platform records, * for audit and verification purposes, * and for prevention of misuse.
Retention duration may vary depending on the nature of the information.
---
# 16. Grievance and Contact
For privacy-related concerns, data requests, or grievances, users may contact:
Email: [su@formalcy.com](mailto:su@formalcy.com)
Users are requested to include:
* registered email address, * jurisdiction, * and a brief description of the concern.
---
# 17. Changes to this Policy
This Privacy Policy may be updated periodically.
Material updates may be communicated through:
* platform notices, * email communication, * or updated publication on the Platform.
Continued use of the Platform after updates may constitute acceptance of the revised Policy.
---
# 18. Final Note
Formalcy is designed around the principles of identity, accountability, continuity, and traceability of public statements.
Users are encouraged to understand the public and enduring nature of statements issued through the Platform and to participate responsibly.