Legal

Privacy Policy

ChainIT Inc. Effective Date: October 28, 2025

1Introduction

This Privacy Policy (“Policy”) explains how ChainIT Inc. and its affiliates (“ChainIT,” “we,” “our,” or “us”) may collect, use, disclose, and otherwise process personal information through our websites, including www.chainit.com (“Sites”), mobile applications (“Apps”), your ChainIT® account (“Account”), and our other products, platforms, and services that link to this Policy, including ChainIT ID, a Web3 digital identity solution, and Pactvera, a Web3 digital agreement and execution solution (the “Services”).

Please note that certain of our Services may include additional privacy disclosures relevant to the personal information that we collect through those Services. These disclosures will be provided when you interact with the relevant sections of those Services.

2Personal Information Collection

We collect personal information when you interact with our Services, which may include information in the following categories:

Identifiers and Contact Information: name, address, telephone number, email address, signature.
Biometric Data: facial geometry and liveness scans used for identity verification.
Government ID Data: driver’s license, passport, and other government-issued ID, and the information captured in the same, including date of birth, ID number, issue date, expiration date, issuing state/jurisdiction, and any other information captured from a government-issued ID.
Images: photographs from device cameras and government-issued IDs.
Device Data: device ID, device fingerprints, operating system, browser entropy, IP address.
Location Information: location inferred from IP address, mobile device location, precise geolocation, and location captured from ChainIT kiosks.
Financial Information: payment details (processed via third-party providers).
Activity and Usage Data: information about interactions with the Services, access logs, and records of your opening, reading, and signing documents.
Communications Content: information you provide when you contact us using a webform, help ticket, or other form of communications.

3Personal Information Sources

We may collect personal information from a variety of sources, including:

From you when you enter it into the Services, including through the App and forms on the Sites.
Automatically when you use the Services, including through Cookies (defined below), our vendors, and your device.
From ChainIT kiosks that validate identity.
From our business partners who use the Services to verify identity.
From our identity verification partners and vendors that provide know-your-customer (“KYC”), anti-money laundering (“AML”), and other background and record checks.
From service providers and vendors that help us operate our business, including providing our technical infrastructure.

The Services also generate a non-custodial wallet, private key, nonce (Auth0 Token), and Validated Data Token to provide your Account with access to the blockchain.

4Personal Information Access and Use

When you create and use an Account, you provide personal information to use the Services, including to:

Verify your identity through ChainIT ID, including through location and background checks.
Securely execute Pactvera digital agreements.
Conduct KYC and AML compliance checks.
Create attributes that you can share with third parties to confirm your identity and provide audit-ready records for legal enforceability.

When you visit our Sites, we may use your Device Data, Location Data, Activity and Usage Data, and Communications Content to understand how you interact with our Sites, perform analytics, personalize our Service, respond to your requests, and otherwise provide our Services and operate the Sites.

We may also use your Contact Information and Communications Content to communicate with you regarding our products, your requests, billing, and our Services.

When you visit the Sites or otherwise use our Services, we may also use Device Data, Location Information, Transaction Data, Financial Information, Usage Data, Activity Data, and Communications Data to:

Provide our Services, including maintaining, operating, optimizing, and providing access to our Services; identifying visitors; monitoring, analyzing, and evaluating usage, trends, and performance; making our Services more intuitive; repairing or improving the quality of the Services; and tracking and responding to quality issues.
Operate our business, including processing transactions; managing accounts; performing system administration; improving our business, products, and Services; and managing relationships with our customers, partners, and vendors.
Maintain our security and integrity, including protecting and securing our Services and information technology systems; authenticating users; and detecting and protecting against malicious, deceptive, and illegal activity.
Comply with legal requirements and other obligations, including managing risks, investigations, reporting, and other compliance activities; identifying, investigating, and responding to fraud and illegal activities; and enforcing compliance with applicable laws, regulations, or legal processes.

Phone Number & SMS Usage

We collect and use your phone number to send transactional SMS messages related to your account and use of the ChainIT platform. This includes One-Time Passwords (OTP) for authentication and identity verification, as well as operational notifications such as alerts for API/webhook failures, system degradation or service disruptions, and confirmation of account closure or termination. Your phone number is not used for marketing or promotional purposes and is handled in accordance with applicable data protection laws.

5Personal Information Disclosure

We may disclose personal information to:

Our affiliated entities to operate our business.
Our business partners and other parties requested by you so you can verify your identity through ChainIT ID, securely execute Pactvera digital agreements, and otherwise utilize the functionalities of our Services when you authorize such parties to access your personal information.
Our identity verification partners and vendors that provide KYC, AML, and other background and record checks.
Our service providers, contractors, and other vendors that help us operate our business, including providing our technical infrastructure, processing payments, supporting website tracking technologies, analyzing use of our Services, and improving and securing our Services.

6Biometric Policy

For information about how we collect, use, disclose, retain, and otherwise process biometric data, please visit our Biometric Policy.

7Cookies and Other Online Tracking Technologies

We and our vendors use cookies, software development kits (SDKs), and other online tracking technologies (collectively “Cookies”) to:

Collect and analyze information about your interactions with our Services, such as by collecting information about which pages you viewed or links you clicked.
Store information to improve our Services’ functionality.
Help you access and navigate our Services more efficiently.
Recognize your preferences, so that you do not need to enter the information each time you visit our Services.
Safeguard and detect fraud on our Services.

We and our vendors may collect personal information about your online activities over time and across different devices and websites when you visit our Services, and link information collected through Cookies to other information collected about you.

Your web browser may have settings that allow you to transmit a “Do Not Track” signal when you visit various websites or use online services. Like many websites, our Sites are not designed to respond to “Do Not Track” signals received from browsers. To learn more, visit allaboutdnt.com.

You may set your browser to notify you of or decline the receipt of Cookies; however, certain features of our Sites may not function properly or be available if your browser is configured to disable Cookies.

8Interactive Features and Integrations

We may engage vendors to provide certain interactive features on the Services. Your use of these interactive features is voluntary. When you use these features, both we and our vendors or third parties that support the feature may receive and retain the information that you submit.

For example, we may offer an interactive chat feature on our Sites to answer questions and for other customer service purposes. When you participate in the interactive chat, either with a virtual or live agent, the contents of the chat may be captured and kept as a transcript.

Certain functionalities on our Services permit interactions between our Services and external services, such as social networks (“Social Features”). For example, Social Features enable you to “like” or “share” our content and pull or push information to or from our Sites. If you use Social Features, information you post or provide access to may be publicly displayed by the third-party service you use.

We may offer third-party integrations on our Services. If you choose to connect a third-party account to our system, you should refer to that party’s privacy policy for information on how your personal information is processed and safeguarded.

9Mobile Devices and Applications

We may disclose your personal information to our vendors, service providers, contractors, providers, and other parties, as further described in the Personal Information Disclosure section above.

We will retain your personal information processed through our Apps for only as long as we reasonably consider it necessary for achieving the purposes set out in this Policy, or for as long as we are legally required or permitted to retain it.

If you no longer wish to provide your personal information through our App, you may uninstall our App from your device. Note that deleting the App will not delete your Account or any information we previously collected via the App, nor does it affect our personal information collection through our other Services. Please see the section on User Rights and Choices below for information on deleting your Account.

10Links to Other Websites

Our Services may contain links to other websites or online services that offer goods, services, or information. Some of these websites may appear as windows-within-windows on our Services. When you click on one of these links, you will be leaving our Services and will no longer be subject to this Policy.

We are not responsible or liable for the information collection practices of the other websites that you visit and urge you to review their privacy policies and other terms to learn more about their data practices. The inclusion of a link to another website or online service does not imply our endorsement.

11User Rights and Choices

We may use your personal information to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving these types of communications from us by following the unsubscribe link or instructions provided in any email we send.

We provide the following choices related to your personal information, many through self-service tools in the Services:

Confirmation and Knowledge: You may confirm that we process your personal information and request details about the personal information we process.
Access and Portability: You may request a copy of your personal information.
Correction: You may update your personal information in your Account or request that we correct personal information that we maintain about you and you believe is inaccurate.
Deletion: You may request that we delete certain personal information about you and you may manually delete your personal information in your Account or your entire Account.
Sales and Sharing for Targeted Advertising: ChainIT does not sell personal information or share personal information for targeted advertising.
Profiling: You may opt out of the processing of your personal information for purposes of profiling in furtherance of a decision that produces a legal or similarly significant effect.

How to Submit a Request

Due to the decentralized nature of the Services, ChainIT is unable to access much of your personal information. If you would like to access this data, delete it, or correct it, you may do so by following instructions at support.chainit.com.

Additionally, requests to exercise the above choices and rights can be submitted to privacy@chainit.com. If you submit certain requests, we may request additional information to verify your identity. You may be able to designate an authorized agent to make requests on your behalf. We will not discriminate against you for choosing to exercise any of these choices or privacy rights.

If we deny one of your privacy rights and you believe it was denied in error, you have the right to request an appeal by emailing privacy@chainit.com.

12Retention and Deletion

You have exclusive control over the personal information you enter into your Account and we will maintain such information in our protected systems until you delete your Account. You can initiate an account deletion through our automated systems.

We may keep personal information we process for as long as necessary for the purposes described in this Policy or otherwise authorized by law. This generally means that we maintain the personal information for as long as one of the following apply:

The personal information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information.
The personal information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the personal information was collected.
The personal information is reasonably required to protect or defend our rights or property.
We are otherwise required or permitted to keep the personal information by applicable laws or regulations.

Where personal information is collected and used for more than one purpose, we will retain it until the purpose with the latest period expires.

Please visit our Biometric Policy for more information about how long we retain Biometric Information.

13Data Security

We implement reasonable technical, organizational, and administrative measures to safeguard personal information against unauthorized or unlawful processing and against accidental loss, destruction, or damage. However, because transmission via the internet is not completely secure, we cannot guarantee the security of any information we may have collected from or about you through our Services.

For validation integrity information, see ChainIT’s Touch Audit™ technical overview in the ChainIT Risk Management and Security Framework.

14International Transfers

ChainIT is based in the United States. By accessing our Services, you acknowledge that your personal information may be transferred to and processed in jurisdictions outside your own, including the United States.

Cross-border transfers of personal information are subject to appropriate contractual safeguards. Please be aware that the data protection laws and regulations that apply to personal information transferred to the United States or other countries may be different from the laws in your country of residence.

15Changes to This Policy

We may update this Policy from time to time. Updates will be posted in the Services with a revised “Effective Date.” Your continued use of the Services after any update to this Policy will constitute your acceptance of the changes.

16Contact Us

For questions about this Policy or other privacy or compliance inquiries, please contact us:

Privacy & Compliance privacy@chainit.com