Privacy Policy

1. Controller

The data controller is OPENTIA, SL (Tax ID: ESB87829693), registered at C/ Paseo de la Castellana 40-8º, Madrid, 28046, Spain. Privacy contact: legal contact form.

2. Data we process

• Authorized staff account data (username, TOTP authentication) for the expert panel.
• Payment data processed by Stripe (we do not store full card numbers).
• IOTA wallet address supplied by the user for credit minting (never the mnemonic or private keys).
• Technical parameters for verification and forensic reports (object_id, network, profile_code, hashes, Merkle proofs, public resource URL when applicable).
• Server technical logs required for security and operations.

3. Purposes

• Provide web notarization, credit purchase, public verification and forensic report services.
• Process payments and mint on-chain credits to the address indicated by the user.
• Comply with legal and security obligations.

4. Legal basis

Performance of a contract or pre-contractual steps, legitimate interest in service security, and legal obligations where applicable.

5. Processors and third parties

• Stripe — payment processing.
• Hosting and infrastructure providers under contract.
• IOTA Rebased — public ledger; notarizations and mints are visible on-chain.

6. No custody of secrets

Attestia does not custody user mnemonics, seeds or private keys. The sovereign identity (24-word account) remains under the exclusive control of the user in their wallet or desktop/mobile clients.

7. Retention

We retain data for as long as needed to provide the service, handle claims and meet legal duties. On-chain records are immutable by design of the ledger.

8. Your rights

You may exercise access, rectification, erasure, objection, restriction and portability rights where applicable via the legal contact form. You may also lodge a complaint with the competent supervisory authority.

9. Contact

Privacy and legal: legal contact form. Product support: support form.