Legal
Privacy Policy
Last updated:
This Privacy Policy explains how Armoreal collects, uses, discloses, retains, and protects personal information when you visit our website, contact us, create or administer an account, or use our controlled demo and identity-protection services.
Information we collect
Depending on how you interact with Armoreal, we may process:
Account and administration information
- Email address, user ID, account status, assigned role, and account creation date.
- Invite-code and access-related records needed to manage invitation-based access.
- Administrative, manager, delegation, and permission records associated with an account.
- Records associated with use of protected demo, verification, or account-management features, including status and activity timestamps.
Passwords are handled by our authentication service providers. Armoreal does not store plaintext passwords in its application database.
Verification and sensitive information
- Photos, selfies, or other identity-related information submitted or processed when a user accesses an identity-verification feature.
- Verification-related information, such as status, result, timestamps, attempt count, and review status.
- Information reasonably necessary to complete a requested manual or exception review.
Depending on the feature and configuration, certain information may be processed temporarily or retained for a limited period to provide the requested service, support security, resolve disputes, or meet applicable legal requirements.
Forms and communications
- Information submitted through contact, access, support, partnership, and demonstration forms, including name, work email, organization, role or title, inquiry type, and message.
- Support, partnership, access, demonstration, and other communications with us.
Information collected automatically
- Strictly necessary session cookies used for authentication and security.
- Limited device, browser, request, technical, security, and error information needed to operate and protect the service.
- Access and activity information reasonably necessary to secure accounts, investigate misuse, and maintain service reliability.
We do not currently use advertising cookies or third-party behavioral analytics.
How we use information
We use personal information to:
- Create, authenticate, administer, and secure accounts and permissions.
- Validate invite codes and manage invitation-based access.
- Provide identity-protection, verification, review, and related service functionality.
- Provide controlled demonstrations and support approved evaluations.
- Respond to support, partnership, access, and demonstration inquiries.
- Detect and prevent fraud, impersonation, abuse, and unauthorized activity.
- Maintain service reliability, troubleshoot errors, and protect our users and systems.
- Comply with legal obligations and enforce our agreements.
Legal bases
Where applicable law requires a legal basis, we rely on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent or explicit consent where required for biometric or other sensitive personal information.
Biometric information
Certain identity-verification features may involve photos, selfies, facial measurements, or related verification data that applicable law may consider biometric or sensitive personal information.
- We use biometric information only to provide requested identity-verification, authorization, identity-protection, security, and related review functionality.
- We do not use the service to identify an unknown person against a population-wide face database.
- Where required, we or the customer initiating the verification will provide additional notice and obtain consent or authorization before processing biometric information.
- Customers are responsible for having appropriate authority to provide personal information and request a verification.
- We do not sell, lease, trade, or otherwise profit from biometric information.
- We do not use biometric information for third-party advertising, behavioral targeting, or to train a general-purpose facial-recognition or artificial-intelligence model.
How we disclose information
We may disclose information only as reasonably necessary:
- To the customer that initiated a verification or protected workflow and its authorized administrators, managers, or reviewers.
- To service providers that support authentication, hosting, cloud infrastructure, storage, security, communications, support, and verification functionality.
- To professional advisers and service providers that help us operate, secure, support, or evaluate the service.
- When required by law, valid legal process, or to protect rights, safety, and security.
- In connection with a merger, financing, acquisition, or similar business transaction.
Sale and advertising
We do not sell personal information. We do not use personal information collected through this website or controlled demo environment for third-party advertising, and we do not share personal information for cross-context behavioral advertising or targeted advertising.
International processing
We and our service providers may process information in the United States and other countries where we or they operate, subject to safeguards required by applicable law.
Retention and security
Retention
- We retain personal information only for as long as reasonably necessary to provide and secure the service, maintain appropriate business and audit records, meet legal obligations, resolve disputes, and enforce agreements.
- Information processed solely to complete a verification or protected workflow may be deleted after the purpose has been satisfied unless limited retention is reasonably necessary for security, review, dispute resolution, contractual obligations, or applicable law.
- Biometric information, if retained, is destroyed when the purpose for collecting it has been satisfied or within three years of the individual's last interaction with Armoreal, whichever occurs first, unless applicable law requires or permits otherwise.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authentication, secure storage practices, and security monitoring. No method of storage or transmission can be guaranteed to be completely secure.
Your privacy rights
Depending on where you live, you may have the right to:
- Request access to or a copy of your personal information.
- Request correction or deletion of your personal information.
- Withdraw consent where processing is based on consent.
- Object to or restrict certain processing.
- Exercise other rights available under applicable law without discrimination.
We may need to verify your identity and authority before completing a request. If a customer initiated your verification or protected workflow, that customer may be responsible for your request, and we may direct you to the customer or assist the customer in responding.
To submit a request, contact us at hello@armoreal.com.
Children
Our website and account services are not directed to children under 13, and we do not knowingly allow children under 13 to create accounts. Customers must not submit a minor's personal or sensitive information or initiate identity-verification activity involving a minor unless they have a lawful basis and any permission required from a parent, guardian, or legally authorized representative.
Changes to this Policy
We may update this Policy as our services, practices, or legal obligations change. We will post updates on this page and revise the date above. We will provide additional notice or obtain consent where required by law.
Contact us
For privacy questions or requests, contact us at hello@armoreal.com. Please do not email photographs, passwords, or other highly sensitive information.