Privacy Policy

At CiviTag, privacy isn't just a feature—it's our foundation. This Privacy Policy explains how we collect, use, protect, and handle your information when you use the CiviTag service. We believe in transparency, minimal data collection, and putting you in control of your information.

1. Information We Collect

1.1 Information You Provide

When you create a CiviTag account, we collect:

• Phone number: Used for account authentication and notifications.
• Email address: Used for account recovery and important communications.
• Vehicle information: Registration number, type, color—for QR code linkage.

1.2 Information Collected Automatically

When you use CiviTag, we automatically collect:

• Device information: device type, operating system, app version.
• Usage data: features used, time of usage, interaction patterns.
• QR events: timestamp and message content (encrypted and temporary).

1.3 What We Do NOT Collect

We do NOT collect:

• Your GPS location or vehicle location data.
• Contacts from your phone.
• Photos or files from your device (unless explicitly shared in messages).

2. How We Use Your Information

We use the collected information for:

• Service Provision: Linking QR codes to vehicles, routing messages.
• Authentication: Verifying your identity and preventing unauthorized access.
• Improvements: Analyzing usage patterns to enhance features.

We do NOT use your information for targeted advertising or sell your data to third parties.

3. Anonymous Communication System

CiviTag's core feature is anonymous communication. Here's how we protect your privacy:

• No Number Exposure: Senders never see your phone number. Messages are routed through relay servers.
• Encrypted: All messages are encrypted in transit (TLS 1.3) and at rest (AES-256).
• Temporary Storage: Messages are stored only until delivery and then automatically deleted (within 24-48 hours).

4. Data Security

We implement industry-standard security measures:

• Encryption: Data encrypted in transit and at rest.
• Secure Servers: Data stored on secure, regularly audited cloud infrastructure.
• Regular Audits: Third-party security audits and penetration testing.

5. Your Rights

You have the following rights regarding your data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information.
• Deletion: Delete your account and all associated data at any time.