Understanding Your Data: Our Data Processing, Storage, and Security Policies

IDMERIT takes your privacy and security very seriously. As part of our commitment to transparency, we want to ensure that you have a clear understanding on 

• How do we process your data?
• Do we store your customer's personal data?

Data Processing: What We Do with your data?

Our data processing practices are based on the principles of confidentiality, integrity, and availability in accordance with applicable laws and regulations, including ISO 27001 and SOC 2. When you send your data to our API service, we take great care to ensure that it is treated with the utmost confidentiality and we only process your data to achieve the necessary purposes. 

Data Storage: Do we store your data?

We keep your data safe and secure in accordance with laws and regulations, including GDPR, ISO-27001, and SOC2. The length of storing the data is defaulted to 10 days and can adjust this timeframe with your consent. After this time, we remove your data from our systems, leaving only transactional information. We use secure cloud storage with top-level encryption (AES-256) to protect against unauthorized access, theft, or loss. Your privacy and security are our top priorities.

Our Privacy policy in brief

(1) Our top priority is to process Personal Data in a secure and confidential manner. We take all necessary measures to ensure that the Personal Data we collect is well-protected. We regularly assess the risks associated with processing Personal Data and implement appropriate mitigation strategies to manage these risks.

(2) All our services are designed and deployed with privacy by design and privacy by default principles, overseen by our data protection officer.

(3) We process Personal Data lawfully and purposefully. We establish clear objectives for processing Personal Data and process it only for those purposes and we refrain from collecting or processing any data that is unnecessary. IDMERIT reserves the right to delete, obscure, or make unreadable any data or documents provided during the session that is not required for IDMERIT's service provision. This also means that any transfer of Personal Data must have a valid legal basis.

(4) We process Personal Data in a transparent and fair manner. We strive to process Personal Data in a secure, honest, and lawful manner to prevent unauthorized disclosure or misuse of Personal Data. We also work to eliminate the possibility of discrimination or bias in our service.

(5) We retain Personal Data only for as long as required by law, contract, consent, or necessary for the provision of our Services or for the protection of legal claims against us. At the end of the retention period, we will permanently erase or anonymize Personal Data.

(6) We make every effort to ensure that the Personal Data we process is accurate and limited to what is necessary.