Privacy Policy
Effective Date: March 31, 2025
Tracer Labs, Inc. ("Trust ID," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the Trust ID platform, including our identity verification, consent management, and security services provided to government agencies and their constituents.
By accessing or using the Trust ID platform, you agree to the collection and use of information in accordance with this policy. If you are a government agency or contractor, additional terms may apply as specified in your service agreement. This policy complies with applicable federal and state privacy regulations, including requirements under Section 508 of the Rehabilitation Act.
Information We Collect
We collect information to provide, maintain, and improve our identity verification and consent management services. The types of information we collect depend on how you interact with our platform.
Personal Information
When you create an account or use our identity verification services, we may collect:
- Full name, date of birth, and government-issued identification numbers
- Contact information, including email address, phone number, and mailing address
- Biometric data used for identity verification (processed locally, not stored centrally)
- Identity attributes verified through zero-knowledge proof protocols
- Consent records and preferences for data sharing across agencies
Non-Personal Information
We automatically collect certain non-personal information when you use our platform:
- Device type, operating system, and browser information
- IP address and approximate geolocation
- Usage data, including pages visited, features used, and session duration
- Log data for security monitoring and audit trail compliance
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to maintain session state and improve the user experience:
- Essential cookies required for platform authentication and security
- Analytics cookies to understand usage patterns and improve our services
- Preference cookies to remember your language and accessibility settings
How We Use Your Information
We use collected information for the following purposes:
- To provide identity verification and consent management services to government agencies
- To authenticate your identity using zero-knowledge proofs without exposing underlying personal data
- To maintain and enforce consent records across participating agencies
- To comply with legal obligations, including federal and state regulatory requirements
- To detect, prevent, and respond to fraud, security incidents, and unauthorized access
- To improve our platform's performance, accessibility, and security posture
- To communicate with you about service updates, security notices, and policy changes
Data Security
We implement robust security measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. Our security infrastructure is built to meet government-grade requirements.
Our security measures include, but are not limited to:
- FIPS 140-2 Level 3 certified cryptographic modules for all data encryption
- Post-quantum encryption via Kyber key encapsulation to safeguard against future threats
- Zero-knowledge proof architecture that verifies identity attributes without storing or exposing personal data
- Continuous security monitoring, vulnerability assessments, and annual penetration testing aligned with SOC 2 Type II requirements
Your Choices and Rights
You have the following rights regarding your personal information:
- Access: You may request a copy of the personal information we hold about you
- Correction: You may request that we correct inaccurate or incomplete personal information
- Deletion: You may request deletion of your personal information, subject to legal retention requirements
- Consent Withdrawal: You may withdraw consent for specific data sharing at any time through the Trust ID platform
- Data Portability: You may request your data in a structured, commonly used format
For government employees and contractors, data rights may be subject to the terms of your agency's agreement with Trust ID. Contact your agency's privacy officer or Trust ID support for guidance.
Third-Party Links
Our platform may contain links to third-party websites or services that are not operated by Trust ID. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.
We encourage you to review the privacy policies of any third-party sites you visit. When our platform integrates with government agency systems, the respective agency's privacy policy also applies to data processed within their systems.
Children's Privacy
Trust ID takes children's privacy seriously. Our platform includes COPPA-compliant consent management features specifically designed for services involving minors. We do not knowingly collect personal information from children under 13 without verifiable parental consent.
If you believe we have collected information from a child under 13 without appropriate consent, please contact us immediately so we can take corrective action. Our age verification and parental consent features are designed to meet or exceed COPPA requirements.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on our platform and updating the effective date.
For government agency partners, material policy changes will be communicated through your designated contact channels in accordance with your service agreement. We recommend reviewing this policy periodically.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Tracer Labs, Inc. (Trust ID)
21304 Hibbs Bridge Road, Middleburg, VA