Privacy Policy

1. Who we are

Persōna ("Persōna," "we," "us") provides digital-exposure audits and monitoring for individuals. This policy explains what information we collect, why, how long we keep it, and what rights you have over it.

2. Information we collect

Information you give us directly

• Name, email address, and phone number when you purchase an audit or contact us
• The specific identifiers you authorize us to search — your name, known aliases, additional emails, and phone numbers
• Any information you include in a contact form message, consultation, or Q&A thread

Information generated by delivering your audit

• The findings compiled through licensed OSINT, data-broker, breach-database, and dark-web monitoring tools, scoped only to the identifiers you authorized
• Analyst notes, risk ratings, and recommendations tied to your report

Payment information

Payments are processed by Stripe. We do not receive or store your full card number — Stripe handles that directly under its own privacy and security practices.

Technical information

Standard web technical data (such as IP address, browser type, pages visited, and performance information) may be processed by our hosting and infrastructure providers for security, reliability, and aggregate website measurement. We use a dedicated advertisement landing page and limited campaign parameters to understand whether a visitor arrived from a Persōna advertisement. We do not place an email address or other direct identifier in an advertisement link.

This site uses browser session storage for minor interface preferences and short-lived campaign attribution. Session attribution is used to connect an account creation to the advertisement or page that led to it; it is not used to follow you across unrelated websites.

On our landing page, we record a small number of anonymous events for each visit (arriving from a campaign link, answering a question, completing the questions, and requesting an account link) together with the campaign parameters, the page, and whether the device is mobile or desktop. These records use a random session identifier and do not include your name, email address, or IP address. If you create an account, that session identifier is stored with your account so we can see which campaign and steps led to it. When we send marketing email through our email delivery provider, the provider may record whether a message was opened and whether its links were clicked.

3. How we use your information

• To perform the audit or monitoring service you purchased, strictly within the scope you authorized
• To deliver your report, respond to your questions, and provide support
• To process payment and maintain business records required by law
• To create and secure your passwordless account, record your optional marketing preference and your answers to the optional exposure-check questions, and understand which Persōna campaign led to an account creation
• To send marketing email only when you have affirmatively selected the separate marketing option; you may unsubscribe at any time
• To improve our methodology and service quality (in aggregated or anonymized form only)

We do not sell your information, share it with data brokers, or use audit findings for advertising. If you separately choose to receive marketing email, we use your email address and recorded preference only for Persōna’s own guidance and offers until you unsubscribe.

4. Who we share information with

• Service providers that power specific parts of the audit or site: licensed OSINT/data-broker/breach-monitoring tool providers, our payment processor (Stripe), our hosting and infrastructure providers (including Cloudflare), our account and authentication provider (Supabase), and our email delivery provider
• Law enforcement or legal process, only when we are legally required to respond to a valid request

We never access dark-web marketplaces directly, purchase stolen data, or access any account or system without your explicit authorization.

5. Data retention

We retain your information only as long as needed to deliver and support your engagement, and to meet legal recordkeeping obligations. As a general guideline:

• Audit findings, reports, and associated personal data: retained for as long as your account remains active, and for 3 years following your last activity or the end of any active subscription — whichever is later
• Immediate disposal: You may request permanent deletion of your audit data at any time, for any reason, by contacting info@personadigitalsecurity.com. We will delete your report, findings, and associated personal data from our systems, typically within 5 business days, except where specific records must be retained by law (for example, financial transaction records for tax purposes). Immediate disposal is irreversible — we will not be able to recover or reference your prior findings if you request a new audit later.
• Contact form and support messages: retained for as long as reasonably needed to resolve your inquiry
• Account and marketing-consent records: retained while your account remains active or until you withdraw consent, subject to records we must keep for legal compliance
• Payment records: retained as required by applicable tax and accounting law

6. Your rights

Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information, or to object to certain processing. To exercise any of these rights, contact us at info@personadigitalsecurity.com.

7. Children's privacy

Our services are not directed to individuals under 18. If we learn we have collected personal information from a child without parental consent, we will delete it.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

9. Contact us

Questions about this policy or your data can be sent to info@personadigitalsecurity.com.