Privacy Policy

1. Who we are

Persōna ("Persōna," "we," "us") provides digital-exposure audits and monitoring for individuals, families, and small businesses. This policy explains what information we collect, why, how long we keep it, and what rights you have over it.

2. Information we collect

Information you give us directly

• Name, email address, and phone number when you purchase an audit or contact us
• The specific identifiers you authorize us to search — name, known aliases, additional emails/phone numbers, and, for a business audit, the business name and domain
• Any information you include in a contact form message, consultation, or Q&A thread

Information generated by delivering your audit

• The findings compiled through licensed OSINT, data-broker, breach-database, and dark-web monitoring tools, scoped only to the identifiers you authorized
• Analyst notes, risk ratings, and recommendations tied to your report

Payment information

Payments are processed by Stripe. We do not receive or store your full card number — Stripe handles that directly under its own privacy and security practices.

Technical information

Standard web technical data (IP address, browser type, pages visited) may be logged by our hosting and infrastructure providers for security and performance purposes. This site uses your browser's local session storage for minor interface preferences (such as dismissing a notice) — this is not used for tracking or advertising.

3. How we use your information

• To perform the audit or monitoring service you purchased, strictly within the scope you authorized
• To deliver your report, respond to your questions, and provide support
• To process payment and maintain business records required by law
• To improve our methodology and service quality (in aggregated or anonymized form only)

We do not sell your information. We do not use your data for advertising, and we do not share it with data brokers — quite the opposite of our business.

4. Who we share information with

• Service providers that power specific parts of the audit or site: licensed OSINT/data-broker/breach-monitoring tool providers, our payment processor (Stripe), our hosting and infrastructure providers (including Cloudflare), and our email delivery provider
• Law enforcement or legal process, only when we are legally required to respond to a valid request

We never access dark-web marketplaces directly, purchase stolen data, or access any account or system without your explicit authorization.

5. Data retention

We retain your information only as long as needed to deliver and support your engagement. As a general guideline:

• Audit findings and reports: retained for [X months/years — to be finalized] after delivery, or until you request deletion, whichever comes first
• Contact form and support messages: retained for as long as reasonably needed to resolve your inquiry
• Payment records: retained as required by applicable tax and accounting law

The exact retention window above is a placeholder — decide on a specific, defensible number before publishing this policy.

6. Your rights

Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information, or to object to certain processing. To exercise any of these rights, contact us at info@personadigitalsecurity.com.

7. Children's privacy

Our services are not directed to individuals under 18. If we learn we have collected personal information from a child without parental consent, we will delete it.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

9. Contact us

Questions about this policy or your data can be sent to info@personadigitalsecurity.com.