Privacy Policy

Welcome to DeviceBound. DeviceBound is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and how we protect it.

Information We Collect

We may collect:

• Name
• Email address
• Mobile phone number
• Device information
• Browser information
• IP address
• Agreement identifiers
• Verification timestamps
• Cryptographic public keys
• Audit logs

DeviceBound does not collect or store Face ID, Touch ID, fingerprints, or other biometric data. Biometric authentication occurs locally on your device.

How We Use Information

We use your information to:

• Verify identity
• Deliver secure verification links
• Authenticate agreements
• Maintain secure audit logs
• Prevent fraud
• Improve platform security
• Provide customer support

SMS Communications

By providing your mobile phone number, you consent to receive transactional SMS messages from DeviceBound.

Messages may include:

• Verification links
• Verification reminders
• Verification confirmations
• Agreement notifications

Message frequency varies. Message and data rates may apply.

Reply STOP to unsubscribe. Reply HELP for assistance.

Mobile Privacy

No mobile information or SMS messaging consent will be shared with third parties or affiliates for marketing or promotional purposes.

Information is shared only with trusted service providers necessary to operate DeviceBound or when required by law.

DeviceBound Presence

For a Presence session DeviceBound collects:

• The phone number the organizer entered, used to send the link, and the name they entered
• The time of each verification and each staff scan
• The device credential created by the person's device: a public key and a device identifier, not biometric data
• The status and reason history of the session, and the event or site it belongs to
• The Presence terms, privacy disclosure and any NDA accepted, with their versions
• When location is shared: coordinates, the accuracy reported by the device, the capture time, and a city and state derived from them

Biometrics never leave the device. DeviceBound stores the WebAuthn evidence that the check happened, not the biometric itself. The organizer sees status, reason, verification times, the location result (match or not, and the city) and the audit trail, never the coordinates. Raw coordinates are deleted after the retention period; the result, distance, accuracy and city remain.

Security

DeviceBound uses encrypted communications, secure cloud infrastructure, cryptographic verification, and device-bound authentication to protect user information.

Private cryptographic keys remain on the user's device whenever supported.

Third-Party Providers

DeviceBound may utilize trusted providers including:

• Twilio
• Stripe
• Supabase
• Cloudflare
• AWS
• Google Cloud

Data Retention

Information is retained only as long as necessary to provide our services, comply with legal obligations, resolve disputes, and maintain audit records.

Your Rights

You may request access to, correction of, or deletion of your personal information where permitted by law.

Contact

DeviceBound
support@devicebound.us
https://devicebound.us