Your privacy is the foundation of what we built. This policy explains what we collect, why, how we protect it, and your rights over it.

1.Who we are

Perasium is a secure document vault platform operated by Perasium. We are subject to the EU General Data Protection Regulation (GDPR) and international data protection law, which are among the strongest privacy frameworks in the world.

Contact: contact@perasium.ai

2.What we collect and why

• Your phone number — to identify your account and send you one-time authentication codes. Nothing else.
• Your name and country — to personalise your vault and comply with applicable KYC requirements where applicable.
• Documents you upload — encrypted immediately on our servers. We cannot read them. Only you and those you authorise can decrypt them.
• Usage data — when you uploaded or shared a document, when a link was accessed, and by whom (via OTP verification). This is your audit trail and belongs to you.
• Device data — device type and operating system, for security and compatibility only. We do not track your location or browsing behaviour.

3.Legal basis for processing (GDPR)

• Contract performance — processing required to provide the service you signed up for.
• Legitimate interest — security monitoring, fraud prevention, and platform reliability.
• Legal obligation — complying with applicable laws in the jurisdictions where we operate.
• Consent — for any optional communications (e.g. product updates). You can withdraw this at any time.

4.How we protect your data

• All documents are encrypted with AES-256-GCM on upload, before storage. Encryption happens server-side immediately on receipt.
• Split-key architecture: decryption requires your biometric key (on your device) combined with our server key. Neither alone opens anything.
• All data in transit is protected by TLS 1.3.
• All personal account data (name, phone number) is encrypted in our database at rest.
• Access to production systems is restricted, logged, and audited.

5.How long we keep your data

• Your documents — for as long as your account is active, or until you delete them.
• Shared links and audit logs — retained for 12 months after expiry, then deleted.
• Account data — deleted within 30 days of account closure on request.
• We do not retain data longer than necessary for the purposes it was collected.

6.Who we share your data with

We do not sell, rent, or trade your personal data. Ever.

• Twilio — to send SMS and WhatsApp authentication messages. They receive your phone number for message delivery only.
• Cloud infrastructure providers — to host and operate the platform. All data is processed under data processing agreements with appropriate safeguards.
• Legal authorities — only when required by law and only to the extent required.

All third-party processors are bound by GDPR-compliant data processing agreements.

7.International data transfers

Where data is processed outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

8.Your rights

Under GDPR and equivalent international frameworks, you have the right to:

• Access — request a copy of all personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ('right to be forgotten').
• Restriction — limit how we process your data while a dispute is resolved.
• Portability — receive your data in a structured, machine-readable format.
• Object — to processing based on legitimate interests.
• Withdraw consent — at any time for consent-based processing.

To exercise any right: email contact@perasium.ai. We will respond within 30 days.

9.Cookies and tracking

The Perasium platform uses session cookies only — essential for authentication and security. We do not use advertising cookies, tracking pixels, or third-party analytics that share your data with others.

10.Changes to this policy

We will notify you of material changes to this policy via a message to your registered contact before changes take effect. Continued use of the service after notification constitutes acceptance.

Please read these terms carefully. By using Perasium, you agree to them. If you do not agree, do not use the service.

1.The service

Perasium provides a biometric-secured digital document vault accessible via web and messaging channels. You can upload documents, encrypt them, share them via time-limited links, and control access — all without any third party being able to read your documents.

2.Who can use Perasium

• If you are under 18, you confirm you have parental or guardian consent.
• You must provide accurate information when registering.
• One account per person. Accounts are non-transferable.
• Perasium is available globally. You are responsible for ensuring your use complies with local laws in your jurisdiction.

3.Your account and your documents

• You own your documents. We do not claim any rights over the files you upload.
• You are responsible for the content you upload. Do not upload material that is illegal, harmful, or that you do not have the right to store or share.
• Your biometric is your access key. If you lose access to your device and biometric, we cannot recover your encrypted documents for you. This is a feature, not a flaw — it means no one else can either.
• Keep your registered phone number current. It is your authentication fallback.

4.What you can and cannot do

You may:

• Upload, store, and share personal or professional documents for lawful purposes.
• Share documents with any recipient via any messaging channel.
• Revoke access, set expiry dates, and manage your vault freely.

You may not:

• Use Perasium to store or share illegal content, including content that violates copyright, enables fraud, or contains material harmful to minors.
• Attempt to reverse-engineer, hack, or circumvent the encryption or security architecture.
• Use the service to impersonate another person or submit fraudulent documents.
• Resell or sublicence access to the platform without our written agreement.
• Use automated bots or scripts to access the service without prior written consent.

5.Shared documents and recipient conduct

When you share a document via Perasium:

• You control the access window. Links expire at the time you set.
• Recipient access is logged and included in your audit trail.
• You remain responsible for choosing who you share with.
• Perasium is a tool for sharing. We are not responsible for what recipients do with documents once accessed within a valid session.

6.Pricing and payments

• Free tier: available indefinitely subject to document limits stated at the time of use.
• Personal plan ($2/month or $18/year): billed via the payment method on your account. Cancel anytime; no refunds for partial periods.
• Organisation plan ($4/user/month): billed monthly in arrears. Annual plans available. Cancellation takes effect at the end of the current billing period.
• We reserve the right to change pricing. We will give you 30 days' notice before any price increase. You may cancel before the new price takes effect.
• All prices are in USD. Local taxes may apply.

7.Service availability

We aim for 99.5% uptime but do not guarantee uninterrupted access. We may suspend the service briefly for maintenance, security, or operational reasons. We will give reasonable notice where possible.

Perasium is not a backup service. Maintain independent copies of important documents.

8.Our liability

• We provide the service 'as is'. We do not warrant that it will be error-free or meet every use case.
• Our maximum liability to you in any 12-month period is limited to the amount you paid us in that period, or USD 100, whichever is greater.
• We are not liable for: loss of data caused by your own actions, indirect or consequential losses, or events beyond our reasonable control (force majeure).
• Nothing in these terms limits liability for fraud, gross negligence, or death or personal injury caused by our negligence.

9.Intellectual property

• You own your content. We own the platform — its code, design, trademarks, and technology.
• By uploading content, you grant Perasium AS a limited, non-exclusive licence to store and process your files solely for the purpose of providing the service. This licence ends when you delete the content or close your account.
• You may not use our name, logo, or brand without prior written permission.

10.Account suspension and termination

We may suspend or terminate your account if you:

• Violate these terms.
• Use the service fraudulently or in a way that harms others.
• Fail to pay for a paid plan after reasonable notice.

You may close your account at any time via account settings or by emailing us. On closure, your documents and data will be deleted within 30 days.

11.Governing law and disputes

These terms are governed by the laws of Norway. Any disputes will first be addressed through good-faith negotiation. If unresolved within 30 days, disputes will be referred to the courts of Norway, which have exclusive jurisdiction — unless mandatory local consumer protection laws in your country require otherwise.

EU users: you may refer disputes to the EU Online Dispute Resolution platform at ec.europa.eu/odr.

12.Changes to these terms

We may update these terms. We will notify you 30 days before material changes take effect. Continued use after that date means you accept the updated terms. If you disagree, you may close your account before the changes take effect.

13.Severability

If any provision of these terms is found to be unenforceable, the remaining provisions continue in full force.

14.Contact

Perasium AS
Email: legal@perasium.ai
Website: Perasium.ai