Your privacy is the foundation of everything we built. This policy tells you what we collect, why we collect it, how we protect it, and what rights you have over it.

1. Who we are

Perasium is operated by Perasium OÜ, a private limited company incorporated in Estonia (EU). We are subject to the EU General Data Protection Regulation (GDPR); one of the strongest privacy laws in the world. Because we are an EU company, this protection applies to every user globally, not just those in Europe.

Contact: contact@perasium.ai  |  perasium.ai

2. What we collect; and what we do not

What we collect

• Your phone number; to verify your identity and send one-time login codes. Nothing else.
• Your name and country; to personalise your vault and meet applicable identity verification requirements.
• Documents you upload; encrypted immediately on receipt. We cannot read them. Only you and people you authorise can access them.
• Usage data; when you uploaded or shared a document, when a link was accessed, and who accessed it. This is your audit trail. It belongs to you.
• Device type and operating system; for security and compatibility only. We do not track your location or browsing activity.

What we do not collect

• We do not store your biometric data. Your fingerprint or face ID is processed on your device only and never transmitted to us. We hold only our half of the encryption key; which cannot open anything without your biometric.
• We do not collect advertising data, browsing history, or behavioural profiles.
• We do not use tracking pixels or third-party analytics that share your data.

3. Why we are allowed to process your data (GDPR legal bases)

• Contract; to provide the service you signed up for.
• Legitimate interest; for security monitoring, fraud prevention, and platform reliability.
• Legal obligation; to comply with laws in the countries where we operate.
• Consent; for optional communications such as product updates. You can withdraw consent at any time.

4. How we protect your data

• All documents are encrypted using AES-256-GCM the moment they are uploaded; before storage.
• Split-key architecture: decrypting a document requires your biometric key (on your device) combined with our server key. Neither half alone can open anything.
• All data travelling between your device and our servers is protected by TLS 1.3.
• Your account data (name, phone number) is encrypted in our database at rest.
• Access to our production systems is restricted, logged, and audited.

5. How long we keep your data

• Your documents; kept for as long as your account is active, or until you delete them.
• Shared links and audit logs; kept for 12 months after the link expires, then permanently deleted.
• Your account data; deleted within 30 days of account closure on request.

We do not keep data longer than necessary for the purpose it was collected.

6. Who we share your data with

We do not sell, rent, or trade your personal data. Ever.

• Twilio; receives your phone number solely to deliver WhatsApp and SMS authentication messages.
• Cloud infrastructure providers; host and operate the platform under GDPR-compliant data processing agreements.
• Legal authorities; only when required by law, and only to the minimum extent the law requires.

Every third-party processor we work with is bound by a GDPR-compliant data processing agreement.

7. Where your data is stored

Perasium OÜ is incorporated in Estonia, a full EU member state. Your data is stored on Microsoft Azure infrastructure in Europe to ensure highest compliance with privacy and date security.

8. Your rights

Under GDPR and equivalent international privacy laws, you have the right to:

• Access; request a copy of all personal data we hold about you.
• Rectification; correct inaccurate or incomplete data.
• Erasure; request that we delete your data (right to be forgotten).
• Restriction; ask us to pause processing while a dispute is resolved.
• Portability; receive your data in a structured, portable format.
• Object; to processing based on legitimate interests.
• Withdraw consent; at any time for consent-based processing.
• Lodge a complaint; with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.

To exercise any right: email contact@perasium.ai. We will respond within 30 days.

9. Cookies

Perasium uses session cookies only; strictly necessary for login and security. We do not use advertising cookies, tracking pixels, or any third-party analytics that share your information.

10. Changes to this policy

We will notify you of any material changes via a message to your registered contact before they take effect. Continuing to use the service after that notification means you accept the updated policy.

Please read these terms before using Perasium. By creating an account, verifying your identity, or uploading any document, you agree to these terms. If you do not agree, please do not use the service.

1. What Perasium is

Perasium is a biometric-secured digital document vault. You can upload any document, encrypt it, share it via a time-limited link, and control who has access and for how long; without any third party, including us, being able to read your documents.

2. Who can use Perasium

• You must be at least 16 years old. If you are under 18, you confirm you have parental or guardian consent.
• You must provide accurate information when registering.
• One account per person. Accounts cannot be transferred to someone else.
• Perasium is available globally. You are responsible for ensuring your use of the service complies with the laws of your country.

3. Your account and your documents

• You own your documents. We make no claim over any files you upload.
• You are responsible for what you upload. Do not upload anything illegal, harmful, or that you do not have the right to store or share.
• Your biometric is your key. If you lose access to your device and cannot authenticate, we cannot recover your encrypted documents. This is intentional; it means no one else can recover them either.
• Keep your registered phone number up to date. It is your authentication fallback.

4. What you can and cannot do

You may

• Upload, store, and share personal or professional documents for lawful purposes.
• Share documents with any recipient via any messaging channel.
• Set expiry dates, revoke access, and manage your vault at any time.

You may not

• Upload or share illegal content; including anything that violates copyright, enables fraud, or is harmful to minors.
• Attempt to hack, reverse-engineer, or bypass the encryption or security architecture.
• Impersonate another person or submit fraudulent documents.
• Resell or sublicence access to the platform without our written agreement.
• Use automated bots or scripts to access the service without prior written consent from us.

5. Sharing documents

When you share a document through Perasium:

• You control the access window. Links expire at the time you set.
• Recipient access is logged and appears in your audit trail.
• You remain responsible for choosing who you share with.
• Perasium provides the tool. We are not responsible for what a recipient does with a document during a valid access session.

6. Pricing and payments

• Free tier: up to 5 documents, available indefinitely.
• Personal plan: $1 per month or $10 per year. Cancel anytime. No refunds for partial periods.
• We may change pricing with 30 days notice. You may cancel before any price increase takes effect.
• All prices are in USD. Local taxes may apply depending on your country.

7. Service availability

We aim for 99.5% uptime. We may occasionally suspend access for maintenance or security reasons and will give reasonable notice where possible. Perasium is not a backup service; please keep independent copies of important documents.

8. Our liability

• We provide the service as it is. We do not guarantee it will be error-free or suit every use case.
• Our maximum liability to you in any 12-month period is limited to the amount you paid us in that period, or USD 100, whichever is greater.
• We are not liable for data loss caused by your own actions, indirect losses, or events outside our reasonable control.
• Nothing in these terms limits liability for fraud, gross negligence, or death or personal injury caused by our negligence.

9. Intellectual property

• You own your content. We own the platform; its code, design, trademarks, and technology.
• Licence you grant us: by uploading content, you grant Perasium OÜ a limited, non-exclusive licence to store and process your files solely to provide the service. This licence ends when you delete the content or close your account.
• You may not use our name, logo, or brand without our prior written permission.

10. Account suspension and termination

We may suspend or terminate your account if you violate these terms, use the service fraudulently, or fail to pay after reasonable notice. You may close your account at any time via account settings or by emailing us. Your data will be deleted within 30 days of closure.

11. Governing law and disputes

These terms are governed by the laws of Estonia. Any disputes will first go through good-faith negotiation. If unresolved within 30 days, they will be referred to the courts of Estonia; unless mandatory consumer protection laws in your country require otherwise.

EU users: you may also refer disputes to the EU Online Dispute Resolution platform at ec.europa.eu/odr.

12. Changes to these terms

We will give you 30 days notice of any material changes. Continued use after that date means you accept the updated terms. If you disagree, you may close your account before the changes take effect.

13. Severability

If any part of these terms is found to be unenforceable, the rest continues in full force.

14. Contact

Perasium OÜ; Tallinn, Estonia
Email: contact@perasium.ai
Website: perasium.ai

By registering for or using Perasium, you confirm that you have read, understood, and agree to both the Privacy Policy and the Terms of Service above. If you are accepting on behalf of an organisation, you confirm you have authority to bind that organisation.