Privacy Policy

StableState LLC ("StableState," "we," "us," or "our") operates FACET, a multi-profile digital identity platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information You Provide:

Information Collected Automatically:

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent
• Log Data: IP address, access times, referring URLs
• NFC Interaction Data: Timestamp and location (if permitted) of profile shares

We use the information we collect to:

• Provide, maintain, and improve our services
• Process and complete transactions
• Send you technical notices and support messages
• Respond to your comments and questions
• Monitor and analyze usage patterns and trends
• Detect, investigate, and prevent fraudulent or unauthorized activities
• Personalize and improve your experience
• Comply with legal obligations

We may share your information in the following circumstances:

• With Your Consent: When you choose to share your profile via NFC or link, the recipient can view your selected profile information
• Service Providers: Third-party vendors who assist in operating our service (hosting, email delivery, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We never:

• Sell your personal information to data brokers
• Share your data with advertisers
• Allow third parties to use your data for their own marketing

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict access controls limit who can view your data
• Infrastructure: Hosted on Microsoft Azure with enterprise-grade security
• Monitoring: Continuous security monitoring and threat detection
• Regular Audits: Periodic security assessments and penetration testing

Your data is stored in secure data centers located in the United States. We retain your information for as long as your account is active or as needed to provide services.

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Export your profile data in a standard format (vCard)
• Objection: Object to certain processing of your data
• Restriction: Request limitation of processing in certain circumstances

To exercise these rights, contact us at privacy@stablestateit.com or use the settings within your FACET account.

We use the following technologies:

We do not use third-party advertising trackers or sell data to advertisers.

FACET is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete that information promptly.

If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@stablestateit.com.

If you are accessing FACET from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.

By using our service, you consent to the transfer of information to the United States, which may have different data protection rules than your country of residence.

For EU/EEA Users: We process your data under the lawful basis of contract performance (to provide our services) and legitimate interests (to improve our services and ensure security).

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Effective Date" at the top of this policy
• Notify you via email or prominent notice on our service
• Obtain your consent if required by applicable law

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions about this Privacy Policy or our data practices, please contact us:

For data protection inquiries, we will respond within 30 days of receiving your request.