Privacy Policy

Last updated: [insert date] This Privacy Policy explains how ASAS ("we", "us") collects, uses, and protects your information when you create an ASAS account and complete identity verification. 1. INFORMATION WE COLLECT • Identity information you provide at sign-up: full name, nickname, date of birth, gender, nationality, country/state, email, phone number, and home address. • Verification data: government ID or passport images, a live selfie captured during liveness check, and the outcome of that check. • Contact verification: one-time codes sent to confirm your phone number (via WhatsApp) and email address. • Your permanent ASAS number and your verification level. 2. HOW WE USE YOUR INFORMATION • To verify your identity and issue/confirm your ASAS number. • To let you sign in (by email or ASAS number) and manage your account. • To respond to support requests. • To meet legal or regulatory obligations, where applicable. 3. WHAT WE SHARE WITH PARTNER APPS Partner applications that integrate with our API can only check whether a given ASAS number is verified and at what level. They never receive your name, documents, selfie, contact details, or any other personal information. 4. DATA STORAGE AND SECURITY Identity documents and selfies are stored on access-restricted storage, separate from public web access. We use industry-standard measures to protect your data, but no system is 100% secure — [insert any additional security certifications/measures your organization uses]. 5. DATA RETENTION [Insert your retention policy — e.g. how long documents/selfies are kept, and whether/how a user can request deletion of their account and data.] 6. YOUR RIGHTS [Insert applicable rights for your users — e.g. right to access, correct, or request deletion of personal data, and how to exercise them — this depends on which countries' data protection laws apply to your service.] 7. CHILDREN'S PRIVACY [Insert your minimum age policy for creating an account.] 8. CHANGES TO THIS POLICY We may update this policy from time to time. Continued use of your account after changes take effect constitutes acceptance of the revised policy. 9. CONTACT Questions about this policy: [insert contact email]. ⚠️ DRAFT — This is a starting template, not a finalized legal document. Have it reviewed by a lawyer familiar with data protection law in Afghanistan (and any other country your users are in) before publishing.