Back to homeLast updated: January 1, 2025
Legal

Privacy Policy

At Identyq, we are committed to protecting your privacy. This document explains what data we collect, how we use it, and your rights.

1.Data Controller

Company name
Identyq Technologies Inc.
EIN
Pending registration
Registered address
Miami, Florida, United States
Privacy email
privacy@identyq.com

Identyq Technologies Inc. acts as the data controller for personal data collected through this website and the Identyq service. Where we process employee data on behalf of our enterprise customers to deliver the identity synchronization service, we act as a data processor, with the customer serving as the controller.

2.Data We Collect

We collect only the data necessary to provide the service and improve the experience. We categorize it as follows:

👤

Contact and account data

  • ·First and last name
  • ·Corporate email address
  • ·Company name and job title
  • ·Phone number (optional, only if provided)
🖥️

Technical and usage data

  • ·IP address and country of origin
  • ·Browser type and operating system
  • ·Pages visited and session duration
  • ·Cookie identifiers (see Cookie Policy)
💬

Communications data

  • ·Content of contact and demo request forms
  • ·Emails exchanged with support
  • ·Voluntary satisfaction survey responses
🔄

Data processed as processor (B2B customers)

  • ·Employee records synchronized between SAP SuccessFactors and Entra ID/AD
  • ·Identity change audit logs
  • ·Connector configuration metadata

ℹ️ This data is processed exclusively to deliver the contracted service. The customer is the controller and Identyq acts as processor under the executed Data Processing Agreement (DPA).

3.Purpose and Legal Basis

We process your data for the following purposes and on the following legal grounds under applicable U.S. federal and state law:

Performance of a contract

Account management, provision of the Identyq service, technical support, billing, and essential operational communications necessary to fulfill our contractual obligations to you.

Legitimate business interests

Platform security, fraud prevention, product improvement through aggregated and anonymized usage analysis, and communications about relevant service updates. We balance these interests against your rights and will not override them.

Consent

Sending newsletters, marketing communications, and use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Legal obligation

Retention of financial and tax records as required by U.S. federal and state law, including IRS regulations and applicable state tax codes.

4.Data Retention

Data is retained only as long as necessary for each purpose:

CategoryPeriodJustification
Active account dataDuration of contract + 30 daysAccount reactivation window
Cancelled account data5 yearsContractual and tax obligations
Audit logs2 yearsSecurity and compliance requirements
Contact data (no contract)2 years from last contactLegitimate business interest
Analytics cookies13 monthsIndustry standard
Billing records7 yearsIRS record-keeping requirements

5.Sharing with Third Parties

We do not sell your personal data. We share data with third parties only in the following circumstances:

Infrastructure providers (sub-processors)

Cloud computing, database, and CDN services used to host the service. All have executed Data Processing Agreements compliant with applicable law.

Analytics tools

Vercel Analytics (anonymized, cookieless) for website performance metrics.

Payment processor

PCI-DSS certified payment processor for subscription management. Identyq does not store card data.

Legal obligation

Competent authorities when required by law, court order, or valid legal process under U.S. federal or state law.

6.International Transfers

Data is stored and processed primarily in the United States. Where any sub-processor is located outside the U.S., we ensure appropriate safeguards are in place, which may include:

  • Standard Contractual Clauses (SCCs) approved by relevant authorities
  • The EU-U.S. Data Privacy Framework (DPF) for transfers to/from the European Union
  • Adequacy decisions or other transfer mechanisms recognized under applicable law

You may request information about the specific safeguards applicable to your data by writing to privacy@identyq.com.

7.Your Rights

Depending on your state of residence, you may have the following rights regarding your personal data:

California residents (CCPA/CPRA): You have the right to know, delete, correct, opt out of sale/sharing, and limit use of sensitive personal information. We do not sell or share personal information for cross-context behavioral advertising.
👁️Right to Access

Request confirmation of whether we process your data and obtain a copy of it.

✏️Right to Correction

Request correction of inaccurate or incomplete data.

🗑️Right to Deletion

Request erasure of your data when it is no longer needed or you withdraw consent, subject to legal retention requirements.

🚫Right to Opt-Out

Opt out of the sale or sharing of your personal information (we do not sell data, but you may still exercise this right).

📦Right to Portability

Receive your data in a structured, machine-readable format (JSON/CSV).

⚖️Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights.

How to exercise your rights

Submit your request to privacy@identyq.com, specifying the right you wish to exercise and providing sufficient information to verify your identity. We will respond within 45 days as required under applicable U.S. law (extendable by an additional 45 days with notice).

If you are a California resident and believe your request has not been addressed, you may contact the California Privacy Protection Agency (CPPA) or the California Attorney General. Residents of other states may contact their respective state attorney general.

8.Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration, including:

🔒
Encryption in transit
TLS 1.3 for all communications
🔒
Encryption at rest
AES-256 for stored data
🔒
Access control
RBAC with least-privilege principle
🔒
Audit logging
Immutable, monitored access logs
🔒
Backups
Encrypted backups with configurable retention
🔒
Penetration testing
Periodic third-party security assessments

In the event of a security breach affecting your data, we will notify you in accordance with applicable U.S. federal and state breach notification laws, which may require notification within 30 to 72 hours depending on jurisdiction.

9.Cookies

We use cookies and similar technologies. For detailed information, please review our Cookie Policy.

10.Children's Privacy

The Identyq service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us at privacy@identyq.comand we will promptly delete it. This policy is consistent with the Children's Online Privacy Protection Act (COPPA).

11.Changes to this Policy

We may update this Privacy Policy to reflect legal, technical, or business changes. When we do, we will update the "last updated" date at the top of this document. For material changes, we will notify you by email or via a prominent notice within the service at least 30 days in advance. We encourage you to review this page periodically.

12.Contact

Privacy Officer
privacy@identyq.com
Privacy email
privacy@identyq.com
Regulatory authority (CA residents)
California Privacy Protection Agency (CPPA)
Response time
Up to 45 calendar days