Privacy Policy

How we protect your data

Last updated: 01/02/2026

At Danaya, we take the protection of your personal data very seriously. This policy explains how we collect, use, and protect your information when you use our media authentication services.

Data Collected

We collect the following data:

  • Account information: email, name, password (hashed)
  • Media data: photos, videos, and audio files you submit for sealing or AI analysis
  • Metadata: GPS coordinates, timestamps, device information captured during seal creation
  • AI analysis results: detection scores and classification results
  • Usage data: seal counts, API usage statistics, technical logs

Data Usage

Your data is used to:

  • Create and verify cryptographic seals for your media
  • Perform AI-powered deepfake and manipulation detection
  • Generate QR codes and verification links for sealed media
  • Process your subscription and payments via Stripe
  • Improve our AI detection models and services
  • Send you important account notifications via Brevo

Data Security

We implement robust security measures:

  • SHA-256 hashing and HMAC signatures for seal integrity
  • Encryption of data in transit (HTTPS/TLS)
  • JWT-based authentication with secure token management
  • Secure storage on MongoDB Atlas certified servers
  • API key authentication with rate limiting

Data Sharing

We never sell your data. We only share it with:

  • HuggingFace: media files are sent for AI analysis (image/audio deepfake detection)
  • Stripe: for payment processing
  • Brevo: for transactional emails
  • Google Analytics: for anonymous website usage statistics and traffic analysis
  • Public verification: sealed media can be verified by anyone via QR code or verification link

Your Rights (GDPR)

Under GDPR, you have the following rights:

  • Right to access your personal data
  • Right to rectify inaccurate data
  • Right to erasure (right to be forgotten)
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time

Cookies

We use cookies and similar technologies on our website:

  • Essential cookies: required for site functionality (authentication, session management)
  • Analytics cookies: Google Analytics is used to collect anonymous data about site traffic and user behavior to improve our services
  • On your first visit, a consent banner lets you accept or reject analytics cookies
  • Your choice is stored for 1 year and can be changed at any time by clearing the cookie_consent cookie in your browser settings

Contact Us

For any questions regarding your personal data or to exercise your rights, contact us at:

Contact Us

For any questions regarding your personal data or to exercise your rights, contact us at:

support@danaya.io