In plain language. These Terms explain the rules for using Idesify and your rights when doing so. The essentials:
- Who can use it: People over 18 years of age with the legal capacity to contract.
- Our role: Idesify is the Data Controller of your account data and gives you tools to manage your consents.
- Your rights: You can access, rectify, delete, object to, port, or block your data whenever you wish.
- Cancellation: You can close your account at any time from your profile.
- Applicable law: Governed by the laws of Chile, without affecting the protections of your country of residence (GDPR/LGPD).
1. Acceptance of the Terms and Legal Capacity
By creating an account or using the services of Idesify SpA (“Idesify”, “we”), you agree to comply with these Terms of Service. If you do not agree, you must stop using the services immediately.
Our services are directed exclusively to Natural Persons over 18 years of age with the legal capacity to contract. By registering, you declare that you meet this requirement. Idesify does not knowingly collect data from minors without the express consent of their legal representatives.
2. Legal Roles and Core Functionalities
For the purposes of Chile’s Law 21,719, the General Data Protection Regulation (GDPR), and Brazil’s General Data Protection Law (LGPD), Idesify acts as the Data Controller exclusively with respect to the personal data necessary to create and manage your account on our platform.
Our functionalities include:
- 2.1 Authentication: An identity verification system that allows you to validate your information quickly and reusably in new verification processes with third parties that use our platform.
- 2.2 Consent Management: An interface to grant, modify, or revoke your consents in a granular way, storing an auditable and transparent history of your activity.
- 2.3 Scope of the Service and Limitations with Third Parties: Idesify cannot modify or delete personal data processed directly by third-party companies (e.g., services that have verified your identity through us). Such third-party companies act as independent Data Controllers, and any request regarding the data they hold must be made directly to them.
3. Exercising Rights over Your Data
Idesify guarantees the full exercise of your data subject rights. You have the right to request:
- Access to your stored personal data.
- Rectification of inaccurate or incomplete data.
- Erasure (Deletion) of your information.
- Objection to the processing of your data.
- Portability of your data in a structured and commonly used format.
- Blocking or Anonymization of data processed in non-compliance with the law.
Currently, the erasure process is automated directly in your user dashboard. To exercise any of the other rights, or if you require additional assistance, you must contact our Data Protection Officer (DPO) directly at the email: privacidad@idesify.com.
4. Security and Incident Notification
Idesify implements technical, organizational, and encryption security measures by design (Privacy by Design) to protect your personal data against unauthorized access, alteration, loss, or destruction. In the unlikely event of a security breach that poses a high risk to your rights and freedoms, Idesify commits to notifying you and the competent authorities without undue delay, within the timeframes required by applicable law.
5. Intellectual Property
The Idesify website, its content, the software that supports it, the trademarks, logos, designs, and all related intellectual property rights are the exclusive property of Idesify SpA or licensed to it, and are protected by current laws and international treaties. You are not authorized to copy, reproduce, distribute, sell, or use Idesify’s content for commercial purposes without prior written authorization.
6. User Representations
By using our services, you represent and warrant that: (i) the data you provide is truthful, complete, and up to date; (ii) you will use the site and services only for lawful purposes and in accordance with these Terms; and (iii) you will not use unauthorized automated systems (bots/scrapers) to interact with the platform.
7. Prohibited Activities
You agree not to carry out activities that compromise the security or availability of our services, including:
- Unauthorized access to systems, other users’ data, or infrastructure.
- Mass collection of information.
- Sending spam, viruses, or malicious code.
- Identity impersonation (identity fraud).
- Use of the services for purposes contrary to the law applicable in your jurisdiction.
8. Cancellation and Data Retention
You may cancel your account at any time from your profile. The deletion of your account will entail the cessation of all services. After cancellation, we will apply the deletion or anonymization of your data, retaining only the information strictly necessary for the time required by law for the fulfillment of legal obligations or the resolution of disputes, in accordance with our Privacy Policy.
9. Modifications and Sub-processors
We may modify these Terms of Service at any time. Significant modifications will be proactively reported.
Supply chain transparency: In order to guarantee transparency, Idesify will notify any relevant change to its list of sub-processors at least 30 days in advance before authorizing any new provider to access personal data. If such providers are located outside your country of residence, Idesify guarantees that international transfers are carried out under standard contractual clauses or other adequate safeguarding mechanisms.
- You can review our provider’s policy here: AWS Privacy Policy
In the event that you have well-founded objections regarding a new sub-processor, you may submit your claim in writing within 30 days following the notification, to the email: privacidad@idesify.com. In such cases, Idesify may choose to:
- Cancel the intended use of the objected sub-processor.
- Propose corrective measures to mitigate the identified risks.
- Offer an alternative for the service that does not involve the sub-processor.
If no option is viable, the user may request the termination of the service with the consequent deletion of their account and data.
10. Applicable Law and Jurisdiction
These Terms are governed by the laws of the Republic of Chile, without prejudice to the mandatory consumer protection or data protection rules applicable in the user’s country of residence (such as the GDPR or the LGPD). Any dispute related to the provision of the service shall be submitted to the jurisdiction of the courts of the city of Santiago, Chile.