Is Real Privacy Policy

Introduction

Is Real Inc. ("Is Real," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our caller identity verification service.

Information We Collect

For Registered Users:

• Name (verified via identity verification provider)
• Phone number(s)
• Profile photo
• Professional information (employer, job title) if provided
• Device tokens for push notifications
• Passkey credentials (public keys only)

For Verification Recipients:

• Phone number (to deliver verification link)
• Verification interaction data (timestamp, outcome)

Information We Do NOT Collect

• Government ID documents (processed by our identity verification partner, not stored by us)
• Social Security numbers
• Financial account information
• Passwords (we use passwordless authentication)
• Call recordings or transcripts

How We Use Your Information

• To verify caller identity during phone calls
• To deliver verification SMS messages
• To display verified caller profiles to recipients
• To maintain verification history
• To communicate service updates

Third-Party Services

We use trusted third-party services:

• ID.me (identity verification)
• Twilio (SMS delivery)
• Supabase (data storage)
• Vercel (hosting)

These providers have their own privacy policies and maintain industry-standard security practices.

Information Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Information is only shared with service providers necessary to operate Is Real (listed above under Third-Party Services) and as required by law.

Data Security

We protect your data using:

• Encryption at rest and in transit
• Passkey authentication (no passwords to steal)
• Row-level security policies
• Regular security assessments

Your Rights

You may:

• Access your personal data
• Correct inaccurate data
• Delete your account
• Export your data
• Opt out of SMS messages

Data Retention

• Active accounts: Data retained while account is active
• Deleted accounts: Data removed within 30 days
• Verification logs: Retained for 1 year, then archived

Contact Us

Questions? Contact us at privacy@isreal.com