Datta Terms of Service

0 · The essentials in ten lines

• Your data is yours. We keep it sealed and you decide who sees what.
• Your contacts' data is theirs. If you sync your address book, you accept that each subject can see counts of who holds their datum and delete it from your synced copy too.
• We don't sell data. There are no ads. There are no hidden profiles. We do measure how the product is used in order to improve it, as counts that point at nobody and without touching the content of your vault.
• Identity verification means "this person proved who they say they are", it does not guarantee solvency, honesty, or absence of fraud.
• If you authorize an AI agent to read your vault, you answer for that agent as for yourself.
• You can leave whenever you want: export your data and delete your account in-product.
• The service is under active development: some features are beta and things will change.
• Our liability has limits (the section «Warranties and limits of liability»); you answer for how you use the service (the section «Indemnity»).
• 18 or older.
• These terms exist in Spanish and English; if they conflict, the English version controls, except where your consumer law imposes yours.

1 · Who we are and what you accept

1.1 The Datta service (mobile app, desktop console, website, APIs, and MCP server) is provided by DATTTA LLC, a Delaware limited liability company (United States), file 10563369, formed on 26 March 2026, trading as «Datta», with its address at 1201 N Orange St, Ste 7665, Wilmington, DE 19801-1186, United States ("Datta", "we").

1.2 By creating an account or using the service you accept these terms, the privacy policy, the biometric policy if you verify, and the cookie policy.

1.3 You must be 18 or older with legal capacity to contract. Datta is not directed at children and we do not knowingly open accounts for them.

1.4 If you use Datta on behalf of a business, you represent you can bind it, and «you» includes the business. Business accounts add the business services agreement and the data processing agreement.

2 · What Datta is

2.1 A data vault: you store verified identity, documents, financial data, and other categories, sealed, and you grant and revoke access to the people, businesses, and agents you choose.

2.2 A trust network: verified data raises the trust level of every relationship, a person who proved their identity, a business that proved it exists, a datum that arrives straight from its subject instead of copied from third parties.

2.3 What Datta is not: we are not a bank and give no financial, legal, or investment advice; we are not a credit bureau; we are not a data broker: we buy and sell nobody's data.

3 · Your account and your security

3.1 Registration asks for email, phone, and password, and verifies both channels with codes. Keep your credentials secret; what happens under your session is attributable to you unless you tell us of a compromise as soon as you detect it.

3.2 We may require a second factor for sensitive operations. In the console you can register passkeys; your phone's biometric unlock belongs to the operating system and never reaches us.

3.3 Manage your sessions and devices in-product (list, close, review access history).

4 · Your content: ownership and a minimal license

4.1 Everything you store in your vault is yours. Datta acquires no rights over your content except the minimal technical license to operate the service: store it sealed, transmit it encrypted, index it blindly, and show it to you and to whomever you authorize.

4.2 That license ends when you delete the content or close the account, with the strict exceptions in the retention policy (deletion evidence without the datum, legal obligations).

4.3 We will never use the content of your vault for advertising, sell it, or use it to train artificial-intelligence models.

4.4 We do measure how the product is used so we can improve it. That measurement does not include the content of your vault, carries no account identifier of yours, is only ever read as counts that point at no person, and you can opt out of it in one tap from settings. The detail is in the privacy policy.

4.5 We run no advertising. If Datta ever offered you a partner recommendation based on your own situation, it would be under four conditions we take on from now: you turn it on and it ships off; the partner receives no datum of yours unless and until you accept the offer; it is never built on health data, biometrics, identity verification, immigration status, or financial hardship; and it is never charged per datum, per segment, or per impression.

5 · Identity verification: what it means and what it doesn't

5.1 "Verified" means that, at verification time, the person passed the checks described in the biometric policy: document read and matched against their face on their device, and/or channels (email, phone) confirmed by code. Every datum carries its verification level.

5.2 Verification does not guarantee that a person is solvent, trustworthy, or legitimate in their intentions, and it does not substitute the regulatory duties of whoever relies on it (e.g. a financial institution's KYC/AML obligations remain that institution's).

5.3 Verification can fail or degrade (sophisticated forgeries, documented technical limits). We publish known limitations and fix them; we are not liable for third-party decisions based on a verification result, within the limits of the section «Warranties and limits of liability».

5.4 If an automated verification blocks you, you may request human review (channel: datta.global/contact).

6 · Sharing: grants, live references, and revocation

6.1 You share through grants: explicit, scoped, revocable authorizations. The recipient sees what the grant allows, for as long as the grant lives.

6.2 When you share with someone you're connected to, you don't hand them a copy: you hand them a live reference to your datum. Update it and they see the new value; revoke and their access dies without "bouncing back" to the last copied value.

6.3 Revocation takes effect in our systems immediately and propagates to synced devices at the next reconciliation. What a third party saw while permitted, they saw: revocation does not erase other people's memories.

7 · The address book and the network: the reciprocity rule

This clause is the heart of the contacts module. It exists because address-book data has two legitimate stakeholders with different interests: the person who keeps the book and the people in it. Datta resolves that conflict in favor of the subject of each datum, and asks you to accept that as a condition of syncing.

7.1 Your contacts' data belongs to them. Your address book is yours as a collection, the nickname you gave someone, your notes, your labels are yours and nobody else ever sees them: but Ana's phone number is Ana's.

7.2 By turning on address-book sync you accept that:

• (a) your contacts are held sealed: neither Datta nor other users can read them;
• (b) if the subject of a datum signs up, verifies their identity, and authorizes it, your address book can start receiving their data straight from them (live reference, the section «Sharing: grants, live references, and revocation»);
• (c) the subject can delete their data from your synced address book: "reciprocal deletion", and you accept that deletion as a condition of the service. The entry disappears from your synced copies; your own annotations about that person are treated as yours;
• (d) every deletion is recorded with auditable evidence: so a dispute ("you deleted me" / "I never deleted") has a verifiable answer, not word against word.

7.3 The honest limit. If you revoke the contacts permission or uninstall the app, Datta deletes what it holds and stops propagating: but it cannot execute deletions inside your device: what your operating system already had stays under your control and your responsibility. Reciprocal deletion is enforceable against honest clients; the evidence in this section(d) is what makes disputes resolvable.

7.4 What the network never does. It never shows anyone a datum of yours they don't already possess (reveal-by-possession: to see a full value you must prove you hold it, via a code to that very email or number); it never shows names, notes, labels, or photos from other people's address books; it never offers bulk people-search.

7.5 Module-specific prohibitions. You may not: upload address books that aren't yours (purchased, scraped, your employer's without authorization); use the network to build prospecting or spam lists; attempt to brute-force third-party data out of the counting channel (it is limited and audited); resell or export third-party data obtained from the service.

7.6 Businesses too. A business account that receives or syncs people's data accepts the same rule: the subject's reciprocal deletion and revocation reach it, and its use stays limited to the authorized purpose, per the section «Business accounts», the business services agreement and the flow-through deletion clause of the data processing agreement.

7.7 This module may not be available on all platforms or countries at the same time.

8 · Business accounts

8.1 A business can: verify its own existence and attributes; request and receive personal data with each subject's authorization; issue and manage grants into its organization.

8.2 The full business terms live in the business services agreement: what is contracted, availability and maintenance, support and escalation, prices and invoicing, interface usage limits, confidentiality, liability, termination, and the exit with its export deadlines. That agreement is accepted together with these terms when a business account is opened.

8.3 For personal data a business processes through Datta, the business is the controller and Datta its processor, under the data processing agreement, which forms part of these terms for business accounts.

8.4 The business undertakes to: use data only for the purpose the subject authorized; honor revocations and reciprocal deletions also in its internal systems fed from Datta; and deliver the third-party notice when it uploads people's data (non-user notice).

8.5 Order of precedence. In a business account these rank in this order: the order form; the data processing agreement on everything that is processing of personal data; the business services agreement; and these terms. If your business requires a separately signed master agreement, that master agreement prevails on what it expressly regulates and the above governs everything else.

8.6 The limit that does not move. None of the above takes a right away from any person. The personal account of each member of a business is still governed by these terms, and neither a master agreement nor an order form can change that.

9 · AI agents

9.1 You can authorize AI agents to read (and, where enabled, write) parts of your vault through Datta's MCP server, with grants that are per-session, scoped, and time-boxed: no wildcard scopes, read never implies write, lifetime between 60 seconds and 30 days (default 1 hour), and a sensitivity ceiling by plan. You see and revoke agent grants in-product; revocation cuts access immediately, and your grant history is preserved for you.

9.2 Your agent acts as you. Whatever an agent you authorized does with the data you exposed to it is your responsibility toward Datta and toward third parties, as if you had done it (the section «Indemnity»). Choose carefully who gets a key.

9.3 We may limit, suspend, or revoke an agent's access (abuse, security, anomalous patterns) without touching the rest of your account.

9.4 Agent access is recorded in your activity history with the agent identified as the actor.

10 · Acceptable use, suspension, termination

10.1 You may not use Datta to: break laws (including the data protection laws of YOUR countries of operation); impersonate identities; upload malware; interfere with or probe the service without authorization (responsible disclosure channel: datta.global/contact); evade technical limits; or surveil third parties.

10.2 We may suspend or close accounts that violate these terms, with notice except in urgency (fraud, risk to others, legal order). Wherever lawful, we give you the chance to export your content before final closure (retention).

10.3 You can close your account at any time in-product; the deletion cycle is in the retention policy.

11 · Warranties and limits of liability

11.1 Datta is provided "as is" and "as available." To the maximum extent your law allows, we disclaim implied warranties of merchantability, fitness, and non-infringement. Features marked beta can change or be withdrawn.

11.2 To the maximum extent your law allows, we are not liable for indirect or consequential damages, lost profits, data loss caused by third parties you authorized, or third-party decisions based on verification results (the section «Identity verification: what it means and what it doesn't»).

11.3 Our total aggregate liability for all claims in any year is capped at the greater of USD 100 and what you paid us in the previous 12 months.

11.4 What we do not limit: nothing here excludes liability for willful misconduct or gross negligence, for death or personal injury, or any right your consumer law makes non-waivable. If you live in the EU/EEA, the UK, or any country with mandatory protections, those protections prevail over this section.

12 · Indemnity

12.1 You agree to hold Datta (and its directors, employees, and suppliers) harmless against third-party claims, damages, and reasonable expenses (including legal fees) arising from: (a) your content and data uploaded in violation of third-party rights or the law that applies to you; (b) your use of the service in violation of these terms, including uploading other people's address books prohibited by the section «The address book and the network: the reciprocity rule»; (c) acts of AI agents you authorized (the section «AI agents»); (d) your breach of data protection law in your capacity as controller (the section «Business accounts», businesses).

12.2 For business accounts, the indemnity also covers claims by data subjects whose data the business processed through Datta outside the authorized purpose.

12.3 Conditions: we will notify you of the claim without delay, let you direct the defense with reasonably acceptable counsel, and not settle without your consent (not unreasonably withheld).

13 · Changes to the service and to these terms

13.1 The product evolves; features may be added, changed, or withdrawn. Material changes to these terms get at least 15 days' notice in-product or by email; if you disagree, you can close the account before they take effect and export your data. Changes that only benefit you or that the law requires may take effect sooner.

13.2 Terms are versioned; the history lives at datta.global/legal.

14 · Governing law and disputes

14.1 For business accounts, these terms are governed by the laws of the State of Delaware (United States), without regard to its conflict-of-laws rules, and disputes go to the courts sitting in Delaware. If you are a consumer, none of this takes away the mandatory law or the courts of your country of habitual residence, which prevail over this paragraph.

14.2 We do not force you into arbitration and we do not ask you to waive class actions. If you are a consumer in the European Union, you may litigate in your local courts and use the European Commission's online dispute resolution platform: ec.europa.eu/consumers/odr.

14.3 Before any formal action, write to datta.global/contact, most problems get solved in days.

15 · Miscellaneous

Assignment (you may not assign without our consent; we may assign to an affiliate or successor with notice, relevant given the planned corporate conversion); force majeure; sanctions and export (you may not use Datta if you are on applicable sanctions lists or in embargoed territories); severability; entire agreement (these terms + linked policies + business services agreement and DPA for businesses); no waiver; survival (the section «Your content: ownership and a minimal license», the section «Warranties and limits of liability», the section «Indemnity», the section «Governing law and disputes» survive closure); languages (the section «The essentials in ten lines» last line); contact: datta.global/contact.

Version 0.0.1 · Last updated: 24 August 2026 · Controller: DATTTA LLC (trading as «Datta») · Contact: datta.global/contact