Privacy Notice
Effective date: October 18, 2026
This notice explains how SettleVIA Inc. ("SettleVIA", "we", "us") handles personal data when you visit settlevia.com (the "website") or contact us through it.
Who we are
SettleVIA Inc. is responsible for the personal data described in this notice. For data protection law in the European Economic Area, the United Kingdom and Switzerland, we are the controller.
SettleVIA Inc.
500 4th St NW, Suite 102 PMB 2947
Albuquerque, NM 87102
United States
privacy@settlevia.com
What this notice covers
This notice covers the website only.
SettleVIA makes authorization and proof infrastructure that governments, regulators and licensed institutions deploy on their own systems. Personal data processed in a deployment is governed by the agreement with the deploying authority or licensed institution, and by that party's own privacy notice. SettleVIA's design keeps personal details out of the Proof: proofs carry pseudonymous IDs, never names. If you have a question about a deployment, contact the authority or institution that runs it, or write to privacy@settlevia.com and we will help you find the right contact.
What we collect
We collect personal data in two ways.
When you use the contact form. We collect what you enter:
- your name and email address (required);
- your organization and your country or region (optional);
- the type of organization you select under "I am";
- anything you write in the message field.
Please do not include sensitive information in your message, such as health data, government identification numbers or financial account details. We do not need it to reply.
When you ask us to send you the brief. If you enter your email address to request the brief ("Thirty-one outcomes from one proof"), we collect that email address. We use it only to send you the brief and to follow up on your request. We do not add you to a mailing list.
If you write to us by email, we collect your email address, your name as it appears, and the content of your message.
When you visit any page. Like most websites, our hosting provider automatically records technical information in server logs: your IP address, the date and time of your request, the page or file requested, your browser and operating system as reported by your browser, the referring page, and whether the request succeeded. We do not use this to identify you.
We do not ask you to create an account, and we do not buy personal data about visitors from anyone else.
How we use it
We use the information you send us to:
- reply to your enquiry and continue the conversation you start;
- understand which kind of organization is asking, so the right person replies;
- keep a record of our correspondence with organizations we work with or may work with.
We use server logs to:
- deliver the website and keep it working;
- protect the website against abuse, attacks and fraud;
- understand overall traffic in aggregate, such as how many requests a page receives.
Sending an enquiry does not add you to a mailing list. If we ever offer updates by email, we will ask you first, and you can stop them at any time.
We do not make decisions about you based solely on automated processing.
Legal bases (EEA, UK and Switzerland)
If you are in the EEA, the UK or Switzerland, we rely on these legal bases under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection:
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry and continuing the correspondence | Our legitimate interest in responding to people and organizations who contact us. Where you contact us about a possible agreement, taking steps at your request before entering into a contract. |
| Keeping records of correspondence | Our legitimate interest in keeping an accurate record of our dealings with organizations, and in establishing or defending legal claims. |
| Server logs for operation and security | Our legitimate interest in running a secure, working website. |
| Disclosure to authorities where the law requires it | Compliance with a legal obligation. |
| Any email updates, if offered in future | Your consent, which you can withdraw at any time. |
Where we rely on legitimate interests, we have weighed them against your rights. You can ask us for details of that assessment and you can object at any time (see "Your rights").
Who we share it with
We do not sell personal data. We do not share it for cross-context behavioral advertising, and we do not allow advertising networks on the website.
We share personal data only with:
- Service providers acting on our instructions: our hosting provider, which serves the website and keeps its logs, and our form provider, FormSubmit (formsubmit.co), which receives contact-form and brief-request submissions and delivers them to us by email, together with our email and IT providers. They may use the data only to provide their service to us, under written terms that require them to protect it.
- Professional advisers, such as lawyers and accountants, where needed, under a duty of confidentiality.
- Authorities, where the law requires it or to establish, exercise or defend legal claims.
- A successor organization, if SettleVIA is involved in a merger, acquisition or sale of assets. The successor would remain bound by this notice for data collected under it.
If your enquiry concerns a specific program or deployment, we may introduce you to the authority or institution involved, but only with your agreement.
International transfers
SettleVIA is based in the United States. Our service providers may process personal data in the United States and in other countries where they operate.
When we transfer personal data from the EEA, the UK or Switzerland to a country without an adequacy decision, we use a recognized safeguard: the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or, where a provider is certified, the EU-US Data Privacy Framework and its UK and Swiss extensions. You can ask us for a copy of the relevant safeguard at privacy@settlevia.com.
How long we keep it
- Enquiries and correspondence: for 24 months after our last contact with you, then deleted. If the conversation leads to an agreement with your organization, we keep the related correspondence for as long as that agreement and the applicable limitation period require.
- Server logs: for up to 90 days, unless we need a specific record longer to investigate a security incident.
- Contact-form copies held by our form provider: deleted from its systems within 30 days of delivery to us.
We may keep data longer if the law requires it or while it is needed for a legal claim.
Security
We protect personal data with measures suited to what we hold. The website is served over an encrypted connection (HTTPS). Access to enquiries is limited to the people who need it to reply. We require our service providers to protect the data they handle for us.
No method of transmission over the internet is completely secure. If you have found a security issue, please report it to security@settlevia.com.
Your rights
Everyone. Wherever you are, you can ask us to:
- tell you whether we hold personal data about you and give you a copy;
- correct it if it is wrong;
- delete it;
- stop contacting you.
We will respond to any such request, whatever country you are in.
EEA, UK and Switzerland. You also have the right to restrict our processing, to object to processing based on legitimate interests, to data portability, and to withdraw consent where we rely on it. You can complain to the data protection authority where you live or work. In the UK, that is the Information Commissioner's Office. We would welcome the chance to address your concern first.
California. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and not to be treated differently for exercising these rights. In the past 12 months we have collected identifiers (name, email address, IP address), professional information (organization and organization type) and internet activity (server-log data), from you directly and from your browser, for the purposes described above. We disclosed them only to the service providers and advisers listed above. We have not sold personal information or shared it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information. We honor Global Privacy Control signals as a request to opt out of sale or sharing, although we do neither.
Other US states. If you live in a US state with a comprehensive privacy law, you may have similar rights to access, correct and delete your personal data, and to opt out of sale, targeted advertising and profiling. We do not sell personal data or use it for targeted advertising or profiling. We will honor valid requests under these laws, and if we decline a request you may appeal by replying to our decision.
How to make a request. Email privacy@settlevia.com. We may ask for information to confirm your identity, usually by replying from the email address you used to contact us. You may use an authorized agent; we may ask the agent for written authority from you and confirm your identity directly.
We aim to respond within one month. Where the law allows a longer period (for example, 45 days under California law, extendable once), we will tell you if we need it and why.
Cookies and similar technologies
The website does not use cookies. It does not use local storage, tracking pixels, analytics tools or advertising tags, and it does not load fonts, scripts or other content from third parties. Every file the website uses is served from our own domain.
Your browser may still keep its own ordinary cache of the files it has downloaded. You control that through your browser settings.
If we add cookies or analytics in future, we will update this notice first and, where the law requires it, ask for your consent before setting them.
Our website does not respond to "Do Not Track" signals, because it does no tracking for such a signal to switch off.
Links to other websites
The website links to some third-party sites, such as the United Nations guidelines for the use of the SDG icons. Those sites have their own privacy notices, and this notice does not cover them.
Children
The website is for professional audiences and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact privacy@settlevia.com and we will delete it.
Changes to this notice
We may update this notice when our practices or the law change. The effective date at the top shows when it last changed. If we make a significant change, such as starting to use cookies or analytics, we will say so prominently on the website before the change takes effect.
Contact us
For any question about this notice or your personal data:
SettleVIA Inc.
500 4th St NW, Suite 102 PMB 2947
Albuquerque, NM 87102
United States
Privacy: privacy@settlevia.com
Security issues: security@settlevia.com
If you are in California and are not satisfied with our response, you may contact the California Attorney General at oag.ca.gov. If you are in the EEA, the UK or Switzerland, you may contact your data protection authority.