Legal & Support Center

ITTM ("Company", "we", "our", or "us") operates the DID.ZONE platform and associated mobile applications. We are committed to protecting your personal data in accordance with the European Union General Data Protection Regulation (GDPR) and Apple App Store review guidelines.

1. Information We Collect

• Account Credentials: Email address, phone number (used solely for one-time verification codes and authentication), and public cryptographic identifiers.
• Device Hardware Binding: Pseudonymous device identifiers stored in local hardware-backed storage (such as iOS Keychain) to bind active access entitlements to authorized hardware and prevent unauthorized duplication.
• Digital Asset Metadata: Digital tickets, certificates, and entitlements issued to or managed by your account.

2. How Data is Used

Your information is processed strictly to provide secure entitlement verification, issue dynamic entry codes, facilitate verified transfers between authorized users, and maintain the operational security of the network. We do not sell, rent, or monetize your personal data.

3. Data Retention and Account Deletion

In accordance with Apple App Store requirements, users have the right to request full account deletion at any time directly through the mobile application settings or by contacting support@did.zone. Upon receiving a valid request, personal identifiers are permanently scrubbed from our active databases within 30 days.

By accessing or using DID.ZONE or our mobile applications, you agree to be bound by these Terms of Service. If you do not agree with any part of these terms, you must not use our software or services.

1. Digital Entitlements and Device Binding

Digital passes, tickets, and certificates issued through the platform represent controlled access entitlements. Presenting an entry credential requires an authorized, bound physical device. Tampering with device attestation, sharing screenshots of dynamic security codes, or attempting automated extraction may result in the automatic invalidation of the credential.

2. User Responsibilities & Conduct

• You are responsible for maintaining control over the physical device registered with your account.
• You agree not to bypass device verification mechanisms or deploy unauthorized automated tools against the API.
• Transfers of digital entitlements must occur solely through the verified protocol mechanisms.

3. Service Availability and Modifications

We continually enhance and update our security protocols. We reserve the right to temporarily suspend or modify access for essential maintenance, security patching, or regulatory compliance without prior individual notice.