This Privacy Policy describes how Ethio Pass collects, uses, and protects your personal information when you use our Services. We are committed to protecting your privacy in accordance with the laws of the Federal Democratic Republic of Ethiopia, including the Personal Data Protection Proclamation (No. 1321/2024).

1. Information We Collect

We collect information necessary to provide and secure our Services, including:

• Personal Identification Information: Your full name, date of birth, gender, and other information present on your government-issued ID.
• Document Information: Images of your National ID, Passport, or Driver's License that you provide for verification.
• Biometric Information: A selfie image for liveness detection and facial comparison against your ID photo.
• Contact Information: Your email address and phone number for account creation and communication.
• Usage Data: Information about how you interact with our Services, such as API calls and login history, for security and service improvement.

2. How We Use Your Information

Your information is used for the following purposes:

• To create and manage your Ethio Pass account.
• To verify your identity and prevent fraud (e-KYC).
• To enable your use of the Services, such as Single Sign-On and digital signatures.
• To secure your account and our platform.
• To communicate with you about your account and our Services.
• To comply with our legal obligations under Ethiopian law.

3. Data Security

We implement state-of-the-art security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. This includes encryption of data at rest and in transit, access controls, and regular security audits. Your biometric data is processed securely and used solely for the purpose of verification.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following limited circumstances:

• With Your Consent: When you use your Ethio Pass to log in to a third-party service (government or private), we will share only the necessary information to authenticate you, with your explicit consent for each transaction.
• For Legal Reasons: We may disclose information if required to do so by law or in response to valid requests by public authorities in Ethiopia.

5. Your Rights

In accordance with the Personal Data Protection Proclamation (No. 1321/2024), you have the right to:

• Access the personal data we hold about you.
• Request the correction of inaccurate or incomplete data.
• Request the deletion of your personal data, subject to legal and contractual restrictions.
• Object to or restrict the processing of your data in certain circumstances.

To exercise these rights, please contact our support team.

6. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page.