Privacy is the default
The state collects the minimum necessary, retains it for the shortest necessary period, and discloses properties, not evidence.
Relying parties receive yes/no answers with signed proofs. They never see identity evidence. The public role returns only balance, nonce, and existence, never public keys, identity names, or address-to-identity linkages.
What the state verifies
The state checks whether a claim about you is currently true. It does not retain the answer beyond what is needed to issue a proof, and it does not share the underlying evidence.
- Whether an identity is registered
- Whether a specific claim about the identity is currently true
- Whether a credential was issued and has not been revoked
- Whether a wallet belongs to a given identity
What the state protects
The following categories of data live only on the access-controlled proprietary core. They are never returned over the public API, and access is logged.
- Identity documents, passports, ID cards, photos
- KYC and KYB evidence
- Beneficial-owner records
- Wallet private keys
- Address-to-identity linkages (revealed only to the holder)
Your rights
A formal data-protection law and independent data-protection authority are not yet in force. Until they are, you may contact the team at business@spacexity.org to request access to, correction of, or deletion of personal data the state holds about you, subject to lawful retention obligations.