Privacy Policy

Effective March 13, 2026

DLG Holdings Limited ("Perdura," "we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital evidence collection platform and related services.

1. Information We Collect

Account Information. When you create an account, we collect your name, email address, firm name, and professional role. If you authenticate via magic link, we process only your email address for authentication purposes.

Evidence Data. When you use Perdura to capture and preserve digital evidence, we process the content you collect—including web page captures, screenshots, metadata, and associated timestamps. This data is stored exclusively for your firm's use and is never accessed by Perdura staff except as required to provide technical support with your explicit consent.

Usage Data. We automatically collect technical data such as IP address, browser type, device information, and interaction patterns within the platform. This information helps us maintain security and improve our service.

Payment Information. Payment processing is handled by our third-party payment processor. We do not store full credit card numbers on our servers.

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Perdura platform
• Generate RFC 3161 timestamps and cryptographic chain-of-custody records
• Authenticate your identity and manage your account
• Communicate with you about service updates, security alerts, and support
• Analyze usage patterns to improve platform performance and reliability
• Comply with legal obligations and enforce our Terms of Service

3. Data Retention

Evidence data is retained for the duration of your subscription plus 90 days, unless you request earlier deletion. Account information is retained for as long as your account is active. Upon account termination, we provide a 30-day window for data export before permanent deletion.

Cryptographic timestamps and chain-of-custody records may be retained longer to fulfill legal preservation obligations, even after evidence data is deleted.

4. Data Security

We implement industry-standard security measures to protect your data, including:

• AES-256 encryption at rest for all stored evidence
• TLS 1.3 encryption for all data in transit
• Role-based access controls with firm-level data isolation
• Regular security audits and penetration testing
• Immutable audit logs for all evidence operations

5. Data Sharing

We do not sell, trade, or rent your personal information. We may share data only in the following circumstances:

• Service Providers. With trusted third-party vendors who assist in operating our platform (e.g., cloud infrastructure, email delivery), bound by confidentiality agreements
• Legal Requirements. When required by law, court order, or governmental authority
• Business Transfers. In connection with a merger, acquisition, or sale of assets, with advance notice to affected users

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict certain processing activities
• Data portability—receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at privacy@perdura.io.

7. Cookies and Tracking

Perdura uses only essential cookies required for authentication and session management. We do not use advertising cookies, social media trackers, or third-party analytics that track individual users across sites.

8. International Data Transfers

Perdura's infrastructure is hosted in the United States. If you are accessing the platform from outside the United States, your data will be transferred to and processed in the United States. We implement appropriate safeguards for international transfers in compliance with applicable data protection laws.

9. Children's Privacy

Perdura is designed for legal professionals and is not intended for use by individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform at least 30 days before taking effect. Continued use of Perdura after changes become effective constitutes acceptance of the updated policy.

Contact

For privacy-related inquiries, contact us at privacy@perdura.io.

DLG Holdings Limited
Malta