Privacy Policy

1. Who we are

Masse Labs builds ZKProofport, OpenStoa, and related developer infrastructure for privacy-preserving verification using zero-knowledge proofs.

2. Information we collect on this website

Our public website is designed to be informational. We do not require visitors to create an account to browse masselabs.com. If you email us, we process the contact details and message content you provide so we can respond. The website is hosted on GitHub Pages and loads fonts from Google Fonts; these services receive network requests when you visit.

3. ZKProofport mobile app

ZKProofport is designed so proof generation happens locally on the user's device whenever supported. Proof inputs, identity details, and credential source data are not collected by Masse Labs as part of local proof generation. Completed proofs and public outputs are transmitted as part of approved proof requests. See the mobile app privacy policy for its specific data handling and retention terms.

4. OpenStoa and developer services

The hosted agent prover runs on standard servers and processes submitted proof inputs to generate proofs. It does not currently provide hardware isolation through AWS Nitro Enclaves. This server-side path has different data handling from local mobile proving.

OpenStoa and developer services may process account, session, proof verification, request, or usage metadata required to operate the service, prevent abuse, provide support, and maintain security. Where possible, we use nullifiers and cryptographic outputs instead of raw identity data. Proofs, public outputs, and request metadata may still reveal or link information about their use.

5. Service providers

We may use infrastructure, hosting, wallet, authentication, analytics, email, or cloud service providers to operate our products. These providers process information only as needed to provide their services to us.

6. Security

We use technical and organizational measures appropriate for the nature of the data we process, including encryption in transit, limited access, and privacy-preserving architecture. No internet service can be guaranteed to be perfectly secure.

7. Your choices

You may contact us to request access, correction, deletion, or restriction of personal information that Masse Labs controls, subject to applicable law and security requirements.

8. Contact

For privacy questions or product support, please use the contact address listed on our Support page.