Resources

Developer terms

Plain-language rules for apps that use Identvia sign-in.

1. User data

• Ask only for the scopes your app needs, and use the data only to provide your app’s features.
• Don’t sell user data or use it to track people across other sites or apps.
• Publish a privacy policy, link it in the console, and delete a user’s data when they ask you to or delete their account with you.

2. Security

• Keep client secrets confidential and rotate them if they may have leaked.
• Tell us at the security contact in security.txt within 72 hours if you learn of a breach involving Identvia users.

3. Conduct

• Don’t impersonate Identvia or another organisation, and follow the brand guidelines.
• Don’t use Identvia for illegal content, spam, or to harm users.

4. Enforcement

Identvia may remove the Verified badge from, or disable, apps that break these terms. Disabling an app blocks sign-in and revokes its tokens. We tell you why in the console, and you can appeal by contacting support.

5. The service

Identvia is provided as is. We may change these terms; we’ll announce material changes to developer contacts in advance.