Privacy Policy

Privacy Policy – Version 1.0
Effective Date: February 10, 2026
Last Updated: February 10, 2026

1. Overview

This Privacy Policy describes how information is handled in connection with the Soteria Private Arbitration Tribunal (the "Tribunal" or "Service"), operated by OptiMystic Holdings Corp. ("OptiMystic") under license from the Soteria Covenant Trust ("Soteria Covenant").

The Tribunal is designed around a principle of data minimization and proportionality. Information is collected only as necessary for adjudicative proceedings, record-keeping, and constitutional obligations.

2. Information We Collect

2.1 Account Information

When you register as an External Claimant, the Tribunal collects:

Full legal name
Email address
Password (stored as a salted, hashed value using industry-standard algorithms — the plaintext password is never stored)
Phone number (optional)

Covenant members authenticate through the Membership Portal; the Tribunal receives only the member's identifier, name, alias, and tier level.

2.2 Case Filing Information

When you file a grievance or participate in proceedings, the Tribunal collects:

Claimant and Respondent identifying information (names, addresses, contact details)
Description of the dispute, facts, and relief sought
Monetary amounts and currency designations
Supporting documents uploaded as evidence
Communications and filings submitted during proceedings

2.3 Sealed Identity Data

If a Claimant elects to seal their identity:

The Claimant's identifying information is stored with the same security as all other case data
Access is restricted to assigned Panelists, Arbiters, opposing parties, and Tribunal staff
The Claimant's identity is not published in public case records, the Debtor Registry, or any federated data shared via the Trust Network
Sealed status may be lifted by order of the presiding Arbiter upon showing of good cause

2.4 Tribunal Officer Data

Tribunal officers (Advocates, Panelists, Arbiters, Chief Arbiter) provide:

Qualifications and jurisdictional experience
GPG public key fingerprint (Tier 2+)
Impartiality statements, judicial philosophy, or leadership vision (as applicable)
Code of conduct acknowledgment

2.5 Audit Logs

The Tribunal maintains comprehensive audit logs of all system actions, including:

Login attempts (successful and failed)
Case stage transitions
Document uploads and access
Judgment votes and signatures
Administrative actions

Audit logs are retained for a minimum of seven (7) years for constitutional accountability purposes.

2.6 Payment Information

Payment information is processed by third-party processors. The Tribunal does not store full payment card numbers, bank account details, or private financial credentials. Transaction references and amounts are retained as part of case records.

2.7 Technical Data

The Tribunal collects minimal technical data necessary for security:

IP addresses (for rate limiting and abuse prevention — hashed and retained only for the rate-limit window)
Session identifiers (temporary, cookie-based)
CSRF tokens (session-scoped, not persistent)

The Tribunal does not use analytics trackers, advertising cookies, behavioral profiling, or third-party tracking scripts.

3. How Information Is Used

Information is used solely to:

Process and adjudicate grievances under the GRA{D|M}[E]JFAR Protocol
Assign qualified panels and manage case proceedings
Issue judgments, final orders, and certificates
Maintain the Debtor Registry (Lex Nigra)
Federate Tier 2/3 registry entries to participating Trust Network members
Comply with constitutional audit and accountability requirements
Communicate with parties regarding their cases
Prevent abuse, fraud, and unauthorized access
Generate anonymized statistical reports on tribunal activity

4. Information Sharing

4.1 Within Proceedings

Case information is shared with:

The opposing party (as required for fair proceedings)
Assigned Panelists and Arbiters
Tribunal staff (as necessary for case administration)
Engaged Advocates (for their client's case only)

4.2 Public Records

The following is published as part of the public record:

Case reference numbers, filing dates, and current stage
Non-sealed party names
Judgment summaries and final orders
Debtor Registry entries (for unresolved judgments)

4.3 Trust Network Federation

Tier 2 and Tier 3 Debtor Registry entries are federated to participating Trust Network member organizations. Federated data includes judgment references, amounts, and non-sealed party identifiers. Tier 1 (private) entries are never federated.

4.4 No Commercial Sharing

The Tribunal does not sell, rent, license, or otherwise share personal information with third parties for commercial, marketing, or advertising purposes. Ever.

5. Data Retention

Data Type	Retention Period
Case records and filings	Permanent (ecclesiastical record)
Judgments and final orders	Permanent
Audit logs	7 years minimum
Account information	Duration of account + 2 years
Sealed identity data	Same as case records (sealed designation preserved)
Payment transaction references	7 years
Session data and CSRF tokens	Session duration only
Rate-limiting data	1–24 hours

6. Data Security

The Tribunal implements:

Encryption at rest for all stored data
TLS/HTTPS encryption for all data in transit
Salted password hashing (bcrypt)
GPG-signed judgments and certificates
Role-based access control with tier-based authority enforcement
Comprehensive audit logging of all access and modifications
Redis-based session management with secure cookie attributes
CSRF protection on all state-changing operations

7. Your Rights

7.1 Access

You may request access to the personal information the Tribunal holds about you by contacting the Office of the Clerk.

7.2 Correction

You may request correction of inaccurate personal information. Note that case filings and judgments constitute the official record and may not be altered except through formal amendment procedures.

7.3 Deletion

You may request deletion of your account and associated personal information, subject to the following limitations:

Case records, filings, and judgments are retained as permanent ecclesiastical records and cannot be deleted
Audit logs are retained for the mandatory retention period
Debtor Registry entries are retained until the underlying judgment is resolved
Data required for ongoing proceedings cannot be deleted until the case reaches Resolution

7.4 Data Portability

You may request a copy of your personal data in a structured, machine-readable format.

7.5 Objection

You may object to specific data processing activities. The Tribunal will assess each objection against its constitutional obligations and inform you of the outcome.

8. International Considerations

The Tribunal operates as an ecclesiastical institution under the Soteria Covenant Trust. Data may be processed and stored in the United States. By using the Service, you acknowledge that your information may be transferred to and processed in the United States.

For users subject to the General Data Protection Regulation (GDPR) or similar data protection laws, the rights described in Section 7 apply. Additional requests under specific regulatory frameworks may be directed to the Office of the Clerk.

9. Children

The Service is not intended for persons under 18 years of age (or the age of legal majority in their jurisdiction). The Tribunal does not knowingly collect personal information from minors. If you believe a minor has submitted information, contact the Office of the Clerk for removal.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. Changes will be posted on the Tribunal website with an updated "Last Updated" date. Material changes will be announced via the Notice Board.

11. Contact

For privacy inquiries, data requests, or concerns:

Soteria Private Arbitration Tribunal
Office of the Clerk
Email: clerk[at]soteriatribunal[dot]org
Web: tribunal.soteriatribunal.org

OptiMystic Holdings Corp.
Registered Agent: Wyoming, United States
Email: legal[at]optimystic[dot]com