> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tythe.finance/llms.txt
> Use this file to discover all available pages before exploring further.

# Data & Privacy

> What Tythe reads, what it stores and for how long, what is public by nature, and what you control.

Tythe underwrites from data. This page states exactly which data, where it lives, who can see it, and what you can switch off.

### Public by nature

Tythe runs on a public blockchain. The following are visible to anyone, as all on-chain activity is.

* Your account address, its balance, and its liens, reservations, and payment sessions.
* Your agents' ERC-8004 identities and their bindings to your account.
* Every mandate you issue, with its ceiling and effective values.
* Every action your agents take, with counterparty, amount, rail, and revenue tag.
* Your Loans, liens, and repayments, and your Lend and Save positions.
* The attested outcomes: your Credit Rating, Credit Limit, plus each delegated agent's Conduct Rating and effective Financial Scope.

Your identity is not public. Only a verification reference is stored on-chain. Nothing on-chain links your account to your name except what you choose to disclose.

### Stored off-chain

| Data                                               | Why                                           | Where                                                                                     | Retention                                                                                     |
| -------------------------------------------------- | --------------------------------------------- | ----------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------- |
| Verification outcome                               | To register you as a principal                | The verification provider; a reference on-chain                                           | For the life of the account and as required by law                                            |
| Underwriting inputs and outputs, with reason codes | Your rating history; disputes; model training | Tythe's encrypted store                                                                   | For the life of the account; decisions retained as training examples without identifying data |
| Bank data                                          | Underwriting, with your consent               | Tythe's encrypted store, per-principal keys, accessible only to the underwriting pipeline | Until you revoke; purged within a bounded window after revocation                             |
| The prose of every instrument you sign             | So any party can verify the on-chain hash     | A content-addressed store and Tythe's copy, keyed by hash                                 | Permanent                                                                                     |
| Receipts and standing signals                      | Agent underwriting; your activity views       | Tythe's event store                                                                       | For the life of the account; aggregated thereafter                                            |

Bank data is never joined to any on-chain artefact and never used to underwrite another principal.

### What you control

<AccordionGroup>
  <Accordion title="Bank-data consent" icon="building-columns" iconType="solid">
    Connect a bank account through your regional provider by signing a Data Consent. Revoke it at any time from the console. On revocation the data is purged within a bounded window and drops out of your next rating.
  </Accordion>

  <Accordion title="ERC-8004 publication" icon="fingerprint" iconType="solid">
    Tythe publishes a bounded standing summary and mandate-compliance facts for each of your agents to the public ERC-8004 registries. Turn publication off per agent. Raw signals are never published.
  </Accordion>

  <Accordion title="Disputes" icon="scale-balanced" iconType="solid">
    Dispute a rating or a revenue tag from the console. A disputed inflow is excluded from capture until the dispute is resolved.
  </Accordion>

  <Accordion title="Operators" icon="key" iconType="solid">
    Bind or unbind operator wallets to control who can sign for your account. Every signature is a typed message that shows what is being signed.
  </Accordion>
</AccordionGroup>

### What Tythe never does

* Sell your data.
* Use protected characteristics in underwriting.
* Write personal data or bank data to the chain.
* Share bank data with any party beyond the provider that sourced it.
* Read another principal's bank data to judge you or your agents.

### Providers and law

Verification is performed by Sumsub. Bank data is read through Plaid (United States), Tink or Salt Edge (EU and UK), Lean (UAE and MENA), or Belvo (Latin America), each under its own regulatory regime. The data-protection law that applies to you depends on where you are and where Tythe operates; see [Legal](/get-started/resources/legal).

<CardGroup cols={2}>
  <Card title="Entity underwriting" icon="building" href="/get-started/resources/intelligence-entity-underwriting">
    How the three sources become a rating.
  </Card>

  <Card title="Trust and transparency" icon="shield" href="/get-started/introduction/trust-transparency">
    What is on-chain and what is not.
  </Card>
</CardGroup>