Privacy policy

1. Scope and roles

This Policy describes how we process information through our website, account workspace, verification workflow and API. A customer organization may submit information about another person; that organization is responsible for its own notices and lawful authority. We process account and operational information to run the service and verification information to fulfill authorized requests.

2. Information we collect

We collect account and organization details, email addresses, submitted employment and education claims, PDF resumes, verification contacts, research sources, correspondence and results. We also process payment transaction records and limited saved-card metadata supplied by Stripe, plus technical and security records associated with requests and account access. Do not upload information unrelated to the verification.

3. How we use information

We use information to authenticate accounts, process resumes, research organizations, assess contacts, request and analyze confirmations, display evidence and results, manage credits and payments, deliver notifications and callbacks, investigate errors, prevent misuse and meet applicable legal obligations. AI providers may receive relevant resume, research or correspondence content for extraction and analysis.

4. Who receives information

Customer users and authorized administrators can access information appropriate to their roles. Verification contacts receive relevant claims and questions needed to answer a request. Service providers support hosting and queues (AWS), database storage (MongoDB Atlas), payments (Stripe), AI processing (OpenAI), and transactional email (Postmark when configured), along with the hosting provider selected for deployment. Configured callbacks send results to the customer’s endpoint. We may also disclose information where legally required or necessary to protect rights and security.

5. Payments and cookies

Card entry and updates take place on Stripe-hosted pages. Our app stores payment identifiers and limited display information, rather than full card numbers or security codes. The website uses authentication cookies to maintain sign-in and support account security. This draft does not authorize advertising tracking; any additional analytics or advertising practices must be disclosed before they are introduced.

6. Retention and security

Records are retained as needed for verification delivery, evidence, account administration, billing, security and legal obligations. Retention periods and deletion procedures depend on record type and applicable obligations and must be finalized before launch. Access controls and other safeguards help protect information, but no system can guarantee absolute security.

7. Requests and corrections

Depending on your location and our role, you may have rights to access, correct, delete or receive your information, or object to certain processing. Contact us using the details below and identify the account or verification involved; we may need to verify your identity. If an organization requested your verification, contacting it may also be necessary. These requests are handled manually; there is no automatic deletion portal.

8. International processing and children

Providers may process information in the United States or other locations where they operate. Applicable transfer requirements must be addressed for supported markets. The service is intended for adults acting for organizations and is not directed to children under 18.

9. Changes and contact

We will publish revisions with an updated date and provide additional notice where required. Questions, correction requests and privacy concerns may be sent to the business listed below.

Business contact