Privacy Policy

1. Overview

Verify, Inc. ("Verify", "we", "us") provides a counterparty verification platform. This policy explains what we collect and process across both our marketing website and the Verify product (where you upload documents and run verifications), why we process it, who we share it with, and how long we keep it. It reflects how the product actually works today.

2. Information we collect

• Account information — your email address and authentication credentials (passwords are stored only as salted hashes).
• Documents you upload — contract PDFs you submit for analysis, and the text extracted from them.
• Counterparty information — the names of individuals and businesses identified in your documents, plus identifiers you provide to verify a party (for example a phone number, email, or address for a person check).
• Verification and report data — the results we compile (identity matches, screening findings, risk indicators) and the reports generated for you.
• Payment information — handled by our payment processor, Stripe. We receive confirmation and limited card metadata (card brand and last four digits); we do not store full card numbers.
• Device and security signals — when you upload or run a verification, we record device and request signals ("device intelligence") used to detect abuse and protect the service.
• Marketing analytics — usage of our public marketing pages, collected only after you accept cookies (see Section 9).

3. How we use information

We process the information above to:

• extract the parties named in your uploaded documents;
• run the identity, sanctions, litigation, business-registry, and public-records checks you request;
• analyze contract content and generate verification reports;
• monitor counterparties over time and surface changes, when you enable monitoring;
• process payments for verifications you confirm;
• detect and prevent fraud, abuse, and security threats; and
• operate, maintain, and improve the service.

We do not sell your documents, your reports, or your data, and we do not use your uploaded content to train third-party AI models.

4. Automated and AI-assisted processing

Verify uses automated systems, including third-party artificial intelligence provided by Anthropic, to extract parties from documents and analyze contract content. We also use automated logic to resolve identities, compile screening results, score risk, and detect changes during monitoring. These outputs are informational, may be incomplete or contain errors, and are intended to support — not replace — your own due-diligence decisions. They are not legal, financial, or compliance advice.

5. Processing of counterparty information

To perform a verification you request, we process information about the individuals and businesses named in your documents against sanctions and watchlists, litigation and court records, business registries, and commercial identity sources. This may include personal information about people who are not Verify users. Verify is intended for legitimate commercial due-diligence purposes only; you are responsible for having a permissible purpose for each verification and for using results lawfully. Verify is not a consumer reporting agency and results are not "consumer reports" under the FCRA.

6. Device intelligence and fingerprinting

When you upload documents or run verifications, we collect device and browser signals to identify and prevent abuse, fraud, and automated attacks. This security telemetry is retained for a limited period (see Section 10) and is used for protection of the service, not for advertising.

7. Payment processing

Payments are processed by Stripe under Stripe's own privacy policy. We store a reference to your saved payment method and limited card metadata (brand, last four digits) so you can run verifications without re-entering card details. We never store full card numbers.

8. Subprocessors

We share data with the service providers we rely on to operate Verify (for example, hosting, AI analysis, identity and screening data, payments, email, and analytics). The current list is published on our Subprocessors page.

9. Marketing analytics and cookies

On our public marketing pages we use PostHog to measure usage (page views, CTA clicks, basic device/browser information, referrer, and UTM parameters). Analytics are activated only after you accept cookies via the consent banner; no analytics tracking occurs before consent. Session recording and autocapture are disabled. We record your consent choice in a single browser localStorage key and you can revoke it at any time by clearing it. Marketing analytics do not receive contract contents, report contents, or party identifiers.

10. Data retention

Retention of uploaded contracts, the text extracted from them, uploaded PDF files, and generated verification reports is currently based on operational needs and your deletion requests: we keep this content while it is needed to provide the service to you, and you can permanently delete an uploaded contract — and its extracted text, identified parties, reports, and stored file — at any time (see Section 11). Automated, time-based deletion of this content is not yet enforced; we will update this policy when automated retention controls are in place.

The following data is automatically expired on a fixed schedule:

• Person verification records — up to 365 days
• Device-intelligence / fingerprint signals — up to 180 days
• Marketing analytics — up to 12 months

We may retain certain records longer where required to comply with legal obligations, resolve disputes, or enforce our agreements.

11. Your choices and deletion

You can permanently delete an uploaded contract from your workspace at any time; deleting a contract removes its extracted text, identified parties, generated reports, and the stored PDF. To request access to, correction of, or deletion of other personal information we hold, contact us using the details below and we will respond consistent with applicable law.

[Founder/legal decision: add jurisdiction-specific rights (GDPR, CCPA/CPRA) and a data-subject-request process/SLA if required for your customer base.]

12. Ownership of your content

You retain all ownership of the documents and information you upload. We process that content only to provide the service to you, as described in our Terms of Service.

13. Security

We maintain administrative, technical, and organizational safeguards to protect the data we process. See our Security & Compliance page for details.

14. Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

15. Contact

Questions about this policy or how we handle data? Contact us at privacy@verify.inc.[Founder decision: confirm privacy@verify.inc is monitored, or substitute the correct contact address.]