Veriflo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our document verification and protection platform.
1. Information We Collect
Account Information
When you create an account, we collect:
- Name and email address
- Company name and role (optional)
- Billing information (processed securely by Stripe)
- Password (stored in encrypted form)
Documents and Content
When you use our services, we process:
- Documents you upload for verification or fingerprinting
- Metadata associated with your documents
- Recipient information for document distribution
- Blockchain transaction records
Usage Information
We automatically collect:
- Log data (IP address, browser type, pages visited)
- Device information
- Feature usage analytics
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process documents for verification and fingerprinting
- Record blockchain attestations
- Generate forensic reports when leaks are detected
- Process payments and manage subscriptions
- Send service-related communications
- Respond to customer support requests
- Comply with legal obligations
3. Document Security
Your documents are protected with enterprise-grade security:
- AES-256 encryption at rest and in transit
- Documents processed in isolated, secure environments
- We do not access document contents except as necessary to provide services
- Blockchain records contain only cryptographic hashes, not document contents
4. Data Sharing
We do not sell your personal information. We may share data with:
- Service Providers: Trusted partners who help us operate (cloud hosting, payment processing, analytics)
- Legal Requirements: When required by law, court order, or to protect rights and safety
- Business Transfers: In connection with mergers, acquisitions, or asset sales
- With Your Consent: When you explicitly authorize sharing
5. Your Rights
Depending on your location, you may have rights to:
- Access your personal information
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format
- Opt out of marketing communications
- Withdraw consent where applicable
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services. After account deletion:
- Account data is deleted within 30 days
- Blockchain records remain permanent (containing only hashes)
- Backup copies may persist for up to 90 days
- We may retain data as required by law
7. International Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where applicable.
8. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our platform.
10. Contact Us
For privacy-related questions or to exercise your rights: