Privacy Policy

Data we process

• API request metadata (timestamps, IPs, endpoint used)
• Validation inputs such as email addresses, phone numbers, or identifiers submitted by users are processed solely for real-time validation and are not used for profiling or marketing purposes.
• Account information if you sign up (name, email)

Retention

Logs are retained for up to 30–90 days for debugging, security monitoring, and abuse prevention.

GDPR Compliance

VerifNow processes personal data in accordance with the General Data Protection Regulation (EU 2016/679). Our lawful basis for processing is legitimate interest (providing validation services) and, where applicable, contractual necessity. We process only the data strictly required for validation and do not retain it beyond the processing window.

• Right of access — request a copy of the data we hold about you.
• Right to rectification — correct inaccurate personal data.
• Right to erasure — request deletion of your personal data at any time.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interest.
• Right to lodge a complaint with a supervisory authority.

CCPA Compliance

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. VerifNow does not sell personal information. We do not sell or share personal information as defined under the California Consumer Privacy Act (CCPA). To exercise your rights, contact us at the email below.

Data Processing Agreement (DPA)

A Data Processing Agreement (DPA) is available upon request for enterprise customers. Contact us at the email below to receive a copy.

Third-party processors

• Stripe
• Clerk