Privacy Policy

Data we process

• API request metadata (timestamps, IPs, endpoint used)
• Validation inputs such as email addresses, phone numbers, or identifiers submitted by users are processed solely for real-time validation and are not used for profiling or marketing purposes.
• Account information if you sign up (name, email)

Retention

Logs are retained for up to 30–90 days for debugging, security monitoring, and abuse prevention. The VAT audit trail is the exception, and exists at your request: when your account has a VAT number configured, each EU VAT lookup is kept — the number checked, the consultation number VIES issued, and the name and address VIES returned — for the retention period of your plan at the time of the check (30 days on Free, 1 year on Starter, 3 years on Growth, 10 years on Pro), so that you can produce it in a tax audit. It is then deleted. Removing your VAT number from your account stops new records.

Cookies and similar technologies

Our websites set only what they need to work. We use no advertising cookies and no cross-site tracking, and we show no cookie banner because there is nothing optional to consent to. If that ever changes, we will ask for your consent before anything is set.

• Language preference — a cookie (locale on verifnow.io, NEXT_LOCALE in the dashboard) that remembers the language of the pages. The first lasts up to one year, the second until you close your browser.
• Sign-in session — set by our authentication provider, Clerk, when you sign in to the dashboard, so that you stay signed in.
• Local storage in your browser (not a cookie) — a flag remembering that you dismissed the launch banner, the light or dark theme if you pick one on the documentation, and, in the dashboard, a copy of the name and phone number you entered in your profile.

Website analytics

We measure visits to verifnow.io and docs.verifnow.io with Vercel Web Analytics and Speed Insights. They set no cookies and store nothing on your device. A visit is recognised by a hash derived from the request, which Vercel discards after 24 hours, and the data cannot be used to follow you from one website to another. We receive aggregated figures: pages viewed, referring site, approximate location, browser, device type and page-speed measurements. Requests to our API are not part of this measurement.

GDPR Compliance

VerifNow processes personal data in accordance with the General Data Protection Regulation (EU 2016/679). Our lawful basis for processing is legitimate interest (providing validation services) and, where applicable, contractual necessity. We process only the data strictly required for validation and do not retain it beyond the processing window, except for the VAT audit trail described under Retention.

• Right of access — request a copy of the data we hold about you.
• Right to rectification — correct inaccurate personal data.
• Right to erasure — request deletion of your personal data at any time.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interest.
• Right to lodge a complaint with a supervisory authority.

CCPA Compliance

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. VerifNow does not sell personal information. We do not sell or share personal information as defined under the California Consumer Privacy Act (CCPA). To exercise your rights, contact us at the email below.

Data Processing Agreement (DPA)

A Data Processing Agreement (DPA) is available upon request for enterprise customers. Contact us at the email below to receive a copy.

Third-party processors

• Stripe — payments and subscriptions
• Clerk — sign-in and account management
• Vercel — hosting of verifnow.io, docs.verifnow.io and the dashboard, and cookieless website analytics
• Cloudflare — network proxy, security and rate limiting in front of our API; requests to the API transit its global network
• OVHcloud — servers hosting our API and its database, in Québec (Beauharnois), and their encrypted backups, in Ontario (Toronto)
• Neo — email for support@verifnow.io

Person responsible for personal information

The founder of VerifNow is responsible for the protection of personal information. To exercise a right, ask a question or file a complaint, write to support@verifnow.io.