Privacy Policy

VerifyN ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Platform"). By using our Platform, you consent to the data practices described in this policy. If you do not agree, please do not use the Platform. We handle your data with care, collect only what we need, and never sell your personal information to third parties.

We collect information in the following categories: Account Information: When you register, we collect your name, email address, and password (stored as a hashed value). You may optionally provide additional profile information. Payment Information: We collect billing information sufficient to process payments. Full card details are handled by our payment processors and are never stored on our servers. Usage Data: We automatically collect information about how you interact with the Platform — pages visited, features used, API calls made, timestamps, and session duration. Communication Data: When you contact us via email or the support form, we retain that correspondence to help resolve your issue and improve our service. Technical Data: IP addresses, browser type and version, device type, operating system, referring URLs, and cookie identifiers. SMS Metadata: When you use virtual numbers, we process metadata about messages received (sender, timestamp, number used). Message content is temporarily stored to display in your inbox and is deleted after the retention period.

We use collected information for the following purposes: • To provide, operate, and maintain the Platform and its features • To process payments and manage your wallet balance • To send transactional emails (account verification, payment receipts, security alerts) • To respond to your support requests and inquiries • To monitor platform abuse, fraud, and security incidents • To improve the Platform through analytics and user feedback • To comply with legal obligations and enforce our Terms of Service • To send product updates and announcements (you can opt out at any time) We do not use your data for advertising purposes or sell it to third parties.

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances: Service Providers: We share data with trusted vendors who help us operate the Platform — including cloud infrastructure, payment processing, email delivery, and error monitoring. These parties are contractually bound to protect your data. Legal Requirements: We may disclose information if required by law, subpoena, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others. Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different Privacy Policy. Aggregated Data: We may share anonymised, aggregated statistics about Platform usage that do not identify any individual user.

We retain your personal data for as long as your account is active or as needed to provide you services. Specific retention periods: • Account data: Retained until you delete your account, plus 30 days for recovery purposes • SMS message content: Retained for 7 days, then automatically deleted • Transaction records: Retained for 7 years to comply with financial regulations • Support communications: Retained for 2 years • Usage logs: Retained for 90 days for security and debugging purposes You may request deletion of your account and associated personal data at any time by contacting support. Note that some data may be retained for legal compliance purposes.

We implement appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These measures include: • Encryption of data in transit (TLS 1.2+) and at rest (AES-256) • Hashed and salted passwords — we never store plaintext passwords • Role-based access controls limiting who can access user data • Regular security audits and penetration testing • Multi-factor authentication options for user accounts • Monitoring and alerting systems for suspicious activity No security system is impenetrable. While we take significant precautions, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities as required by law.

We use cookies and similar technologies to operate and improve the Platform. Types of cookies we use: Essential Cookies: Required for the Platform to function — session management, authentication tokens, CSRF protection. Analytics Cookies: Help us understand how users interact with the Platform so we can improve it. We use privacy-respecting analytics tools that do not track you across other websites. Preference Cookies: Remember your settings and preferences (e.g., display preferences). You can control cookies through your browser settings. Blocking essential cookies may impair your ability to use the Platform.

Depending on your location, you may have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you • Correction: Request correction of inaccurate or incomplete data • Deletion: Request deletion of your personal data (right to be forgotten) • Portability: Receive your data in a structured, machine-readable format • Restriction: Request that we restrict processing of your data in certain circumstances • Objection: Object to processing based on legitimate interests • Withdraw Consent: Withdraw consent for processing where consent is the legal basis To exercise these rights, contact us at privacy@verifyn.online. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

The Platform is not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a prominent notice on the Platform. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically to stay informed about how we protect your information.