Privacy Policy

The short version

• We never store government IDs or biometric source images. Your chosen verification provider handles the ID; we receive and keep only a pass/fail result and assurance level.
• We collect the account, billing, and usage data needed to run the Service.
• We use a small amount of analytics to understand and improve our marketing site.
• We don't sell your personal information.

Information we collect

• Account information — name, email, organization, and login credentials when you sign up.
• Billing information — handled by our payment processor, Stripe. We receive limited details (plan, status, last four digits, billing contact); we do not store full card numbers.
• Configuration data — your sites, branding, coverage settings, and provider connections.
• Verification outcomes — for each check, a pass/fail result, assurance level, jurisdiction, and timestamp. Not the ID document or biometric image.
• Usage and telemetry — gate events (e.g., a check was shown, passed, or blocked), aggregated for analytics and billing.
• Website analytics & cookies — on our marketing site we use Google Analytics to measure traffic. This sets cookies and collects standard analytics data (e.g., pages viewed, approximate location, device/browser).

How we use information

• To provide, operate, secure, and improve the Service.
• To process payments and manage subscriptions.
• To communicate with you about your account, including service and legal-change notices.
• To produce aggregate analytics and prevent abuse.
• To comply with legal obligations.

Cookies and analytics

Our marketing site uses Google Analytics (GA4). You can opt out using the Google Analytics opt-out browser add-on or your browser's cookie controls. The age gate itself uses only the storage necessary to remember a pass for a configured period; it does not use advertising cookies.

How we share information

• Verification providers you connect — to route checks. They process end-user data under their own terms and your agreement with them.
• Service providers — payments (Stripe), hosting/edge and content delivery, email, and analytics (Google), each acting on our behalf.
• Legal — when required by law or to protect rights, safety, and the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or asset sale.

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under applicable law.

Verification and end-user data

When a visitor to a Customer's site is verified, the Customer (not Verisdiction) is the controller of that visitor's personal data. The visitor's identity document and any biometric source data are handled by the Customer's chosen verification provider and are not transmitted to or stored by Verisdiction. Verisdiction retains only the minimal outcome record described above.

Data retention

We keep account and configuration data for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting, and audit requirements. Aggregated, non-identifying analytics may be retained longer.

Security

We use technical and organizational measures to protect information, including encryption of sensitive credentials, access controls, and audit logging. No system is perfectly secure, but minimizing what we store is our first line of defense.

Your rights

Depending on where you live (for example, under the GDPR or U.S. state privacy laws such as the CCPA/CPRA), you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. End users of a Customer's site should direct requests to that Customer.

International transfers

We operate from the United States and may process information in the U.S. and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18 through our own site.

Changes

We may update this Policy. Material changes will be posted here with a new "Last updated" date.

Contact

Privacy questions or requests: privacy@verisdiction.com (or support@verisdiction.com).