Privacy Policy

1. Introduction

Welcome to Verify.lu. We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our decentralized KYC (Know Your Customer) and KYB (Know Your Business) identity verification services.

As a privacy-first identity verification platform, we leverage Web3 technology and decentralization to give you greater control over your personal data while maintaining compliance with global privacy regulations including GDPR and CCPA.

2. Information We Collect

2.1 Personal Identification Information

For identity verification purposes, we may collect:

• Full name and date of birth
• Government-issued identification documents (passport, driver's license, national ID)
• Biometric data (facial recognition for verification purposes)
• Residential address and contact information
• Email address and phone number

2.2 Business Information

For business verification (KYB), we may collect:

• Company name and registration details
• Business identification numbers
• Ownership and corporate structure information
• Financial information as required for verification

2.3 Technical Information

We automatically collect certain technical information including:

• IP address and device information
• Browser type and version
• Usage data and interaction patterns
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for the following purposes:

• Identity Verification: To verify your identity and comply with KYC/KYB requirements
• Service Delivery: To provide, maintain, and improve our verification services
• Compliance: To comply with legal obligations and prevent fraud
• Communication: To send you service-related notifications and updates
• Security: To protect against unauthorized access and ensure platform security
• Analytics: To analyze usage patterns and improve user experience

4. Data Storage and Security

4.1 Decentralized Storage

As a decentralized platform, we utilize distributed storage systems to ensure your data is secure and you maintain control over your information. Your verification credentials are cryptographically secured and stored across decentralized networks.

4.2 Security Measures

We implement industry-standard security measures including:

• End-to-end encryption for data transmission
• Multi-factor authentication
• Regular security audits and penetration testing
• Access controls and monitoring systems
• Secure data centers with physical and digital safeguards

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

• With Your Consent: When you authorize us to share your verification credentials with third parties
• Service Providers: With trusted partners who assist in service delivery, bound by confidentiality agreements
• Legal Requirements: When required by law, court order, or government regulations
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Protection of Rights: To protect our rights, privacy, safety, or property

6. Your Privacy Rights

6.1 GDPR Rights (European Users)

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request erasure of your data ("right to be forgotten")
• Restrict or object to data processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with supervisory authorities

6.2 CCPA Rights (California Users)

Under CCPA, California residents have the right to:

• Know what personal information is collected
• Know whether personal information is sold or disclosed
• Opt-out of the sale of personal information
• Access your personal information
• Request deletion of personal information
• Non-discrimination for exercising your rights

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and improve our services. You can control cookie preferences through your browser settings or our cookie consent manager.

For more information, please see our Cookies Policy.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws, including Standard Contractual Clauses approved by the European Commission.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Verification data may be retained to comply with regulatory requirements, typically for 5-7 years after account closure.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Third-Party Services

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

14. Consent

By using our services, you consent to the collection, use, and processing of your personal information as described in this Privacy Policy. If you do not agree with this policy, please do not use our services.