IDVerif
Back to home

Legal

Privacy Policy

Last updated: June 28, 2026

Your privacy matters to us. This policy explains how IDVerif handles your data.

1. Introduction

IDVerif ("we", "us", "our") is committed to protecting the privacy of our users and the individuals whose data is processed through the Service. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it.

2. Data We Collect

We collect information you provide directly when you register, such as your name, email address, and company details. When you use the verification features, we process submitted identity fields (name, date of birth, ID number, gender, address), uploaded identity document images, live face capture images, and business details. We also collect usage data such as API request logs, verification counts, and browser/device information for security and performance purposes.

3. How We Use Your Data

We use the data we collect to: provide and operate the IDVerif Service; process identity and business verification requests using AI models (including Google Gemini); store verification results and audit logs in your account; send transactional and service-related communications; detect and prevent fraud, abuse, or policy violations; and improve the accuracy and performance of our verification models in aggregate, anonymised form.

4. AI Processing and Third-Party Services

IDVerif uses Google Gemini AI models to analyse identity documents, face images, and business data. Submitted data is transmitted to Google's API infrastructure for processing. Google's handling of this data is governed by Google's Privacy Policy. We also use Amazon DynamoDB (AWS) for data storage. Submitted data is not used to train third-party AI models without explicit consent.

5. Data Retention

Verification records and associated images are retained for a maximum of 90 days by default, after which they are automatically purged. Account profile data is retained for as long as your account is active. You may request earlier deletion by contacting support. API key logs are retained for 30 days for security auditing.

6. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest on AWS infrastructure, role-based access controls, and regular security reviews. Despite these measures, no system is 100% secure. In the event of a data breach, we will notify affected users as required by applicable law.

7. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data ("right to be forgotten"); object to or restrict certain processing; and data portability. To exercise any of these rights, contact us at privacy@idverif.io. We will respond within 30 days.

8. Cookies and Tracking

IDVerif uses only strictly necessary session cookies for authentication. We do not use advertising cookies or cross-site tracking. We may use anonymised analytics to understand aggregate usage patterns, but this data cannot be used to identify individual users.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to our Service, please contact us immediately and we will take steps to delete it.

10. International Transfers

Data processed through IDVerif may be transferred to and stored on servers located outside your country. We ensure appropriate safeguards are in place for such transfers, including data processing agreements with sub-processors that comply with applicable data protection law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions, concerns, or requests, please contact our Data Protection team at privacy@idverif.io or write to us via the contact form on the IDVerif website.