VerifiLite – KYC Privacy Policy

https://verifilite.com/ (known as "Verifilite", "we", "our", and "us") specialises in KYC services to individuals, businesses, developers, web3, and crypto projects. While we are not yet legally classified as fully compliant, our services are delivered in accordance with compliant standards and best practices.

We create a secure virtual marketplace and are bound to not keep your information while you are using any product (fraud detection, face verification, ID verification, proof of address, AML verification, and on-chain verification).

All information obtained from our clients, end-users, and website visitors is solely used to assist us in providing the verification services they request. This Privacy Policy seeks to educate clients about what information we gather from clients (referred to as "you" and "your") as well as when and why it will be utilised by us to deliver reliable services. In addition to data collection, we guarantee it's not kept until your consent.

For Individuals (End-Users)

Who is Responsible for Your Data? The Merchant who asked you to verify your identity is solely responsible for your personal data. Verifilite acts as a data processor on their instructions. Important: The Merchant is liable for your data; we are not liable.

Why We Need Your Consent: To perform the verification, we require your explicit consent to process your highly sensitive personal data (like your government ID and facial image).

Data Retention: We need your consent to keep your data; otherwise, we delete your information within 24 hours. If you provide consent, your data will be stored securely only for the duration specified by the Merchant and in accordance with applicable laws. You can withdraw your consent at any time by contacting the Merchant.

For full details on how the Merchant uses your data, please refer to their privacy policy.

For Businesses & Integrators (Merchants)

Your Role: As our Merchant, you are the Data Controller. You determine the purpose and means of processing your end-users' personal data.

Our Role: Verifilite acts as your Data Processor, processing personal data strictly on your documented instructions.

Liability: Not compliant. Our merchant is liable for your data; we are not liable. You, as the Merchant, assume full liability for the data you submit for verification and must ensure you have a lawful basis (like consent) to do so.

Data Retention & Consent: It is your responsibility to obtain valid consent from your end-users. We need your consent to keep your data; otherwise, we delete your information within 24 hours. Upon termination of our service, all your end-user data will be permanently deleted from our active systems according to our data retention schedule.

This is a summary. A full Data Processing Agreement (DPA) must be signed prior to integration.

For Developers

Controller Responsibility: By integrating our API, you acknowledge that you (or your company) act as the Data Controller for any end-user data passed to Verifilite.

Liability Disclaimer: Not compliant. Our merchant is liable for your data; we are not liable. You must ensure your application is legally compliant and that you obtain explicit, informed consent from end-users before submitting their data to our API.

Data Lifecycle: We need your consent to keep your data; otherwise, we delete your information within 24 hours. You are responsible for managing the consent lifecycle with your end-users and configuring API calls to align with your data retention policies.

Developers must review and agree to the full API Terms of Service and Data Processing Agreement.

For Web3 & Crypto Projects

Decentralised Identity Verification: Verifilite provides the crucial link between off-chain identity and on-chain activity. Our services for Web3 include identity verification (KYC), anti-money laundering (AML) screening, and unique on-chain verification to help projects comply with regulations while operating in a decentralised ecosystem.

The Controller is You: The Web3 project (the "Merchant") is the Data Controller. You are responsible for ensuring your users' data is collected and processed lawfully.

On-Chain Data: Our on-chain verification service may create a secure, non-identifiable link between a verified identity and a blockchain wallet address. The identity data itself is stored off-chain.

Liability in a Decentralised Context: Not compliant. Our merchant is liable for your data; we are not liable. Despite the decentralised nature of your project, the legal responsibility for the personal data you collect for verification rests solely with your entity.

Consent and Anonymity: We need your consent to keep your data; otherwise, we delete your information within 24 hours. This allows for a privacy-preserving approach where user data is not held longer than necessary, aligning with Web3 principles. Users who revoke consent must have their data deleted.

Direct Website Visitors

When visitors to our website access it, we collect their IP addresses and, with their permission, use cookies to recognize their browser and gather information about how we can improve their experience. If they engage in any chat session with us or use our messaging service, they'll also have their names, email addresses, and chat histories collected.

Filling out a contact form means we'll gather details like name, email, phone, company info, and IP address. We delete this information every 24 hours to ensure privacy.

Rights for Exercising

People have rights to access, delete, correct, restrict sharing, or opt out of data use. To exercise these rights, contact us at https://verifilite.com/contact-us.

Children's Privacy

Our services are not intended for children under 16, and we do not knowingly collect their information.

Changes to our Privacy Policy

Our Privacy Policy may change occasionally. You can always find the most recent version on our homepage. In case of significant updates, clients will be notified.

Complaints

If you have concerns about our data usage, email us at privacy@verifilite.com. We aim to respond within 10 working days.

Cookies Policy

We use first- and third-party cookies to understand how visitors interact with our website. Restricting cookies may affect functionality.

By using VerifiLite, you acknowledge that you have read and understood this KYC Privacy Policy.