Privacy Policy

Last updated: March 31, 2026

1. Overview

Validfied is built on a core principle: zero data retention. We process identification documents solely to determine age and immediately discard them. We never store, share, or sell personal data from end users undergoing verification.

2. Information We Collect

From end users (people being verified):

  • ID images are uploaded, analyzed in real-time, and immediately deleted — never stored
  • No name, date of birth, address, or any PII is retained
  • Only anonymous metadata is logged (e.g., verification result, ID type, and US state — no personal details)

From customers (website operators):

  • Account information (name, email) for dashboard access
  • Billing information processed securely by Stripe — we never store card details
  • Domain and site configuration settings

3. How We Use Information

We use the information we collect to:

  • Provide and operate the age verification service
  • Process subscription payments
  • Display anonymized analytics in your dashboard
  • Communicate service-related updates

4. Zero Data Retention Policy

When an end user submits an ID for verification:

  1. The image is uploaded to a temporary, encrypted buffer
  2. Our AI model analyzes the document to determine age validity
  3. The image is immediately and permanently deleted
  4. Only the anonymous result (verified/failed) is logged

At no point is a user's name, date of birth, ID number, or image stored beyond the duration of the verification process (typically under 5 seconds).

5. Cookies and Tracking

We use minimal session cookies necessary to operate the dashboard. We do not use third-party advertising trackers or sell browsing data.

6. Data Sharing

We do not sell, trade, or rent personal data to third parties. We may share data only with:

  • Stripe — for payment processing
  • Service providers — strictly to operate the platform, under confidentiality obligations
  • Law enforcement — only when required by law

7. Security

We implement industry-standard security measures including HTTPS encryption, access controls, and regular security reviews. However, no system is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights including access to, correction of, or deletion of your personal data. Since we retain no end-user PII, deletion requests for verification data are satisfied by design. For account data, contact us directly.

9. Children's Privacy

Validfied's service is intended to prevent minors from accessing age-restricted content. We do not knowingly collect personal information from anyone under 18.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify customers of significant changes via email or a notice in the dashboard.

11. Contact Us

For privacy-related questions or data requests, please contact us through the information provided on our website.