Privacy Policy

1. Who We Are

Verafye ("Verafye", "we", "our", or "us") provides a financial crime intelligence platform for fraud, AML, and payment investigation workflows. References to "our website" mean verafye.com and associated subdomains. We are the data controller for personal data collected through our website and marketing activities.

For privacy-related enquiries, please contact us at privacy@verafye.com.

2. Information We Collect

2.1 Information you provide directly

When you submit a form on our website — including the Request Demo form, the Become a Partner form, or any contact enquiry — we collect:

• First and last name
• Work email address
• Company name and job title or role
• Company or organisation type
• Any message or additional information you choose to include

We use this information to respond to your enquiry, schedule a demonstration, or facilitate a partnership discussion. We do not require you to provide personal information to browse our website.

2.2 Information collected automatically

When you visit our website, certain technical information is collected automatically, including:

• IP address and approximate geographic location derived from it
• Browser type, version, and operating system
• Pages visited, time on page, and navigation path
• Referral source (the page or link that directed you to our website)
• Device type and screen resolution

This data is collected through cookies, pixels, and similar tracking technologies as described in Section 4 below.

2.3 Communications data

If you communicate with us by email, we retain a record of that correspondence including your email address and the content of your messages.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiry — processing demo requests, partner applications, and general contact submissions
• To communicate with you — sending follow-up communications relevant to your enquiry and, where you have indicated interest, information about Verafye products, updates, or events
• To improve our website — understanding how visitors interact with our content so we can improve navigation, performance, and relevance
• To measure marketing effectiveness — attributing website visits and form submissions to marketing channels through analytics and campaign tracking tools
• To comply with legal obligations — retaining records required by applicable law and responding to lawful requests from regulators or law enforcement
• To protect our legitimate business interests — preventing fraud, detecting security incidents, and defending legal claims

We will not use your personal information for purposes that are incompatible with those described above without notifying you first.

4. Cookies, Tracking Technologies, and Google Tag Manager

4.1 Cookies

Our website uses cookies — small text files placed on your device — to support basic site functionality, remember your preferences, and collect analytics data. Cookies we use fall into the following categories:

• Strictly necessary: Required for the website to function. These cannot be disabled.
• Analytics: Used to understand how visitors interact with our website (pages visited, session duration, navigation patterns). Data collected through analytics cookies is aggregated and does not identify individual visitors.
• Marketing: Used to track visits to our website from external campaigns and to measure conversion. These may be set by third-party services connected through our tag management system.

You can control or disable cookies through your browser settings. Disabling certain cookies may affect website functionality. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when new cookies are set.

4.2 Google Tag Manager

Our website uses Google Tag Manager (GTM container: GTM-T2N2Z2S2), a tag management service operated by Google LLC. Google Tag Manager itself does not collect personal data directly; it is used to deploy and manage tracking tags (including analytics and marketing scripts) through a single container.

Tags deployed through Google Tag Manager may collect data such as page URL, referral source, and interaction events, and may set cookies on your device. The data practices of individual tags are governed by the privacy policies of the respective service providers (such as Google Analytics, LinkedIn Insight Tag, or similar).

For more information about how Google processes data collected through its services, see Google's Privacy Policy.

We do not currently deploy Google Analytics 4 (GA4) independently of GTM. Any analytics data collected is used solely for website performance and marketing attribution purposes.

5. Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service providers: We work with third-party vendors who help us operate our website, send communications, and manage customer relationships (such as CRM platforms and email service providers). These providers act as data processors and are only permitted to process your data in accordance with our instructions.
• Legal obligations: We may disclose personal information if required by law, court order, or regulatory authority, or where we believe disclosure is necessary to protect our rights, the safety of individuals, or the integrity of our services.
• Business transfers: If Verafye undergoes a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected individuals of any such change in ownership or use of their data.
• With your consent: We may share your information for other purposes with your explicit consent.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, disclosure, alteration, or destruction. These measures include access controls, encryption in transit, and security monitoring practices aligned to our security framework.

No method of transmission over the internet or electronic storage is completely secure. While we take security seriously and follow industry-standard practices, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us at privacy@verafye.com.

7. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. Specifically:

• Demo and partner enquiry submissions are retained for as long as the commercial relationship or opportunity is active, and for a reasonable period thereafter to allow for re-engagement or legal reference.
• Website analytics data is retained in accordance with the retention settings of the applicable analytics platform (typically 14–26 months).
• Email correspondence is retained for as long as relevant to the matter discussed or required by applicable law.
• Marketing communications records are retained until you unsubscribe or withdraw consent.

When personal information is no longer required, we delete it securely or anonymise it so it can no longer be linked to an individual.

8. Your Rights

Depending on your location and applicable data protection law, you may have the following rights in relation to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that inaccurate or incomplete information be corrected.
• Erasure: Request deletion of your personal information where there is no longer a legitimate basis for us to hold it.
• Restriction: Request that we restrict processing of your personal information in certain circumstances.
• Portability: Request a copy of your personal information in a structured, machine-readable format where technically feasible.
• Objection: Object to processing of your personal information for direct marketing purposes, or where processing is based on our legitimate interests.
• Withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at privacy@verafye.com. We will respond within the timeframe required by applicable law (typically 30 days). We may need to verify your identity before processing your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

9. India — Digital Personal Data Protection Act (DPDP)

India's Digital Personal Data Protection Act, 2023 (the DPDP Act) establishes a framework for the protection of digital personal data of individuals in India. The DPDP Act's implementing rules and regulatory guidance are currently being finalised by the Indian Government.

Verafye's website and marketing practices are designed to be DPDP-aware, reflecting the following principles drawn from the Act:

• Lawful purpose: We collect personal data only for the specific, lawful purposes described in this Policy.
• Data minimisation: We collect only the personal data necessary for the stated purpose.
• Reasonable security: We implement appropriate security safeguards to protect personal data from breach.
• Data principal rights: Individuals whose data we process have the right to access information, correct inaccuracies, and raise grievances in connection with their data.

Verafye does not claim formal DPDP certification or full DPDP compliance. We will update our practices as the Act's implementing rules are finalised and come into force. For any data-related grievances or requests from individuals in India, please contact us at privacy@verafye.com.

10. GDPR and EU/UK Data Protection

Verafye's data handling practices are designed in alignment with the principles of the EU General Data Protection Regulation (GDPR) and the UK GDPR. This means our processing of personal data is designed to be lawful, fair, and transparent; collected for specified, explicit, and legitimate purposes; limited to what is necessary; accurate; retained no longer than necessary; and handled with appropriate security.

Verafye is GDPR-aligned, not GDPR-certified. GDPR is a legislative framework, not a certification scheme. Our alignment with GDPR principles reflects our commitment to privacy-respecting data practices for all individuals whose data we process, regardless of their location.

For EEA and UK residents, the legal bases on which we process personal data include: your consent (where obtained), the performance of a contract or steps taken at your request prior to entering a contract, compliance with legal obligations, and our legitimate interests (such as responding to enquiries and operating our business), where those interests are not overridden by your rights.

11. Children's Privacy

Our website and services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal information from individuals under 18. If we become aware that we have inadvertently collected personal information from a person under 18, we will delete that information promptly.

If you believe we may have collected information from a person under 18, please contact us at privacy@verafye.com.

12. Careers and Job Applications

If you submit a job application or your CV/resume to Verafye — whether through our website, by email, or through a third-party recruitment platform — we will collect and process your personal information (including your name, contact details, employment history, qualifications, and any other information you choose to provide) for the purpose of evaluating your application.

We retain candidate information for up to 12 months following the conclusion of a recruitment process, in case a relevant opportunity arises. You may request deletion of your application data at any time by contacting privacy@verafye.com.

We do not use automated decision-making in our recruitment process. All hiring decisions involve human review.

13. Links to Third-Party Websites

Our website may contain links to external websites operated by third parties. This Privacy Policy applies only to verafye.com. We are not responsible for the privacy practices of third-party websites, and we encourage you to review their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable law. The "Last updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically.

For material changes, we will take reasonable steps to notify affected individuals, such as by posting a notice on our website or sending an email to individuals who have submitted a form on our website.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us: