VerifX Privacy Policy
Effective date: 4 September 2026
1. Who we are
VerifX is operated by VerifX LLC, Lastadijas iela 12 k-3, Riga, LV-1050, Latvia.
VerifX LLC is the controller responsible for the personal information described in this policy.
Our website is https://www.verifx.ai. You can contact us about privacy at [email protected].
2. Scope
VerifX helps content creators connect social network accounts and verify access to specific profiles. This policy covers our website, self-service portal, and account-verification service.
We currently support Facebook, Instagram, and TikTok. This policy also applies to additional supported platforms where their integration follows the practices described here. We will update this policy before introducing materially different processing.
Each social network processes information under its own privacy policy. VerifX operates independently of these platforms. Supporting a platform does not imply its endorsement.
3. Information we collect
We process the profile URL you submit and information received from the relevant social network. Depending on the platform and permissions granted, this information includes your account ID, username, name associated with the account, profile picture, and profile URL.
We also create a verification status and record when verification occurred.
During authorization, we temporarily process authorization codes and access tokens needed to complete verification. We do not retain tokens for ongoing account access.
To operate and protect the service, we process limited technical information, including IP addresses, browser information, request timestamps, and error or security logs.
If you contact us or submit a privacy request, we process your contact details and the information needed to handle that request.
4. Social network authorization and verification
You submit your profile URL and authenticate through the social network’s own authorization interface. Your social network password is entered directly with that platform. VerifX does not receive or store it.
We request only the permissions needed to retrieve the account information used for verification. We compare information returned by the platform with the submitted profile.
Verification establishes access to the account at the time of verification. It does not establish legal identity, legal ownership, or continuing exclusive control.
We do not use the connection to publish content, send messages, manage accounts, or retrieve private messages or contact lists.
5. Purposes and legal bases
We process profile information and verification records to complete the verification you request and maintain your connected-account records. Our legal basis under the GDPR is performance of our service contract with you.
We process limited technical information to protect the service, detect misuse, and troubleshoot technical failures. Our legal basis is our legitimate interest in maintaining a secure and reliable service. We assess the necessity of this processing and its impact on your rights.
We process information needed to respond to privacy requests and meet applicable legal requirements on the basis of compliance with legal obligations.
We handle general support enquiries as necessary to perform our service contract with you or on the basis of our legitimate interest in responding to enquiries.
Platform authorization allows the platform to disclose information to VerifX. It does not automatically mean that consent is our legal basis for every subsequent use.
If you do not provide the necessary profile information or authorization, we cannot complete verification.
6. Internal use and disclosures
Verification results are used internally within VerifX. We do not publish them or provide them to external customers, advertisers, or other social networks.
We use Hetzner to host the service on infrastructure located within the European Economic Area. Hetzner processes hosted information on our behalf under a data-processing agreement.
Authorized personnel may access information where necessary to operate the service, provide support, or handle privacy requests.
We may disclose limited information where required by applicable law or a binding legal order.
We do not sell or rent personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles.
7. Retention
We retain profile information and verification records while the relevant account remains connected and your VerifX account is active.
We delete authorization codes and access tokens after verification succeeds or fails, and in all cases within 24 hours of receipt.
We retain routine technical and security logs for up to 30 days. Records needed to investigate a specific security incident may be retained for up to 90 days, unless longer retention is necessary for legal proceedings.
We retain support correspondence for up to 12 months after the enquiry closes. We retain minimal records documenting privacy requests and our responses for up to three years after the request closes.
When you disconnect a profile or delete your VerifX account, we remove the associated profile information and verification records from active systems within 30 days. We also delete accounts after 24 months without user activity.
Residual backup copies expire within 90 days of the deletion request or scheduled deletion event. Backups are restricted to recovery purposes. If a backup is restored, applicable deletion requests are reapplied.
Where a specific legal obligation or legal claim requires longer retention, we retain only the necessary information for that purpose and restrict its use.
8. Disconnection and deletion
You can disconnect a social network account or request deletion through the VerifX self-service portal, accessible from our website.
You can also revoke authorization through the social network’s connected-app settings. Revocation stops further authorized access but may not notify VerifX or remove information already held by us. To delete existing records, use the portal or email [email protected].
Disconnecting an account through VerifX removes its active verification status and starts deletion of the associated information.
Deleting information from VerifX does not delete your social network account or information held independently by that platform.
9. Cookies and similar technologies
We use essential cookies or equivalent browser storage to maintain sessions, protect authorization flows, and prevent misuse.
We do not use advertising cookies, cross-site tracking, or third-party behavioral analytics.
You can manage cookies through your browser. Blocking essential storage may prevent login or verification from working.
10. Security
We protect personal information using encrypted connections, encryption of stored databases and backups, restricted staff access, and multifactor authentication for administrative access.
We limit access to personnel who need it for their duties. Passwords, authorization codes, and access tokens are excluded from application logs. We apply security updates and monitor for unauthorized access.
No method of transmission or storage can eliminate all security risks.
11. International transfers
Our service data and backups are hosted within the European Economic Area. Routine administrative access is restricted to personnel located within the EEA.
If we introduce processing outside the EEA, we will first establish an applicable transfer mechanism, such as an adequacy decision or European Commission Standard Contractual Clauses, together with additional safeguards where necessary. We will update this policy accordingly.
Social networks may separately process information internationally under their own privacy policies.
12. Your rights
Depending on applicable law, you may request access to, correction of, deletion of, or a portable copy of your personal information. You may also request restriction of processing or object to processing based on legitimate interests.
Where processing relies on consent, you may withdraw consent without affecting earlier lawful processing.
Submit requests through the self-service portal or email [email protected]. We may request proportionate information to verify your identity. We do not require your social network password.
We respond without undue delay and within one month where required by the GDPR. If a permitted extension is necessary, we explain the reason within that initial period.
You may complain to Latvia’s Data State Inspectorate or another competent supervisory authority. Information about the Inspectorate is available at https://www.dvi.gov.lv/en.
We do not use your information for automated decisions producing legal or similarly significant effects. Verification matching may be automated. You can contact us to request review of an incorrect result.
13. Children
VerifX is intended for people aged 18 or older.
If we learn that we have collected personal information from someone under 18, we will disable the relevant connection and delete the information, except where limited retention is legally required.
Contact [email protected] if you believe a child has provided information to VerifX.
14. Changes
We publish updates on this webpage and revise the effective date. For material changes, we provide a prominent notice on the website or in the self-service portal before the change takes effect.
15. Contact
For questions about this policy or requests concerning your personal information, contact VerifX LLC at [email protected] or write to Lastadijas iela 12 k-3, Riga, LV-1050, Latvia.