Partner Privacy Policy

Effective Date: 1st May 2025

At Universal Verify, we value the privacy and security of your information. This Privacy Policy ("Policy") explains how we collect, use, store, and protect the data you share with us when using the Universal Verify partner platform, including the website, partner dashboard, APIs, and any related services (collectively, the "Service").

By using the Service, you agree to the collection and use of your information in accordance with this Privacy Policy.

1. Information We Collect

We collect and process the following types of information when you use the Service:

Account Level Data

Integration Data

Important Note: All integration data (excluding API keys) may also be stored in activity logs in Canada for up to 10 years for security, auditing, and compliance purposes.

Billing and Payment Data

Billing and payment information is handled by Stripe, not stored by us. Please refer to Stripe's privacy policy for more information.

2. How We Collect Information

• You provide information directly when you register for a partner account, create integrations, or manage your settings.
• We automatically collect connection and usage information when you access the Service, use the API, or users connect to your integrations.
• We may update or supplement partner information from publicly available sources or third-party services (e.g., verifying your organization's legitimacy).

3. How We Use Your Information

• To create and manage your partner account and integrations.
• To authenticate access to the Service.
• To facilitate communication regarding your account, integrations, and services.
• To provide operational updates, service announcements, or critical notifications.
• To monitor and enforce compliance with our Terms of Service and Integration Guidelines.
• To detect, prevent, and respond to fraud, abuse, or security threats.
• To improve and optimize the Service experience for partners.
• To comply with legal and regulatory obligations.

4. Data Sharing and Third-Party Services

• We may share your information with third-party service providers who assist with the operation of the Service (such as payment processors, cloud hosting providers, or security services). These providers are contractually obligated to protect your data and only use it as necessary to provide their services.
• We do not sell or share partner information with advertisers or unrelated third parties.
• We may disclose information if required to comply with a legal obligation, protect rights, investigate fraud, or respond to lawful requests by public authorities.

5. Data Storage, Residency, and Security

• Your information is stored on secure servers located in the United States. In some cases, data may be processed in other countries where our service providers operate, in compliance with applicable data protection laws.
• We use encryption, access controls, and monitoring to protect your information.
• Access to partner information is restricted to authorized personnel under confidentiality obligations.
• We maintain secure audit logs of access and activity within the Service to ensure system integrity, support security investigations, and comply with applicable laws. Logs are retained for up to 10 years based on regulatory, legal, and operational requirements, and are stored in the same regions as the data they relate to, in accordance with applicable data residency laws.

6. International Data Transfers

Universal Verify operates globally. By using the Service, you acknowledge and agree that your information may be transferred to, stored, and processed in countries outside of your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. We ensure that data transfers comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) in the EU and similar laws in other regions by relying on the AWS Data Processing Addendum (DPA) and adequacy decisions.

7. Data Retention

• Account and integration data is deleted upon account deletion, except where retention is required for legal, regulatory, or security purposes.
• Connection and technical data (such as logs) may be retained for up to 10 years after account deletion to comply with legal and audit requirements.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: You can request a copy of the data we hold about you.
• Correction: You can request that we correct any inaccurate data we hold about you.
• Deletion: You can request the deletion of your data by deleting your account. Some data is subject to a retention period for legal and compliance purposes.
• Restriction: You can request that we limit how we process your data in certain cases.
• Objection: You may object to specific types of processing, such as marketing.
• Portability: You can request that we provide your data to you in a structured, commonly used, and machine-readable format.
• Automated Decision Making: You can request a human review of automated decisions if they significantly affect you, however, at this time we do not use automated decisions for processing restricted scope requests.
• Non-Discrimination: We will not deny you service or treat you unfairly for exercising your data rights.

To exercise any of these rights, please contact us at support@universalverify.com.

9. Cookies and Tracking Technologies

We use cookies strictly to authenticate your session. These cookies are essential to the functioning of our service and cannot be opted out of.

We do not knowingly use any non-essential cookies or tracking technologies. However, some third-party libraries or embedded services used on our site may set their own cookies. While we make efforts to review and monitor the tools we use, we cannot guarantee that third-party code will not set cookies without our explicit knowledge.

If you notice any unexpected cookies or have concerns about how your data is handled, please contact us at support@universalverify.com.

10. Data Security

We take the protection of your information seriously. Industry-standard technical and organizational measures are used to secure data during storage and transmission. While we strive for maximum security, no system can guarantee absolute protection. We encourage partners to enable multi-factor authentication and secure their integration credentials.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Changes will be posted to our website, and the "Effective Date" at the top of this page will be updated. Significant changes will be communicated directly where feasible.

12. Contact Us

If you have any questions about this Privacy Policy or our practices regarding partner information, please contact us:

Universal Verify

Email: support@universalverify.com

Website: https://partners.universalverify.com