Privacy Policy

Who we are and what this policy covers

BeVerifyd is operated by VAULTVERIFIED LLC (“BeVerifyd,” “we,” or “us”). This Privacy Policy explains how we handle personal information when you visit our website, contact us, request or participate in a business verification, schedule an interview, or communicate with us. It covers requesting customers, business representatives, and other individuals whose information is relevant to a verification. Our services focus on business verification in the United States.

Information we collect

We collect information you provide, including your name, business email, telephone number, company, role or title, company website, appointment details, case reference, the business to be verified, the requested service, relevant context, and correspondence. A requesting customer may provide information about a vendor or business representative.

For an accepted verification, we collect relevant interview responses, manual notes, business records, authorization information, research sources, findings, and records of consent and service acceptance. We obtain information from customers, business representatives, public business records, business websites, and other lawful business-information sources.

Verification calls are recorded for quality and accuracy. Before recording starts, we tell every participant. A government ID shown on camera is shown before recording begins and is not copied or kept. If a participant does not want to be recorded, we may be unable to complete the verification.

Identification is shown live on camera and is never uploaded, emailed, copied or stored by BeVerifyd.

Our website and infrastructure providers process technical information needed to deliver and protect the service, such as IP addresses, browser and device information, request timestamps, diagnostic information, and abuse-prevention records. Verification requests are stored in an intake database and transferred to case-management records. Contact inquiries may be retained in email. Scheduling is provided through Google Calendar, and video calls take place on Google Meet.

Information to keep out of public forms

Do not submit bank account or routing numbers, Social Security numbers, or government identity documents through public website forms, booking fields, or ordinary email. Provide only information relevant to your request and that you are authorized to disclose. If a particular record is necessary, we will explain an appropriate method before requesting it.

How we use information

We use information to respond to inquiries; assess and accept requests; schedule and conduct interviews; research businesses and representative authority; document and review findings; communicate with the requesting customer; maintain case, consent, and service records; correct errors; protect the service from abuse; and comply with applicable legal obligations or address disputes.

Verification outcomes receive human review. We do not use customer case information, recordings, or transcripts to train AI models. Consent to an interview, recording, or transcription does not authorize AI training.

Findings shared with the requesting customer

Results are delivered by phone call only, never by email or text. Results describe the verification at the time it was done, and a Verified result expires.

If a vendor does not complete the verification, we report it as Unable to Complete Verification. That is not a finding of fraud.

We communicate relevant reviewed findings to the business requesting the verification and its designated, authenticated recipient. Findings may include information about the business, a representative’s role and authority, discrepancies, and matters we could not confirm. Before an interview, we explain the requesting business and the purpose of the review.

The interview is part of a verification requested by another business, rather than a confidential consultation solely for the participant. We limit disclosures to information reasonably needed for the accepted request. Recordings and full transcripts are internal records by default and are not routinely provided to requesting customers. We do not publish private case files or recordings.

Service providers and other disclosures

We use providers for website hosting, database storage, scheduling, email delivery, file storage, and communications. Our website uses Lovable infrastructure and a Supabase-backed intake database; Resend supports contact-email delivery; and Google Workspace supports scheduling and case operations; Google Meet hosts video calls; and Stripe supports billing. These providers process information needed to perform their services and may operate in the United States or other countries. Their services are subject to their applicable terms, privacy practices, and our service arrangements.

Before using an additional provider to record or transcribe an interview, we identify that provider to participants and obtain the required permission. We do not authorize providers to use case records for model training. Customer case information must not be placed in website-development prompts or unapproved AI tools.

We may disclose information when required by applicable law or valid legal process, to protect rights or safety, or to professional advisers subject to appropriate confidentiality obligations. If our business is transferred, relevant records may be transferred with appropriate privacy protections and any legally required notice.

We do not sell personal information or use case information for cross-context behavioral advertising.

Cookies, browser storage, and third-party services

Our website and providers may use cookies or browser storage for essential functions, such as authentication, security, and preserving technical settings. Infrastructure providers may also collect operational and usage information. Browser settings can limit cookies or clear stored information, although doing so may affect website features.

Our site loads fonts from Google, and your browser may connect to Google to retrieve those resources. Links to scheduling and other external services take you to services with their own privacy practices. We do not control independent third-party websites. We do not use interview or case records for advertising.

Recording and transcription choices

Verification calls are recorded for quality and accuracy. Before recording starts, we tell every participant. A government ID shown on camera is shown before recording begins and is not copied or kept. If a participant does not want to be recorded, we may be unable to complete the verification.

Identification is shown live on camera and is never uploaded, emailed, copied or stored by BeVerifyd.

Transcripts may contain errors and are reviewed before being relied on in findings. Withdrawing permission stops future capture; it does not automatically erase records already lawfully collected. You may separately request deletion, subject to applicable rights and lawful retention exceptions.

Retention and deletion

We retain personal information only as reasonably necessary for the purposes described in this policy, subject to applicable legal requirements and any applicable client agreement. We retain call recordings for [recording retention period].

We remove information from active records when it is no longer reasonably necessary or an applicable deletion request requires removal. Where necessary, we request deletion from relevant providers. Backup copies may remain until they expire under the provider’s backup cycle. Information subject to a legal hold is retained only as needed for that hold, with the reason documented.

Access and security

Access to case information is limited to authorized personnel and necessary providers according to their responsibilities. We use administrative and technical safeguards designed to protect information and restrict inappropriate disclosure. No website, system, or transmission is completely secure.

We do not represent that a particular security certification, insurance benefit, or absolute protection applies merely because you use our website or service.

Privacy requests and corrections

To ask about your information, request access, correction, or deletion, withdraw permission for future recording or transcription, or raise a privacy concern, use our Contact page and begin your message with “Privacy request.” Include your business contact details and a case reference if available; do not submit sensitive identifiers.

You may also email privacy requests to [privacy email].

We verify requests proportionately, evaluate them under applicable law, and explain any lawful exceptions. Depending on your location and applicable law, additional rights may apply, including rights to appeal or use an authorized agent. To request reconsideration of our response, contact us through the same route and identify the earlier request.

We do not penalize individuals for exercising applicable privacy rights. Some information may be withheld or retained where permitted by law to protect others, comply with obligations, preserve legitimate confidentiality, or address legal claims.

Children

Our service is intended for adult business representatives and is not directed to children under 13. If you believe a child has provided personal information through our service, contact us so that we can investigate and take appropriate action.

Changes to this policy

We may update this policy to reflect changes in our service or applicable requirements. We post the effective date with the policy and provide additional notice or obtain additional permission where required. Updates do not retroactively authorize AI training or a new use of interview recordings.