AI Verification Privacy Policy

Effective as of April 20, 2026

Data Protection and Privacy

Roles of the Parties

The Customer acts as data controller for Customer Content, and the Company acts as data processor. For account-related data, the Company acts as data controller under its Privacy Policy.

Customer Obligations

  • (a) establish lawful basis under GDPR;
  • (b) meet Article 9 conditions for sensitive data;
  • (c) provide clear privacy notices;
  • (d) implement data protection measures;
  • (e) enable data subject rights;
  • (f) comply with AI transparency obligations.

Company Obligations

  • (a) process data per instructions;
  • (b) ensure confidentiality;
  • (c) implement security measures;
  • (d) manage Sub-processors with safeguards;
  • (e) assist with data subject rights;
  • (f) support GDPR compliance obligations;
  • (g) delete or return data upon termination.

Biometric and Special Category Data

Voice data may constitute sensitive biometric data and requires valid legal basis and safeguards.

  • (a) explicit consent or valid Article 9 condition required;
  • (b) parental consent required for minors.

Retention and Deletion

  • (a) audio processed without persistent storage by default;
  • (b) outputs retained up to 90 days;
  • (c) logs retained up to 12 months;
  • (d) account data retained up to 7 years.

International Transfers

Transfers comply with UK/EU data transfer mechanisms such as SCCs and IDTA.

Data Breach Notification

Breaches will be notified within 48 hours with relevant details.

Data Processing Agreement

A DPA applies for Enterprise or high-risk processing, or upon request.

Intellectual Property Rights

Company IP

All Service-related intellectual property remains owned by the Company.

Licence to Customer

The Customer receives a limited licence to use the Service and Documentation for internal purposes.

Customer IP

The Customer retains ownership of submitted content but grants a licence to process it for Service delivery.

Restrictions

  • (a) no copying or redistribution;
  • (b) no reverse engineering;
  • (c) no competitive use;
  • (d) no scraping or mirroring;
  • (e) no removal of IP notices;
  • (f) no unauthorised automated access.

Feedback

Feedback may be used freely by the Company without obligation.

Open Source Components

Open-source components are governed by their respective licences.