Privacy Policy
1. Who We Are
Verinty ("Verinty", "we", "our", "us") operates the Verinty platform at verinty.com and app.verinty.com. We provide sovereign identity infrastructure and schema management services for businesses.
We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. Information We Collect
We collect information necessary to provide our services:
- Account information: email address, name, and organisation details provided at registration
- Business identity data: ABN/NZBN, legal entity name, registered address, and related registry information you submit or authorise us to fetch from public registries
- Website data: domain names, JSON-LD schema data, and technical metadata collected during scans
- Usage data: log files, IP addresses, browser type, and interaction data collected automatically when you use our platform
- Payment information: processed by our payment provider — we do not store card details
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Verinty platform
- Verify business identity against public registries (ABR, NZBN, and equivalents)
- Generate and serve verified JSON-LD schema payloads on your behalf
- Send transactional communications (account, billing, security alerts)
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
4. Public Registry Data
Verinty queries publicly available government business registries (including the Australian Business Register) to verify entity information. This data is already in the public domain. We store the results to power your identity infrastructure and audit trail.
5. Data Sharing
We do not sell your personal information. We may share data with:
- Service providers: infrastructure partners (Supabase, Railway, Vercel, Google Cloud) under data processing agreements
- Legal requirements: when required by law, court order, or to protect our rights and safety
- Business transfers: in the event of a merger or acquisition, with appropriate notice
Your verified JSON-LD schema payload is served publicly via our edge function when accessed with your token — this is the intended function of the service.
6. Data Retention
We retain your data for as long as your account is active. On account deletion, personal data is removed within 30 days, subject to legal retention obligations. Anonymised audit logs may be retained longer for security and compliance purposes.
7. Security
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and role-based access controls. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security.
8. Your Rights
Under the Australian Privacy Act, you have the right to:
- Access personal information we hold about you
- Request correction of inaccurate information
- Complain about a breach of your privacy
To exercise these rights, contact us at privacy@verinty.com.
9. Cookies
We use essential cookies and local storage to maintain your session and preferences. We do not use third-party advertising cookies. You can disable cookies in your browser settings, though this may affect platform functionality.
10. Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or a notice on the platform. Continued use of Verinty after changes constitutes acceptance of the updated policy.
12. Contact
For privacy enquiries: privacy@verinty.com
Verinty · Melbourne, Victoria, Australia · ABN 18 459 403 998