Privacy Policy

1. Information We Collect

VeriLink collects information necessary to provide passwordless authentication and identity management services. The categories of information we process include:

VeriLink's passwordless authentication architecture is designed so that we do not collect or store End User passwords. Authentication relies on public-key cryptography bound to an End User's device rather than a shared secret transmitted to or stored by VeriLink.

2. How We Use Information

We use the information described above for the following purposes:

• To provide, operate, and maintain the Service, including processing authentication events in real time.
• To calculate Active User counts and generate accurate, metered billing.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To communicate with Customers about their account, service updates, and support requests.
• To improve the reliability, performance, and functionality of the Service.
• To comply with applicable law, legal process, and enforceable governmental requests.

VeriLink does not use End User authentication data for advertising purposes and does not build behavioral advertising profiles from data processed through the Service.

3. How We Share Information

We may share information in the following limited circumstances:

• Service Providers. With vetted subprocessors who perform functions on our behalf, such as cloud hosting, payment processing (Stripe), and analytics, under contractual confidentiality and data protection obligations.
• Customers. Authentication event data and Active User metrics are made available to the Customer whose integration generated the event, as necessary for them to operate their own product.
• Legal Requirements. Where required to comply with applicable law, regulation, legal process, or a valid governmental request.
• Business Transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
• With Consent. Where a Customer or End User has otherwise directed or consented to the sharing.

4. Data Retention

VeriLink retains Account Data for as long as the Customer maintains an active account and for a reasonable period thereafter to comply with legal, tax, and accounting obligations. Authentication event logs are retained for the period necessary to provide the Service, support billing accuracy, and investigate security incidents, after which they are deleted or anonymized in accordance with our internal data retention schedule. Customers may request deletion of their account data by contacting support@veri-link.com, subject to any retention required by law.

5. Data Security

VeriLink implements administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit and at rest, role-based access controls, network segmentation, and continuous monitoring of authentication infrastructure. No method of transmission or storage is completely secure, and VeriLink cannot guarantee absolute security. Any suspected security incident should be reported immediately to support@veri-link.com.

6. International Data Transfers

VeriLink is based in the United States, and information we collect may be processed and stored in the United States or other jurisdictions in which VeriLink or its service providers operate. Where information is transferred internationally, VeriLink takes steps designed to ensure it receives an adequate level of protection consistent with applicable data protection laws, including the use of standard contractual clauses where required.

7. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights with respect to your personal information, including the right to:

• Request access to the personal information VeriLink holds about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information, subject to legal retention requirements.
• Object to or restrict certain processing of your information.
• Request a copy of your information in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at support@veri-link.com. Because End Users authenticate through a Customer's own product and do not hold a direct account with VeriLink, End User requests regarding their personal information should generally be directed to the applicable Customer in the first instance; VeriLink will assist Customers in responding to such requests as required by applicable law.

8. SMS & Text Messaging Communications

VeriLink Inc. (doing business as VeriLink) may send customer care and/or marketing text message communications from (919) 582-7692 to mobile numbers provided by individuals who submit an opt-in request through our website or other approved sign-up forms. Customer care messages may include responses to messages you send us, as well as information relevant to your relationship with us. Marketing messages may include discount codes, special deals, or texts promoting our products or services.

Standard message and data rates may apply depending on your mobile carrier. Carriers are not liable for delayed or undelivered messages. For questions about our text messaging program, contact support@veri-link.com or (919) 582-7692.

9. Cookies and Tracking Technologies

The VeriLink website and dashboard use cookies and similar technologies to maintain sessions, remember preferences, and understand aggregate usage of our site. These may include analytics tools that help us understand how visitors interact with veri-link.com. You can control cookies through your browser settings; disabling cookies may affect the functionality of the dashboard.

10. Children's Privacy

The Service is intended for business use by Customers and their End Users in a commercial context and is not directed to children under the age of 16. VeriLink does not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take reasonable steps to delete it.

11. Changes to this Policy

VeriLink may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated to Customers via the registered account email address, and the "Effective Date" at the top of this Policy will be updated accordingly. Continued use of the Service following such changes constitutes acceptance of the updated Policy.

12. Contact Us

Data Controller

VeriLink Inc., incorporated in North Carolina, is the data controller for information collected in connection with the Service.

Questions or Requests

For any questions about this Privacy Policy or to exercise your privacy rights, contact us at support@veri-link.com or 984-386-4340.

Related Documents

This Privacy Policy should be read together with VeriLink's Service & Acceptable Use Agreement, which is incorporated by reference into the Customer relationship.