Privacy policy.

This policy explains what personal data Veridossier collects when you use this website, why we collect it, who processes it, how long we keep it and what you can ask us to do with it. The operator of the service is Veridossier (operator details to be completed before launch).

Data we collect

• Application details: your name, email address, country, institution, certificate type and title, any certificate number or issue date you supply, and your notes.
• The certificate document you upload, in PDF, JPG or PNG format.
• Payment records: the transaction identifier, amount, currency, product and the email address Payhip reports to us. We do not receive or store card numbers.
• Technical records: a pseudonymous hash of your IP address, a hash of your browser user-agent string, and server logs used for security and rate limiting.
• Correspondence you send to us.

Why we use it

• To create and administer your application and to produce the appraisal report you requested.
• To verify payment on our server and to handle refunds.
• To send transactional emails about your application and report.
• To protect the service against abuse, fraud and unauthorised access.
• To keep records required for accounting, dispute resolution and our own audit trail.

Our lawful bases are performance of our contract with you, our legitimate interests in operating and securing the service, and compliance with legal obligations. Where consent is required, we ask for it separately.

Who processes data on our behalf

• Supabase — PostgreSQL database and private object storage for uploaded documents and reports.
• Payhip — hosted checkout and payment processing. Payhip is the merchant of record for the transaction.
• OpenAI or DeepSeek — automated text extraction and document assessment, depending on the provider configured for this deployment.
• Resend — transactional email delivery.
• Our hosting provider — application hosting and logs.

These providers may process data outside your country. Where required, transfers rely on the provider's standard contractual clauses or an equivalent safeguard. We do not sell personal data and we do not use your certificate for advertising.

Automated assessment

Your document is processed by a language model to extract its contents and to record consistency and quality observations. The automated output is reviewed by a human assessor before a report is issued. The model does not make the final decision. You can ask us to explain the outcome recorded for your application.

How long we keep data

Application records and reports are kept for 365 days from the last update, after which documents are deleted and personal identifiers are redacted. Applications that are created but never paid are deleted after 14 days. Payment records may be retained longer where accounting or tax law requires it. Audit logs of administrative actions are kept to protect the integrity of the service.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive a copy in a portable format. Write to nuraabdullahi708090@gmail.com with your application reference. We will respond within the period required by applicable law. You may also complain to your local data protection authority.

Security

Documents are stored in private storage and are never served from a public address. Access to uploaded files is limited to authenticated administrators. Reports are served only through time-limited signed links or the verification page, which does not expose the uploaded document. Administrative actions are logged.

Cookies

The public website does not set advertising or analytics cookies. A single strictly necessary cookie is used to keep an administrator signed in. Payment cookies are set by Payhip on its own checkout domain.

Changes and contact

If we change this policy we will update the date above. Questions and requests: nuraabdullahi708090@gmail.com.

This policy is a working document. The operator must confirm the entity name, address, jurisdiction and any mandatory local disclosures before production launch. It is not legal advice.