Privacy Policy
Last Updated
1. Introduction
Verify.ge ('we', 'our', or 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our OTP verification services.
2. Information We Collect
2.1 Information You Provide
- Phone number (for account verification and OTP delivery)
- Email address (optional, for account recovery)
- Company name (optional)
- Payment information (processed securely through third-party payment providers)
2.2 Automatically Collected Information
- IP address and device information
- Usage data and API requests
- Browser type and operating system
2.3 OTP Service Data
- Phone numbers to which OTPs are sent
- OTP verification success/failure status
- Timestamp and metadata of OTP requests
3. How We Use Your Information
We use your information to:
- Provide and maintain our OTP verification services
- Process payments and manage your account
- Send service-related notifications and updates
- Improve our services and develop new features
- Detect and prevent fraud and abuse
- Comply with legal obligations
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your data with: (a) SMS/WhatsApp service providers for OTP delivery; (b) Payment processors for billing; (c) Law enforcement when required by law; (d) Service providers who assist in our operations under strict confidentiality agreements.
4.1 Payment cards and BOG
When you choose to save your card for future payments or automatic renewal, we store only a tokenized reference (parent order identifier) provided by JSC Bank of Georgia (BOG). We do not store or have access to your full card number, CVV, or PIN. BOG processes payments under its own privacy policy and PCI-DSS standards.
5. Data Retention
We retain your data as follows:
- Account information: Until account deletion or 2 years of inactivity
- OTP transaction logs: 90 days for operational purposes
- Billing records: As required by Georgian tax law (minimum 6 years)
You may request deletion of your account and personal data at any time by contacting [email protected]
6. Data Security
We implement industry-standard security measures including encryption (TLS 1.3), secure API authentication, regular security audits, and access controls. However, no method of transmission over the internet is 100% secure.
7. Your Rights
Under GDPR and Georgian data protection law, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data ('right to be forgotten')
- Object to processing of your data
- Data portability
8. Cookies and Tracking
We use essential cookies for authentication and session management. We do not use third-party tracking or advertising cookies. You can disable cookies in your browser settings, but this may limit functionality.
9. International Data Transfers
Your data is primarily stored and processed in Georgia. If we transfer data internationally, we ensure appropriate safeguards are in place as required by GDPR.
10. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect data from children.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or dashboard notification.
12. Contact Us
For privacy-related questions or to exercise your rights, contact us at: [email protected] or Rustaveli Avenue 12, Tbilisi, Georgia 0108.
[email protected]
Rustaveli Avenue 12, Tbilisi, Georgia 0108