01 Data controller
The data controller is Stelau SAS, a French simplified joint-stock company (société par actions simplifiée). For any privacy-related inquiry, contact us at privacy@fullverify.io.
02 Data we collect
Account and billing data
- Name, email address, company name;
- Payment information (processed by our payment provider — we do not store card numbers);
- API usage logs (timestamps, call counts, plan tier).
Verification requests
FullVerify is designed with zero credential-content retention. We do not store the attributes disclosed in a credential presentation (name, date of birth, address, etc.). Verification results (pass/fail, timestamp, request ID) may be retained in anonymised audit logs for the duration specified by your plan.
03 Legal basis for processing
- Contract performance — to deliver the Service you subscribed to;
- Legitimate interests — for security, fraud prevention, and platform improvement;
- Legal obligation — to comply with applicable laws.
04 Data retention
Account data is retained for the duration of your subscription and up to 3 years thereafter for legal and accounting purposes. Anonymised audit logs are retained according to your plan (7 days on Basic, 90 days on Professional, 1 year on Enterprise).
05 Data transfers
Data is processed on servers located within the European Economic Area (EEA). Any transfer outside the EEA is covered by appropriate safeguards (Standard Contractual Clauses).
06 Your rights (GDPR)
If you are located in the EEA, you have the right to: access, rectify, or erase your personal data; restrict or object to processing; data portability; and to lodge a complaint with a supervisory authority (in France: CNIL). Exercise your rights by emailing privacy@fullverify.io.
07 Data Processing Agreement
Customers on Professional and Enterprise plans may request a GDPR Data Processing Agreement (DPA) by contacting legal@fullverify.io.
08 Cookies
For information about how we use cookies on this website, please read our Cookie Policy.
09 Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified by email or by a prominent notice on the platform.