Privacy Policy
Last updated: July 1, 2026
1. Introduction
Verify.ge ('we', 'our', or 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, API, dashboard, and OTP verification services.
2. Information We Collect
2.1 Information You Provide
- Phone number (for account verification and OTP delivery)
- Email address (optional, for account recovery)
- Company name (optional)
- Payment metadata (processed by Bank of Georgia; we do not store full card details)
2.2 Automatically Collected Information
- IP address and device information
- Usage data and API requests
- Browser type and operating system
2.3 OTP Service Data
- Phone numbers to which OTPs are sent
- OTP verification success/failure status
- Timestamp and metadata of OTP requests
3. How We Use Your Information
We use your information to:
- Provide and maintain our OTP verification services
- Process payments and manage your account
- Send service-related notifications and updates
- Improve our services and develop new features
- Detect and prevent fraud and abuse
- Comply with legal obligations
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your data with: (a) SMS/WhatsApp service providers for OTP delivery; (b) Payment processors for billing; (c) Law enforcement when required by law; (d) Service providers who assist in our operations under strict confidentiality agreements.
4.1 Payment cards and BOG
When you choose to save your card for future payments or automatic renewal, we store only a tokenized reference (parent order identifier) provided by JSC Bank of Georgia (BOG), along with masked card digits and expiry. We do not store or have access to your full card number, CVV, or PIN. BOG processes card payments under its own privacy policy and PCI-DSS standards. See BOG's privacy policy at bankofgeorgia.ge. bankofgeorgia.ge.
4.2 Sub-processors
Key sub-processors include: JSC Bank of Georgia (card payments and tokenization), SMS and messaging providers (OTP delivery), and cloud infrastructure providers (hosting). We require all sub-processors to protect data under contractual obligations.
5. Data Retention
We retain your data as follows:
- Account information: Until account deletion or 2 years of inactivity
- OTP transaction logs: 90 days for operational purposes
- Billing records: As required by Georgian tax law (minimum 6 years)
You may request deletion of your account and personal data at any time by contacting [email protected]
6. Data Security
We implement industry-standard security measures including encryption (TLS 1.3), secure API authentication, access controls, and regular security reviews. For full details, see our Security page. Security.
7. Your Rights
Under the Law of Georgia on Personal Data Protection and GDPR where applicable, you have the right to:
- Access your personal data (including Download my data in Dashboard → Settings)
- Rectify inaccurate data
- Request deletion of your data ('right to be forgotten') via Close account in Dashboard → Settings, or contact us
- Object to processing of your data
- Data portability (JSON export from Dashboard → Settings)
8. Cookies and Tracking
We use essential cookies for authentication (HTTP-only session tokens), locale preference, and UI state. Optional analytics (e.g. Google Analytics, Plausible, Vercel Analytics), marketing (e.g. LinkedIn Insight), and live chat (e.g. Tawk.to) load only after you consent via our cookie banner. You can change preferences anytime. Details: Cookies.
9. International Data Transfers
Your data is primarily stored and processed in Georgia. If we transfer data internationally, we ensure appropriate safeguards are in place as required by applicable law.
10. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect data from children.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or dashboard notification.
12. Contact Us
For privacy-related questions or rights that are not available in Dashboard → Settings, contact us at [email protected] or Rustaveli Avenue 12, Tbilisi, Georgia 0108.
[email protected]
Rustaveli Avenue 12, Tbilisi, Georgia 0108