Privacy policy
VerifyBG is operated by Bitola Industries Pvt Ltd. This policy explains what we collect, why, and what we do with it. It is written to be read, not to be skipped.
Who the data is about
There are two people in every verification: the requester, who holds an account with us, and the subject, the person being checked. We hold data about both, and both have rights over it.
What we collect
- From requesters: name, email, optional company name, and a hashed password. We never store your password itself.
- About subjects: only what the requester enters. Typically name, and optionally date of birth, PAN, address, phone and email.
- Consent records: the name the subject signed with (typed, or issued by DigiLocker), the time, the method used, their IP address and browser user agent. This exists to prove consent was genuinely given.
- Check results: whatever the connected data sources return about the subject.
- Access logs: a record of every time a report is viewed, downloaded or shared.
Consent comes first, always
No check runs, and no data about a subject is fetched from any source, until that subject signs a consent form. This is enforced by our servers on every request, not merely by the design of the interface. A requester cannot bypass it.
How long we keep it
Personal data behind a verification is deleted automatically 30 days after the request is raised. After deletion we retain a record that the verification happened and its audit log, with the personal details stripped out, because a compliance log that vanishes along with the data it describes cannot evidence anything.
Who we share it with
Identity and GST structural validation is performed entirely on our own servers, and no subject data leaves our systems for those checks.
Sanctions, PEP and adverse-media screening sends the subject's name, and where supplied their date of birth and identifier, to Didit, a screening provider headquartered outside India. This is what allows us to screen against more than 1,300 published watchlists rather than the two we can hold locally. Only the fields needed to perform the match are sent; we do not send the requester's identity, the stated purpose, or the results of any other check. Where that provider is unavailable we fall back to lists held on our own servers, and the report says so.
Corporate registry checks send the supplied company identifier or name to GLEIF, the Global Legal Entity Identifier Foundation. News screening, when the primary provider is not in use, sends the subject name to GDELT, a public news index.
We send subject identifiers to the verification data sources we are connected to, purely to perform the checks that were consented to. We do not sell personal data, we do not share it for advertising, and we do not build profiles beyond the specific report that was requested.
Your rights under the DPDP Act, 2023
- Access: anyone who has been checked can see every request naming their email at /my-data. Account holders can download everything we hold about them from their account page.
- Correction and grievance: the person checked can raise a concern from /my-data and receives a written answer. A requester can dispute a finding on their report.
- Erasure: account holders can delete their account, which anonymises it and purges all verification data on the next daily sweep. Tax invoices are kept as the law requires.
- Withdrawal of consent: the person checked can withdraw at any time from /my-data, which stops all further processing and brings deletion forward.
Security
Passwords are hashed with bcrypt. Sessions are held in signed, httpOnly cookies that JavaScript cannot read. The site is served over HTTPS only. Consent and report share links use cryptographically random tokens rather than guessable identifiers, and share links expire.
Accuracy, stated plainly
Sanctions and news checks match by name, and by date of birth and identifiers where they are supplied. At India's population scale name matching produces genuine false matches on common names. Every match we show carries a confidence score, low confidence matches are flagged rather than buried, and we tell you when a check could not be run at all, or has no source connected, rather than implying the subject came back clear. No Indian court-records source is connected today.
Contact
For any privacy question, or to exercise a right described here, write to our contact page.