Privacy Policy
Draft, version 2026-10-20-draft. The final text follows legal review before 9 November 2026. If it changes, we ask you to accept it again.
What we collect
Your name, date of birth, nationality, address and phone number; the company details; the directors and owners you list; the documents you upload; your email address; the company wallet address; and technical data such as your IP address and browser when you accept agreements or give consent.
After payment, the identity check uses a photo or short video of your face, compared with the photo in your ID document, and a check that you are a real person (liveness check). This is biometric data. We only start this check after you have given separate, explicit consent for it, right before the check begins.
Why
- To verify you and the company, and to prevent fraud and money laundering.
- To run your account and send you the emails that belong to it.
- To show the public token page of a verified company.
- To understand how the website is used, so we can improve it.
The legal basis for each purpose (draft, to be confirmed):
- Verification and your account: performing our agreement with you.
- Screening against sanctions and money-laundering lists: legal obligation.
- The face and liveness check: your explicit consent.
- Website analytics: legitimate interest.
What is public
Visitors see the company name, the Verified badge, the date of verification and the token facts. If we withdraw a company's Verified status, its token page stays online and shows the date and our reason instead of the badge, and the report is no longer shown. The verification report on the token page is for logged-in users only (any account type) (draft, to be confirmed). It shows:
- The registered company name and the country of registration, as the company entered them.
- The date the company was verified.
- That the company register extract was checked: by our verification provider (with the date, when its check passed) and accepted by the VeritMint team (with the date, when recorded).
- That the company name was screened against sanctions and watch lists, and when.
- That the applicant passed the ID document check and the face check (or passed after a manual review by our team), and when, and the applicant's role at the company (director, owner or authorised representative).
- For each person the company listed (the applicant, directors and owners): their role, and whether and when they were screened by name against sanctions, PEP and watch lists. Not their names.
- The company wallet address, with a link to it on Solscan (a blockchain explorer), and that the company paid from that wallet, and when. The address is public on the blockchain anyway.
- The token facts fixed at launch: minting off, the founder lock and its unlock date, VeritMint's 2.5% not locked, the 1% transfer fee fixed forever, and that VeritMint collects the fee.
- What we do not check.
The report never shows names of people, documents, ID images or face scans, document numbers, dates of birth, email addresses, phone numbers, personal addresses, screening match details or our internal review notes. Your documents, your ID, your face scan and your personal address are never shown to anyone outside VeritMint and the services below.
Solana is a public blockchain. The company wallet, the token, payments and fee payouts are recorded on it and become linked to a named, verified company. Data on a blockchain is permanent: nobody, including VeritMint, can change or delete it.
Who processes your data
The VeritMint team, and the services below, which work on our behalf. We do not sell your data. Where a service processes data outside the European Economic Area, the safeguard used for that transfer is (draft, to be confirmed).
| Service | What for | Which data | When |
|---|---|---|---|
| Railway | Hosting, database and file storage | Everything stored in your account: your details, the company details, the documents you upload, the results of the checks | Always |
| Resend | Sending email | Your email address and the content of the emails we send you (sign-in links, status updates) | Always |
| ID Analyzer | Identity check (KYC), company check (KYB) and screening against sanctions, PEP and watch lists (AML) | Your ID document, a photo or short video of your face (biometric data), your name, date of birth and phone number, the company register extract, and the names of the company and the people you list | After payment |
| PostHog | Website analytics, without cookies or local storage | Pages visited and sign-up steps, with your IP address and browser details | Only if analytics is switched on |
| Google or X | Sign-in | Your name, email address and account ID at that service | Only if you choose to sign in with them |
| Coinbase | Buying USDC with a card or bank account | Your company wallet address and the amount. Coinbase handles the purchase under its own privacy policy | Only if you use the Coinbase link on the payment page |
| Solana | Public blockchain on which tokens, payments and payouts are recorded | Wallet addresses and transactions, linked to the verified company | Payment, launch and every payout. Permanent and public |
How long we keep it
Documents are stored privately and can only be opened by you and our verification team. We keep verification records for as long as the law requires, and delete them after that. The exact retention periods, including for the face scan, are (draft, to be confirmed).
Your rights
You can ask to see, correct or delete your data, to receive a copy of it, or to object to how we use it. You can withdraw your consent for the face check at any time; this does not affect checks already done, and without it we cannot verify your company. Email us at support@veritmint.com. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) (draft, to be confirmed).