1. Introduction
VERITAS respects users' right to the protection of their personal data and processes that data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or GDPR) and applicable Romanian law.
2. Data We Collect
Depending on how you use the Platform, VERITAS may process the following categories of data:
- First and last name, if provided;
- Email address;
- Information required to process payments;
- Documents uploaded for similarity checking;
- Technical data relating to your use of the Platform, such as your IP address, browser and device.
3. Purposes of Processing
Data is processed solely for the following purposes:
- Providing the similarity checking service;
- Processing payments;
- Communicating with users;
- Improving the operation of the Platform;
- Complying with legal obligations.
4. Legal Bases for Processing
Personal data is processed on one or more of the following legal bases under the GDPR, as applicable:
- Performance of the contract and provision of the requested service;
- Compliance with the legal obligations of the Platform's operator (the "Operator");
- Legitimate interests in securing and improving the Platform;
- The User's consent, where required.
5. Processing Uploaded Documents
Uploaded documents are used solely to perform the requested similarity analysis and generate the corresponding Similarity Report.
VERITAS does not acquire ownership rights in uploaded documents and does not add them to a database used to compare them against documents submitted by other users.
Documents are not used to train or improve artificial intelligence models.
6. Payments
Payments are processed by a specialist payment service provider.
VERITAS does not store full payment card details. The Operator may receive only the information needed to confirm payments and maintain payment records.
7. Data Retention
Data and documents are retained only for as long as necessary to provide the service, comply with legal obligations and resolve any complaints.
Once the retention period expires, data and documents are deleted or anonymised, unless a longer retention period is required by law.
8. Your Rights
Under the GDPR, users have the following rights:
- The right to access their personal data;
- The right to have inaccurate personal data corrected;
- The right to erasure (the "right to be forgotten"), subject to the conditions provided by law;
- The right to restrict processing;
- The right to data portability;
- The right to object to processing;
- The right to lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP).
9. Data Security
VERITAS implements reasonable technical and organisational measures to protect data and documents against unauthorised access, loss, alteration or disclosure.
Although appropriate security measures are in place, no information system can guarantee absolute data security.
10. Sharing Data with Third Parties
Data may be shared only with providers involved in operating the Platform, such as hosting providers, payment processors and technical service providers.
These providers process data only to the extent necessary to deliver their services and in compliance with applicable data protection obligations.
11. Transfers Outside the European Economic Area
Where technical services involve transferring data outside the European Economic Area (EEA), transfers will take place only in accordance with the safeguards required by the GDPR.
12. Changes to This Privacy Policy
The Operator may update this Privacy Policy where necessary, including to reflect changes to the services or applicable law.
The updated version will be published on the Platform and will state the date of the latest update.
13. Contact
To exercise your data protection rights or ask a question about this Privacy Policy, please use the Contact.