This English version is provided for convenience. If it conflicts with the Hebrew version, the Hebrew version prevails.
This policy explains what information ThisVerify ("we") collects through ThisVerify, why, and your rights. It is written in line with the Israeli Privacy Protection Law, 5741-1981 (including Amendment 13), the Privacy Protection (Data Security) Regulations, 5777-2017, and GDPR principles.
1. Who is responsible
- Account information (name, email, company, phone, usage data) — we are the database owner.
- Documents you upload and third-party personal data in them — you decide what to upload and why; we process them on your behalf and on your instructions only.
2. What we collect
- Registration details: name, email, company and phone (optional).
- Usage data: checks performed, times, document types, scores, IP address and browser at sign-in.
- Content: uploaded documents, extracted data, reports and questions asked about reports.
- Enquiries: details submitted through the contact form.
3. How we use it
Providing the Service and analysing documents; account and quota management; security, fraud and abuse prevention (including detecting an identical file submitted from different accounts, using a cryptographic fingerprint only); support; improving accuracy based on feedback you mark; legal compliance. We do not sell personal data and do not use your documents for advertising.
4. Processors and international transfers
We use infrastructure providers: Vercel (hosting and file storage), Neon (database) and Google (Gemini API analysis). Where configured by us, documents may also be processed by a private open-model server operated for us under equivalent safeguards. Data is stored in the Frankfurt region of the EU, which has mutual adequacy with Israel.
5. Retention
- Original files are deleted automatically at the end of your plan's retention period (7 to 90 days, or per agreement).
- Reports and extracted data are kept for up to one year unless deleted earlier.
- You may delete any check yourself and request full account deletion.
6. Security
AES-256-GCM encryption for every file, private storage, TLS, account isolation, access control, audit logs for administrative actions, rate limiting and account lockout. No method is perfectly secure; in a severe security incident we will notify you and the Privacy Protection Authority as required by law.
7. Your rights
You may access your data, ask to correct or delete it, and object to marketing. Contact: —. We respond within 30 days.
8. Cookies
We use essential cookies only, for sign-in and security. See the Cookie Policy.
9. Minors
The Service is intended for users aged 18+ for business and professional use.
10. Contact
ThisVerify · ישראל · —