This Privacy Policy explains how VerifyFlow collects, uses, and protects your personal information when you use our Service.

1. Information We Collect

Account Information

• Business name and email address
• Date of account creation and plan type

Usage Information

• API requests made and OTPs sent and verified
• Channels used (SMS, WhatsApp, Telegram, Email)
• Phone numbers submitted for OTP delivery
• Timestamps of activity

Technical Information

• IP addresses (for rate limiting and fraud prevention)
• API key usage patterns

We do not collect payment card details. Payments are processed by Flutterwave directly.

2. How We Use Your Information

• Provide and maintain the Service
• Process and deliver OTPs on your behalf
• Monitor and enforce monthly usage limits
• Detect and prevent fraud and abuse
• Send account-related emails
• Comply with legal obligations

3. Data Retention

• OTP logs — retained for 90 days then deleted
• Account data — retained while your account is active
• Deleted accounts — data purged within 30 days
• Phone numbers — used only for OTP delivery, not stored permanently

4. Data Sharing

We do not sell your personal data. We work with trusted third-party service providers to deliver OTPs and host our infrastructure. All providers are bound by confidentiality and data protection obligations.

5. Security

• API keys hashed using SHA-256 before storage
• HTTPS encryption for all data in transit
• Rate limiting and IP monitoring
• No plain-text storage of OTPs

6. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at legal@verifyflow.io.

7. Cookies

Our dashboard uses session cookies for authentication purposes only. We do not use tracking or advertising cookies.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you via email of significant changes.