Privacy Policy

VerifDoc (“we”, “us”) runs verifdoc.net, where you can get phone numbers with calling and texting (Smart Dialer), create email addresses (VDocMail), read and answer your own email accounts in one place (Email Companion), and get real mobile numbers to receive verification codes (SMS Verification), and use residential proxies (Residential Proxies). This policy explains what we collect, why, who we share it with, and the choices you have. It covers the website and all of these services.

Information we collect

• Your account: your name and email address, your password (stored only as a one-way hash), your 2-step sign-in settings if you turn them on (the secret is encrypted), and your sign-in sessions.
• Security records: an activity log of sign-ins, purchases and account changes, with the IP address and browser they came from.
• Billing: your balance and the history of charges and credits. For crypto deposits we keep the deposit address, the amount and the blockchain transaction. We don't collect card numbers.
• Smart Dialer: the numbers you get, records of your calls (the numbers involved, time, length and cost), the text messages you send and receive (so you can see your conversations), and the contacts you save. We don't record calls.
• VDocMail: the addresses you create and the emails sent to and from them, including attachments.
• SMS Verification: the numbers you get and the service each is for (including a name you type for a service that isn't listed), the texts and codes they receive, and for voice codes a record of the call and its recording if our provider keeps one. Voice code calls are answered in your browser; your microphone is used only to connect the call, and we don't record it.
• Residential Proxies: your proxy login and how much traffic it uses each day. We don't log the sites you visit through the proxy or what you send.
• Email Companion: see Connected email accounts below.
• Support: the tickets you open and the messages in them.

Cookies and analytics

We use one cookie to keep you signed in, plus short-lived cookies that protect sign-in flows, and one that remembers your cookie choice.

With your permission we also use Google Analytics to see how visitors find and use the site: which pages are visited, roughly from where, and on what kind of device. If you allow it, we also remember where your first visit came from (for example a search engine, a social post or a link with a campaign tag) and save it with your account if you sign up, so we know which channels bring customers. Visitors from the EU, the EEA, the UK and Switzerland are asked first, and nothing is loaded until they agree. Page addresses we send hide account ids and numbers, and we never send names, email addresses or anything you type. We don't use advertising trackers. You can change your choice at any time with “Cookie settings” at the bottom of our public pages.

How we use it

• To provide the services you use: connect your calls and texts, deliver your email, show your connected inboxes, and show you your verification codes.
• To bill your usage from your balance and keep accurate records.
• To keep accounts secure and to prevent fraud, spam and abuse.
• To answer your support requests.
• To meet legal obligations.

We don't sell your information, and we don't use it for advertising.

Connected email accounts (Email Companion)

You can connect an email account (Gmail, Outlook, Yahoo, AOL, iCloud and others) with an app password or, where offered, by signing in with the provider. Either way:

• We use the account only to show you your own mail and to do what you ask: send, reply, move, archive, search or delete.
• Your messages are fetched from the provider when you open or search them, and passed to your browser. We don't keep copies of your email.
• We store the connected address, its display name, and the app password or sign-in tokens, encrypted with AES-256-GCM. Disconnecting deletes them (and, for sign-ins, revokes our access with the provider where it allows).
• We don't sell this data, use it for advertising, or use it to train AI or machine-learning models.

Google user data

When you connect a Gmail account with Continue with Google, Google asks you to allow VerifDoc to:

• Read, compose, send and delete email in Gmail (https://mail.google.com/). This is the permission Gmail requires for the standard mail protocols (IMAP and SMTP) that Email Companion uses to show your mailbox and to send, reply, move, archive or delete messages when you ask it to.
• See your email address (userinfo.email), so we know which account you connected.

How we handle that data:

• Used only to show you your own mail. We use Gmail data solely to provide Email Companion's features to you: listing your folders and messages, opening a message, and carrying out the actions you choose.
• Not stored. Messages and attachments are fetched from Gmail when you open them and passed to your browser. We don't keep copies of your email on our servers.
• What we do store: the connected address, its display name, and the access tokens Google gives us (or an app password if you connect that way), encrypted with AES-256-GCM.
• Not shared or sold. We don't transfer Google user data to anyone, except the hosting provider that stores the encrypted tokens for us, when the law requires it, or with your consent. We never use it for advertising, never sell it, and never use it to develop or train AI or machine-learning models.
• No human reading. No one at VerifDoc reads your email, unless you explicitly ask us to look at a message for support, it's needed to investigate abuse or a security issue, or the law requires it.
• You can disconnect at any time. Removing an account in Email Companion deletes the stored tokens and revokes our access at Google. You can also remove VerifDoc from your Google account at myaccount.google.com/permissions.

VerifDoc's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share information with

Only with the providers that make the services work, and only what each one needs:

• Telnyx, our phone carrier, which connects calls and delivers texts.
• Postmark, which sends and receives email for VDocMail addresses.
• Railway, which hosts the website and its database, and our cloud storage provider, which holds VDocMail attachments.
• TextVerified, which provides the numbers for SMS Verification and passes on the texts and calls they receive.
• Twilio, which carries voice code calls to your browser.
• Geonode, whose residential network carries your proxy traffic to the sites you visit.
• Your email provider (such as Google, Microsoft or Yahoo), when you connect an account to Email Companion.
• Public blockchains, which record the crypto deposits you make.
• Google, which runs Google Analytics for us, only when you allow analytics cookies.

We may also disclose information when the law requires it or to protect people from harm or fraud.

How long we keep it

We keep your information while your account is open. You can delete VDocMail emails and saved contacts, release numbers and disconnect email accounts at any time; for anything else, including closing your whole account, ask Support. When an account is closed we delete its information, except records we must keep by law, such as billing records.

Your choices

• See and update your details in your dashboard.
• Disconnect a connected email account at any time from Email Companion.
• Ask for a copy of your information, a correction, or for your account and its information to be deleted, from Support or by email.

Security

Everything travels over encrypted connections (HTTPS). Passwords are hashed, and stored credentials for connected email accounts are encrypted. You can turn on 2-step sign-in with an authenticator app. No system is perfectly secure, but we work to protect your information and will tell you promptly if a breach affects it.

Children

VerifDoc is not meant for children. You must be at least 18 to use it, and we don't knowingly collect information from children.

Changes

If we change this policy, we'll update the date above, and tell you in your dashboard or by email when the change is significant.