Legal
Privacy policy
What we collect, why we collect it, who sees it, and what you can do about it. VERYFY exists to make capability verifiable — that only works if the person it describes stays in control of it.
Last updated 21 September 2026
1. Who we are
VERYFY is operated by LeaDe Ltd ("VERYFY", "we", "us"), a company registered in the United Kingdom. For professionals and employers in the UK and EEA, we act as data controller for the account and verification data described here.
Where an employer uploads or records information about their own workforce inside VERYFY, that employer is the controller of it and we process it on their behalf under our terms.
2. What we collect
We collect only what the product needs to work:
- Account data — name, email address, password hash, role (professional or employer), and organisation where relevant.
- Profile data — job title, location, work preference, availability, claimed capabilities, and the contact routes you choose to expose.
- Proof of work — the work entries you write, their outcomes, attached files, links and connected-platform artefacts.
- Verification data — the verifier names, roles, relationships and work email domains you supply, their responses, and the integrity checks applied to each request.
- Employer data — Matches, pipelines, notes, messages, Work you publish and submissions you review.
- Usage data — pages and features used, device and browser type, and approximate location derived from IP address. Analytics is only collected if you consent to it.
We do not ask for, and do not want, special category data. Do not put health, political, religious, biometric or trade union information into a work entry, note or message.
3. Why we process it, and on what basis
- To provide the service — performance of our contract with you. Without profile and proof of work data there is nothing to verify.
- To verify claims — our legitimate interest, and yours, in a signal that can be trusted. This includes the anti-gaming checks described in our terms.
- To match professionals to roles — performance of contract for employers, and legitimate interest in showing professionals relevant opportunities. Matching runs on VERYFY'D capability, not on inferred personal characteristics.
- To keep the service secure and prevent abuse — legitimate interest and legal obligation.
- To send optional analytics and product emails — consent, which you can withdraw at any time.
We do not sell personal data. We do not license proof of work. We do not use your proof of work to train third-party models.
4. Automated processing and AI agents
VERYFY uses agents to source, assess and screen candidates for employers. These agents organise and summarise evidence; they cannot verify a capability, reject a candidate, or make a hiring decision. Every conclusion they produce cites the specific capability, work entry or submission behind it, with a confidence level.
You are told when AI is involved, what it considered, and what was shared with an employer, on the AI & your profile page in your portal. You may ask for a human conversation instead of an AI screening interview without that being treated as a withdrawal from the process.
No decision producing a legal or similarly significant effect on you is made solely by automated means.
6. How long we keep it
Account and profile data is kept while your account is open. Verification records are kept for as long as the capability they support is shown, because a VERYFY'D claim with no record behind it is not VERYFY'D.
When you delete your account, your profile, proof of work and verification history are removed within 30 days, excluding records we must retain by law. Verifier confirmations cannot be reissued afterwards — we say this before you confirm deletion, not after.
7. Your rights
- Access and portability — export your profile, capabilities, work entries, experience, education and proof of work as a file, from Settings, at any time.
- Rectification — correct anything inaccurate. A corrected work entry returns to unverified until confirmed again.
- Erasure — delete individual items, or your whole account.
- Restriction and objection — including objecting to processing based on legitimate interest.
- Withdraw consent — for analytics and optional emails, without affecting the service itself.
Write to privacy@veryfy.com to exercise any of these. We respond within one month. If you are unhappy with our response you can complain to your supervisory authority — in the UK, the Information Commissioner’s Office.
8. International transfers
Data is stored in the UK and EEA. Where a subprocessor processes data elsewhere, we rely on UK and EU standard contractual clauses together with a transfer risk assessment. The regions for each subprocessor are listed in the Trust Center.
9. Security
Traffic is encrypted with TLS 1.2 or above. Stored proof of work and verification records are encrypted at rest with AES-256. Production is separated from development and test, and live data is never copied into test environments. Access is role-based and reviewed. Our current controls and compliance status are published honestly in the Trust Center, including what is still in progress.
10. Children
VERYFY is for working professionals and is not intended for anyone under 16. We do not knowingly collect data from children.
11. Changes to this policy
If we make a material change we will tell you in the product and by email before it takes effect, not quietly update the date at the top. The date above is the last revision.