PRIVACY POLICY

1. Who We Are

VerdictNxtGen ("we", "our", "the service") is an AI-powered company verification tool accessible at verditnxtgen.com. We are operated by ShopFarnow. For privacy matters, contact: hello@verditnxtgen.com.

2. What Data We Collect

• Search queries: The company names you type into the search box. These are stored in our GitHub-hosted database to improve future results for all users.
• IP address: Used for rate limiting (free tier: 10 requests/day per IP). Not stored permanently.
• API key email: If you register for an API key, we store your email address and tier level in Cloudflare KV.
• Usage data: Number of API calls per day per key (resets daily). Used for billing and abuse prevention.
• No account data: We do not currently have user accounts. We do not store passwords, names, phone numbers, or payment details.

3. What We Do NOT Collect

• We do not collect any data about the job seeker themselves (not your name, resume, or employment history)
• We do not use tracking pixels, third-party advertising SDKs, or behavioural analytics
• We do not sell, rent, or share your data with advertisers
• We do not use cookies beyond what GitHub Pages and Cloudflare set automatically

4. How We Use Your Data

• Search queries are stored to build a cached company database, reducing API costs and improving response speed for future users
• IP addresses are used solely for rate limiting and abuse prevention, then discarded
• Email addresses (API key holders) are used to communicate about your API key, tier upgrades, and service announcements. You may opt out at any time.

5. Compliance with DPDP Act 2023 (India)

We comply with the Digital Personal Data Protection Act, 2023 (India). Specifically:

• Purpose limitation: Data collected only for fraud detection and service improvement
• Data minimisation: We collect only what is necessary
• Right to erasure: Email hello@verditnxtgen.com to request deletion of any data we hold about you
• Data localisation: Our Cloudflare KV data may be stored globally on Cloudflare's network. GitHub data is stored per GitHub's data residency policies.
• Grievance officer: For DPDP-related complaints, contact hello@verditnxtgen.com. We will respond within 72 hours.

6. Third-Party Services

We send your search query to the following third-party APIs to generate results:

• Wikipedia API — wikimedia.org — no personal data sent, only company name
• OpenCorporates API — opencorporates.com — company name only
• WHOIS/RDAP — who-dat.as93.net, rdap.verisign.com — domain name derived from company name only
• GNews / NewsAPI — company name only
• OpenAI API — company name and data signals sent to generate the AI summary. OpenAI's data retention policy applies.
• Cloudflare — hosts our Worker. Cloudflare may log request metadata per their privacy policy.
• GitHub — our companies.json cache is stored on GitHub. GitHub's privacy policy applies.

No personally identifiable information (PII) about the user is sent to any third party.

7. Data Retention

• Search query cache (companies.json): retained indefinitely to improve the service. Contains only company names and scores — no user identifiers.
• API key data: retained until you request deletion
• Daily usage counters: deleted automatically at midnight UTC
• IP rate limit data: deleted automatically at midnight UTC

8. Your Rights

You have the right to: access data we hold about you · request correction · request deletion · withdraw consent at any time.

To exercise any right: hello@verditnxtgen.com. We respond within 72 hours.

9. Security

API keys are stored as hashed values. All communication is over HTTPS. We do not store payment information (payments handled by Razorpay when implemented). GitHub repository access is restricted to authorised personnel only.

10. Changes to This Policy

We will update this page and change the "Last updated" date for any material changes. Continued use of the service constitutes acceptance.

11. Contact

Privacy questions: hello@verditnxtgen.com