Privacy Policy

Last updated: May 31, 2026. This Privacy Policy explains how Verifow Technologies collects, uses, discloses, and safeguards your information.

Verifow Technologies ("Verifow," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy applies to information we collect when you use our website (verifow.com), our AML compliance platform, APIs, and related services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide to Us

We collect information you provide directly to us, including:

  • Account Information: When you register for an account, we collect your name, email address, phone number, company name, job title, and other contact details.
  • Payment Information: If you purchase our Services, we collect billing details. Payment processing is handled by secure third-party providers; we do not store full credit card numbers.
  • Communications: When you contact us, we collect the contents of your messages, emails, and any attachments.
  • KYC/KYB Data: As part of our compliance services, our clients may submit customer data including names, addresses, identification numbers (BVN, NIN), corporate registration details, and beneficial ownership information for screening purposes.

1.2 Information We Collect Automatically

When you access or use our Services, we automatically collect:

  • Log Data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps.
  • Usage Data: Features used, API calls made, dashboard interactions, and performance metrics.
  • Device Information: Hardware model, unique device identifiers, and network information.
  • Cookies and Similar Technologies: We use cookies to maintain sessions, remember preferences, and analyze usage. See our Cookie Policy below.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and improve our Services
  • To process transactions and send related information
  • To screen transactions and customers against sanctions, PEP, and adverse media lists as requested by our clients
  • To generate regulatory reports (CTR, SAR, FTR) in compliance with CBN and other regulatory requirements
  • To communicate with you about your account, updates, and support requests
  • To monitor and analyze trends, usage, and activities in connection with our Services
  • To detect, prevent, and address fraud, security breaches, and other prohibited activities
  • To comply with legal obligations and enforce our agreements

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

  • With Your Consent: We may share information when you direct us to do so.
  • Service Providers: We engage trusted third-party vendors for hosting, payment processing, analytics, customer support, and email delivery. These providers are contractually obligated to protect your data.
  • Regulatory Authorities: We may disclose information to comply with legal obligations, respond to lawful requests from regulators (including the CBN, EFCC, and NFIU), and protect our rights.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
  • Aggregated Data: We may share aggregated, de-identified data that cannot reasonably be used to identify you.

4. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. For compliance-related data, we maintain records in accordance with CBN AML/CFT regulations, typically for a minimum of five (5) years from the date of the transaction or business relationship termination.

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS 1.3) and at rest (AES-256)
  • Role-based access controls and multi-factor authentication
  • Regular security audits and penetration testing
  • SOC 2 Type II certified data centers
  • Immutable audit trails for all compliance screening activities

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request that we update or correct inaccurate information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Portability: Request a copy of your data in a structured, machine-readable format.
  • Objection: Object to certain processing activities, such as direct marketing.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, please contact us at privacy@verifow.com. We will respond within 30 days.

7. International Data Transfers

Verifow is headquartered in Nigeria. If you access our Services from outside Nigeria, please be aware that your information may be transferred to, stored, and processed in Nigeria or other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where required.

8. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. You can set your browser to refuse cookies or alert you when cookies are being sent. Note that some parts of our Services may not function properly without cookies.

10. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised "Last updated" date. Your continued use of the Services after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: