Privacy policy

What we collect

Public registry fields (name, address signals, phone, website, Place ID, category) come from Type A classification sources. Owner accounts use Clerk (email). Gold payments use Stripe. Partner applications store company and work email. Identity AV audits store business email, domain, and score. We do not sell personal data.

Profile activity measurement

From 20 September 2026, AI Verified records daily aggregate activity for public business profiles. We may process technical request information such as IP address and User-Agent transiently at the Cloudflare edge to operate, secure, and measure profile activity. Raw IP addresses are not stored in the activity analytics tables. Daily unique visitor figures are estimated using a rotating pseudonymous digest that changes each UTC day; they are not a person-level or cross-device identifier. Aggregates are kept for up to 13 months for human and referral activity, and 90 days for machine-only daily rows. This is measurement of how a public identity is accessed, not advertising tracking across other sites, and not a record of leads or customers.

Profile actions

When you use a public action on a business profile — for example opening the listed website, tapping the public phone number, or opening the listed Google Maps / Business Profile link — AI Verified may record that the action was activated. We store an identity, action type, UTC date, and an opaque event id. We do not store the destination URL, the business phone number, email content, call content, or what you do after you leave AI Verified. Automated and crawler requests to action links are redirected when valid but are not counted as customer actions.

AI Verified may measure interactions with profile QR codes and aggregate those interactions as profile activity. Fetching the QR image does not count as a scan. Preview bots and automated requests to the QR destination are not counted as scans.

Why

To publish selective public records, run Gold subscriptions, attribute partner referrals, prevent abuse, and show owners exposure counts (views, not leads).

Processors

Cloudflare (hosting, D1, R2, logs). Clerk (auth). Stripe (payments). DataForSEO when we enrich maps fields. Gmail only if you connect the alerts mailbox for editorial ingest — that mailbox is ours, not yours.

Your rights

Access, correction, deletion of account-held personal data, and objection to processing that is not required to keep a public record accurate. Public Type A snapshots are publications; we will correct factual errors. Email info@aiverified.io. EU/UK: we treat GDPR/UK GDPR rights in good faith even when the business is US-operated.

Retention

Active passports stay while the registry is public. CRM outreach fields stay until you ask deletion or the contact is closed. Stripe keeps billing records under its policy. Audit rows can be deleted on request.

Cookies · Terms · Legal index