Privacy
Privacy Policy
Last updated: 1 October 2026
This policy explains how VeriFlow handles personal data when you visit this website, apply to the paid user-testing programme, use a tester account, communicate with our team or request a payment. For these activities, VeriFlow decides why and how the data is used and acts as the data controller.
Information we collect
- Application details: your name, WhatsApp number, email address, country, date of birth, availability, referral code and how you heard about us.
- Account and testing records: account activity, tests accepted, answers, reports, screenshots you choose to submit, review decisions, support messages and a record of the steps completed.
- Payment details: the account-holder name and IBAN you enter in the secure account area, together with payment requests and transaction records.
- Technical and measurement data: IP address, browser and device information, security logs, pages viewed, a random visitor identifier and advertising or referral information attached to the link that brought you here.
Your date of birth is used to confirm that you are 18 or over. Do not send passwords, online-banking credentials, one-time security codes or identity documents through ordinary chat.
Why we use personal data
- To open and operate your tester account, show suitable tests, review completed work and provide support.
- To calculate balances, process valid withdrawal requests and keep required transaction records.
- To protect accounts, prevent duplicate or fabricated submissions, investigate errors and keep the service secure.
- To understand how people find and use the website, improve the application process and measure advertising when you have accepted advertising cookies.
- To meet legal, accounting and regulatory obligations and to establish or defend legal claims.
Our legal bases
We use personal data where it is necessary to take steps at your request and operate the tester programme, where we have a legitimate interest in running and securing the service, where the law requires records to be kept, and where you have given consent. Advertising cookies and the Meta pixel are used only with consent. You can withdraw that consent at any time without affecting your application or account.
Testing on partner platforms
A test may ask you to enter information directly into the platform being tested. That platform handles the information under its own privacy policy. VeriFlow does not receive passwords, banking logins or one-time security codes used on a partner platform. Before you accept a test, you can see which platform is involved and what the test requires.
Who receives personal data
Access inside VeriFlow is limited to authorised staff who need the information to manage applications, tests, support, security or payments. We also use service providers to run the programme, including website hosting, business email, anti-abuse checks, analytics and advertising services. These currently include Hetzner for hosting, Zoho for business email, Google reCAPTCHA for automated abuse prevention and Meta Platforms Ireland Limited for advertising measurement when you accept advertising cookies.
We may disclose information where the law requires it, to protect a person or the service, or in connection with a business reorganisation. We do not sell personal data.
Cookies and measurement
The site stores a random visitor identifier, attribution information and your cookie choice in your browser. We use this first-party measurement to understand visits and applications. It is not used to build an advertising profile.
If you accept advertising cookies, the Meta pixel loads and lets Meta measure results from Facebook and Instagram adverts. Meta may receive your IP address, pages opened here and the Meta click identifier (fbclid) attached to an advertising link. We store that identifier with an application to understand which advert led to it. Declining does not change access to the programme.
International transfers
Some service providers may process data outside Ireland or the European Economic Area. Where that happens, we require an appropriate transfer mechanism, such as an adequacy decision or approved standard contractual clauses, together with any additional safeguards required for the service.
How long we keep information
We keep application, account and testing records only for as long as they are needed to operate the programme, resolve questions, protect the service and meet legal obligations. The period depends on whether your account is active, whether a test or payment is still under review, and whether accounting or dispute records must be retained. Data that is no longer needed is deleted or anonymised. You can ask for deletion at any time, although some records may need to be retained where the law requires it or a current claim must be handled.
Security
We use access controls, encrypted connections, account authentication, logging and operational checks to protect personal data. No online service can promise absolute security, so contact us promptly if you believe your account or information has been exposed.
Your rights
Under data-protection law, you may have the right to access, correct or delete your personal data; restrict or object to its use; receive data you supplied in a portable format; and withdraw consent. You also have the right to complain to the Data Protection Commission.
To exercise a right or ask a privacy question, email info@veriflow.fit. We may need to verify that the request relates to you before acting on it.
Automated decisions and children
VeriFlow does not make decisions with legal or similarly significant effects about testers solely by automated means. The programme is for people aged 18 or over and is not directed at children.
Changes to this policy
We may update this policy when the programme, service providers or legal requirements change. The current version and its update date will remain available on this page.