Privacy Policy
Effective date: March 12, 2026
1. Data Controller
The data controller responsible for your personal information is:
- Veraz Dating Corporation — a Delaware corporation
- Contact: privacy@verazdating.com
- Data Protection Contact: dpo@verazdating.com
For users in Colombia, Veraz Dating Corporation is the Responsable del Tratamiento of your personal data under Ley 1581 de 2012.
2. Information We Collect
When you use Veraz Dating, we collect the following types of information:
- Account information: Name, email address, phone number, date of birth, and gender.
- Profile information: Photos, bio, interests, dating preferences, and prompts.
- Verification data: Government-issued ID scans (processed by our verification partner Veriff, which deletes verification data within 30 days), selfie photos for photo verification.
- Location data: Approximate location (city-level) to show nearby matches. Precise location is collected only when you explicitly activate Date Check-In or SOS features. Your exact location is never shared with other users.
- Usage data: How you interact with the App, including likes, matches, messages, safety features used, and in-app actions.
- Device information: Device type, operating system, app version, IP address, and push notification tokens.
- Payment information: Transaction records are processed by Stripe. We do not store your full credit card number — only a tokenized reference and transaction metadata.
- Communications: Messages sent between matched users, and communications with our support team.
- Consent records: Timestamps and metadata of your consent to these terms, including IP address and user agent at the time of registration.
3. Legal Basis for Processing
We process your personal data based on the following legal grounds (as required by GDPR and Colombian Ley 1581 de 2012):
| Purpose | Legal Basis |
|---|---|
| Account creation, profile, matching | Performance of contract (you agree to our Terms to use the App) |
| Identity and photo verification | Your explicit consent |
| Trust score calculation | Legitimate interest (user safety) |
| Fraud, scam, and abuse detection | Legitimate interest (platform safety); legal obligation |
| Safety features (Date Check-In, SOS) | Your explicit consent; vital interest (emergency situations) |
| Push notifications (matches, messages) | Performance of contract |
| Push notifications (promotional) | Your consent (opt-out available) |
| Payment processing | Performance of contract |
| Analytics and service improvement | Legitimate interest (improving the service) |
| Legal compliance (tax records, safety reports) | Legal obligation |
4. How We Use Your Information
We use your information to:
- Create and manage your account and profile.
- Verify your identity and prevent fake profiles.
- Calculate trust scores based on verification level and community feedback.
- Show you potential matches in your area.
- Enable messaging and video calls between matches.
- Operate safety features (Date Check-In, SOS, reports).
- Detect and prevent fraud, scams, and abuse using AI-powered moderation.
- Send push notifications about matches, messages, and safety alerts.
- Process payments and manage subscriptions.
- Respond to support requests and resolve disputes.
- Improve our services and develop new features.
- Comply with legal obligations and enforce our Terms.
5. How We Share Your Information
We do not sell your personal information. We may share data with:
- Other users: Your profile information (first name, photos, bio, age, trust score) is visible to potential matches. Your exact location, email, phone number, and government ID are never shared with other users.
- Service providers: We use trusted third-party services to operate the App. Each provider only receives the minimum data necessary for their function:
| Provider | Purpose | Data Shared | Retention |
|---|---|---|---|
| Veriff | Identity verification | ID scan, selfie | Deleted within 30 days |
| AWS | Cloud hosting & storage | All app data | Per our retention policy |
| Twilio | SMS/WhatsApp OTP | Phone number | 30 days |
| Agora | Video calls | Audio/video streams (not recorded), device info, network quality metrics, IP address during calls | Call metadata retained per Agora's policy; streams not stored |
| Stripe | Payment processing | Payment token, transaction data | Per Stripe's policy |
| Resend | Transactional email | Email address | 30 days |
- Law enforcement: When required by law, court order, or to protect user safety. We will notify you of such requests unless legally prohibited from doing so.
- Emergency contacts: Your live location may be shared with your designated emergency contact only when you explicitly activate Date Check-In or SOS features.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you before your data becomes subject to a different privacy policy.
6. International Data Transfers
Veraz Dating Corporation is based in the United States. If you are located outside the United States (including Colombia), your personal data will be transferred to and processed in the United States, where our servers are hosted (AWS, US regions).
For users in the EU/EEA: We rely on Standard Contractual Clauses (SCCs) as approved by the European Commission to safeguard your data during international transfers.
For users in Colombia: By accepting this Privacy Policy, you provide your express, informed authorization (autorización) for the international transfer of your personal data to the United States for the purposes described in this policy, in accordance with Article 26 of Ley 1581 de 2012 and Decreto 1377 de 2013. The United States is not currently on Colombia's list of countries with adequate data protection; your explicit consent serves as the legal basis for this transfer.
7. Data Retention
We retain your data for as long as your account is active. Specific retention periods:
| Data Type | Retention Period |
|---|---|
| Profile data (photos, bio, preferences) | Deleted within 30 days of account deletion |
| Messages | Deleted within 30 days of account deletion |
| Verification data (on our servers) | Deleted within 30 days of account deletion |
| Verification data (Veriff) | Deleted by Veriff within 30 days of verification |
| Transaction records | 6 years (legal/tax obligation) |
| Safety reports & moderation records | Up to 3 years |
| Banned account records | Up to 10 years (to prevent re-registration) |
| Consent records | Duration of account + 6 years |
| GDPR/Habeas Data export files | 7 days after generation |
8. Your Rights
8.1 All Users
Regardless of your location, you have the right to:
- Access: Request a copy of all data we hold about you.
- Rectification: Update or correct your information.
- Erasure: Delete your account and all associated data.
- Portability: Export your data in a machine-readable format (JSON).
To exercise any of these rights, go to Settings → Privacy & Security in the App, or email privacy@verazdating.com.
8.2 Additional Rights — GDPR (EU/EEA/UK)
If you reside in the EU, EEA, or UK, you additionally have the right to:
- Restriction: Limit how we process your data.
- Objection: Object to processing based on legitimate interest.
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
- Complaint: Lodge a complaint with your local data protection authority.
8.3 Additional Rights — CCPA (California)
If you are a California resident, you have the right to:
- Know: Request disclosure of the categories and specific pieces of personal information we have collected.
- Delete: Request deletion of your personal information.
- Non-discrimination: We will not discriminate against you for exercising your CCPA rights.
- Opt out of sale: We do not sell your personal information.
8.4 Additional Rights — Ley 1581 de 2012 (Colombia)
If you reside in Colombia, you have the following rights under the Ley de Protección de Datos Personales (Habeas Data):
- Conocer (Know): Access your personal data held by Veraz Dating at any time and without charge.
- Actualizar (Update): Request updates to incomplete or inaccurate data.
- Rectificar (Rectify): Correct information that is inaccurate or incomplete.
- Suprimir (Delete): Request deletion of your data when it is no longer necessary for the purposes for which it was collected, or when you revoke your consent.
- Revocar (Revoke): Revoke your authorization for data processing at any time.
- Presentar quejas (File complaints): File complaints with the Superintendencia de Industria y Comercio (SIC) regarding any violation of Ley 1581 de 2012.
To exercise these rights, contact us at privacy@verazdating.com or through the App. We will respond within fifteen (15) business days, as required by Colombian law.
Autorización: By creating an account on Veraz Dating, you provide your free, prior, express, and informed authorization (autorización previa, expresa e informada) for the collection and processing of your personal data for the purposes described in this policy, in accordance with Article 9 of Ley 1581 de 2012.
9. Security
We protect your data with:
- HTTPS/TLS encryption for all API communications and data in transit.
- Encryption at rest for sensitive data stored in our databases.
- EXIF/GPS metadata stripping from all uploaded photos.
- Encrypted storage for sensitive credentials (TOTP secrets, API keys).
- AI-powered scam and fraud detection.
- Regular security audits.
While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
10. Cookies & Tracking
The Veraz Dating mobile app does not use cookies. Our website (verazdating.app) may use:
- Essential cookies: Required for website functionality (cannot be disabled).
- Analytics cookies: Help us understand how visitors use our website (can be disabled via your browser settings).
We do not use third-party advertising trackers or sell data to advertisers.
11. Age Restriction
Veraz Dating is not intended for anyone under 20 years of age. We do not knowingly collect personal information from anyone under 20. If we learn that we have collected data from a person under 20, we will promptly delete it. If you believe a user is under 20, please report them through the App or contact safety@verazdating.com.
12. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will:
- Notify you through the App with an in-app notice at least thirty (30) days before the changes take effect.
- Update the "Effective date" at the top of this page.
- For material changes to data processing, request your renewed consent before continuing to process your data under the new policy.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
- Privacy inquiries: privacy@verazdating.com
- Data Protection Contact: dpo@verazdating.com
- General support: support@verazdating.com
- Safety concerns: safety@verazdating.com
For users in Colombia: You may also file a complaint with the Superintendencia de Industria y Comercio (SIC) at www.sic.gov.co.