Privacy policy

Overview

VerifID Forms ("we", "us", "our") is built by SARNYP. This policy covers the marketing site at verifidforms.com and the VerifID Forms application. It is written to be plain and specific rather than generic, because the most important fact about how we handle data is unusual: for the actual content of forms you create, we have designed the system so that we cannot read it. The sections below explain exactly what that does and does not cover.

What we collect

We collect two distinct categories of information, and they are handled very differently:

• Account and billing information — name, work email, company name, and billing details when you create an account, start a trial, or subscribe to a paid plan. We can read and act on this information directly, because we need it to operate your account, process payments, and provide support.
• Usage and device information — basic technical data such as browser type, approximate location derived from IP address (used, for example, to show pricing in your local currency), and pages visited on this marketing site. This is standard web analytics data, not the content of any form you create.

Your encrypted form data

When you create a form in VerifID Forms, a private key is generated in your browser. That key never leaves your device or gets transmitted to our servers. Responses submitted to your forms are encrypted on the submitter's device before transmission, using that key. What we store is encrypted ciphertext that we cannot decrypt — we do not hold the key, so we have no technical ability to read the content of your forms or the responses collected through them, including if compelled to.

This also means we cannot recover form data for you if a private key is lost. We consider this an acceptable tradeoff for genuine zero-knowledge protection, but you should understand it before relying on the product for data you cannot afford to lose access to.

Who we share data with

We use a small number of third-party service providers ("sub-processors") to operate VerifID Forms. Each only receives the category of data necessary for its function:

• Firebase Hosting (Google) — hosts and serves this marketing website and the VerifID Forms web application.
• Amazon Web Services (AWS) — hosts our database and backend application servers. Form responses stored here are the encrypted ciphertext described above, not readable plaintext.
• Cashfree — processes subscription payments. We do not store your full card or payment instrument details ourselves; Cashfree handles that as our payment processor.
• Mitr Analytics — provides pageview analytics for this marketing site. It does not use cookies or persistent browser identifiers; anonymous visitors are recognized only via a server-side hash of IP address and browser user-agent that rotates daily, on the basis of our legitimate interest in understanding site usage.

We do not sell personal data to third parties, and we do not monetize trial account data.

Data retention

We retain account information for as long as your account is active, and encrypted form data for as long as the associated form exists in your account. If you delete a form or your account, associated data is removed from active systems according to our standard deletion process.

Your rights

Depending on where you are located, you may have rights to access, correct, export, or request deletion of your personal data under applicable law (such as India's Digital Personal Data Protection Act, the EU's GDPR, or other regional data protection regulations). To exercise any of these rights, contact us using the details below.

Security

Form content is protected by client-side encryption as described above. Account and billing data is protected using standard industry security practices on our hosting and database infrastructure. For a deeper technical explanation of how form encryption works, see our security page.

Changes to this policy

We may update this policy from time to time as the product or our sub-processors change. Material changes will be reflected here.

Contact us

Questions about this policy or your data can be sent to support@sarnyp.com.