Privacy Policy

Short version: we collect the bare minimum to run your account and bill you, we never sell your data, we don't track you across the web, and the searches you run on VerifySOS are private to your account. The longer version is below.

1. Who we are

VerifySOS is operated by Phorbes Industries Inc., a U.S. company headquartered in Riverton, Utah. "We," "us," and "our" refer to that company. "You" means the person or organization using the service.

2. What we collect

Account information

When you create an account, we collect:

• Your email address (for sign-in, password recovery, billing receipts, and important service notifications)
• An encrypted password hash (we never store your plaintext password)
• Optionally: your display name and company name (you can leave these blank)
• Your IP address at sign-in and your last-login timestamp (for security)

Search and pull data

When you use the service, we keep:

• The companies, states, and search terms you've looked up
• The merged PDF packets we generated for you, until you delete them or your account
• Metadata about each pull (date, source count, whether you skipped any sources)

This data is private to your account. Other users do not see your history.

Payment information

Card details are handled entirely by Stripe, our payment processor. We never see, store, or process your card number, CVC, or expiration date. We store only a Stripe customer ID and your subscription status, which lets us gate access without ever touching card data.

What we don't collect

• No advertising cookies, no cross-site trackers, no Facebook/Google pixels, no Hotjar/FullStory-style session recordings.
• We don't fingerprint your browser or device.
• We do not sell or rent personal information to anyone, ever.

3. What we do with it

We use the data we collect strictly to:

• Run your account and authenticate you
• Process your searches and generate the merged PDFs you ask for
• Bill your subscription via Stripe
• Send you transactional emails (password resets, billing receipts, important service updates)
• Diagnose problems and improve the service (typically by reading logs of errors, not your search content)
• Comply with legal obligations (e.g. responding to lawful subpoenas)

4. Third parties we share with

VerifySOS uses these third-party services to operate. Each one receives the minimum data needed to do its job.

• Stripe — payment processing. Receives your email, name, address, and card details (which you give Stripe directly). Their privacy policy: stripe.com/privacy.
• Render — application hosting. Stores your account database, search history, and generated PDFs on encrypted persistent disks. Their privacy policy: render.com/privacy.
• Cloudflare — DNS resolution for verifysos.com. Their privacy policy: cloudflare.com/privacypolicy.
• Google Workspace — admin@verifysos.com email handling. Their terms: policies.google.com/privacy.
• Public-record sources — when you run a search, we hit Secretary of State portals, FMCSA SAFER, OFAC SDN, and similar public data sources to fetch the entity record. These services see the company name you searched but not your identity.

We do not share your account, search history, or personal information with marketing affiliates, data brokers, advertisers, or any party not listed above.

5. Cookies

We use a single session cookie to keep you signed in. That's it. No analytics cookies, no third-party cookies, no advertising cookies. Block it and you'll have to log in on every page load, but you'll still see the site.

6. How long we keep data

• Account data — kept while your account exists. Deleted within 30 days of account deletion (excluding any data we're legally required to retain, such as billing records for tax purposes).
• Search and pull history — kept until you delete it (from /history) or your account.
• Telemetry / error logs — kept for up to 90 days for debugging.
• Backups — encrypted database backups are kept for up to 30 days for disaster recovery.

7. Your rights

You have the right to:

• Access — request a copy of the data we have about you. Email admin@verifysos.com from the address on file and we'll send it within 30 days.
• Correct — update your account info from /account/settings, or email us if you can't.
• Delete — delete your account by emailing admin@verifysos.com from the address on file. We'll confirm and remove your data within 30 days.
• Export — request a JSON export of your pull history and account data.
• Object — opt out of receiving non-transactional emails (we don't currently send any).

If you're in California, the EU/UK, or another jurisdiction with data-protection laws, you have additional rights granted by those laws (CCPA, GDPR, etc.). Email us and we'll honor them.

8. Security

We take reasonable steps to protect your data: encrypted HTTPS in transit, encrypted disks at rest, password hashes (not plaintext), private database (not exposed to the public internet), and restricted admin access. No system is 100% secure, but we work to keep yours from being the cautionary tale.

If we ever discover a security incident affecting your data, we'll notify you by email within 72 hours of becoming aware of it, along with what we know and what we're doing about it.

9. Children's privacy

VerifySOS is a business tool for adults. We don't knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, email admin@verifysos.com and we'll delete it.

10. Public-record data

The data VerifySOS surfaces (Secretary of State entity records, USDOT registrations, OFAC sanctions list, UCC filings, contractor licenses) is, by definition, public information published by government agencies. We're a search and merge service — we don't collect, curate, or alter the underlying records, and we have no ability to remove information from the source government databases. If you want a public record corrected or removed, contact the agency that issued it.

11. Changes to this policy

We may update this Privacy Policy occasionally. If we make material changes (anything that meaningfully expands what we collect or who we share with), we'll notify you by email at least 30 days in advance and post the updated policy here. The "Last updated" date at the top reflects the most recent change.

12. Contact

Privacy questions, access/deletion requests, or anything else: admin@verifysos.com.

VerifySOS is operated by Phorbes Industries Inc., 13268 South Heritage Farm Cove, Riverton, UT 84065, United States.