Personal Data Protection

Company Name

WHITE HAT

Legal Form

SASU

SIREN

102529773

SIRET Number

10252977300016

VAT Number

FR03102529773

Registered Office Address

10 RUE DE LA PAIX
75002 PARIS
France

Registration and Account Data

• Full name
• Email address
• Password (encrypted)
• Account creation date

Browsing Data

• IP Address
• Cloudflare Ray ID
• Browser type and operating system
• Pages visited and duration of visit

Service Data

• Documents uploaded for verification
• Document analysis results
• Verification history
• Payment information (via Stripe)
• Credit balance

Contact Data

• Name, email, and message via contact form
• Email correspondence

Your personal data is collected and processed for the following purposes:

• User account management: creation, authentication, profile management
• Service provision: document verification, AI analysis, report delivery
• Commercial management: invoicing, credit management, purchase history
• Customer support: technical assistance, responding to requests
• Service improvement: usage statistics, performance optimisation
• Security: fraud prevention, protection against abuse
• Legal obligations: data retention for regulatory compliance

• Performance of contract: for providing the document verification service
• Consent: for non-essential cookies, newsletters
• Legitimate interest: for service improvement, security
• Legal obligation: for retaining certain data

Your personal data may be shared with the following recipients:

• Authorised personnel: Verify My Document team as part of their duties
• Technical providers:
  • Website hosting provider
  • Cloudflare (CDN and security)
  • Stripe (payment processing)
  • Google Gemini / OpenAI ChatGPT (document analysis)
• Competent authorities: if legally or judicially required

• Account data: until account deletion + 1 year
• Uploaded documents: automatically deleted after analysis (trial version) or kept as per user choice
• Payment data: 10 years for accounting obligations
• Connection logs: 12 months maximum
• Contact data: 3 years after last contact

Some of our service providers may be located outside the European Union. In such cases, we ensure that appropriate safeguards are in place:

• European Commission adequacy decisions
• Standard contractual clauses approved by the European Commission
• Appropriate certifications and codes of conduct

In accordance with GDPR, you have the following rights:

Right of access

You can request access to the personal data we hold about you.

Right to rectification

You can request the correction of inaccurate or incomplete data.

Right to erasure

You can request the deletion of your personal data under certain conditions.

Right to restriction

You can request the restriction of the processing of your data.

Right to data portability

You can request the retrieval of your data in a structured format.

Right to object

You can object to the processing of your data for legitimate reasons.

Right to withdraw consent

You can withdraw your consent at any time for processing based on consent.

Verify My Document implements appropriate technical and organisational measures to protect your personal data against:

• Unauthorized access
• Accidental loss
• Destruction or alteration
• Unauthorized disclosure

Our measures include data encryption for sensitive information, strong authentication, access monitoring, regular backups, and staff training.

Our site uses cookies and other trackers. For more information on their use and managing your preferences, please see our cookie policy.

If you believe that the processing of your personal data infringes GDPR, you have the right to lodge a complaint with the relevant supervisory authority, such as the CNIL in France:

CNIL
3 Place de Fontenoy - TSA 80715
75334 PARIS CEDEX 07
Phone: 01 53 73 22 22
www.cnil.fr