This Privacy Policy explains how iWantIt (Pty) Ltd collects, uses, stores, and shares personal information in connection with vera.ink. We are committed to processing your personal information lawfully, fairly, and transparently.
01 / WHO WE ARE AND YOUR DATA CONTROLLER
iWantIt (Pty) Ltd (registration number 2026/315901/07), Sandton, Gauteng, South Africa, is the responsible party and data controller for personal information collected via vera.ink. Our Information Officer may be contacted at support@vera.ink.
The Information Officer (Simon Keeling) is registered with the Information Regulator of South Africa as required by POPIA Section 55. Regulator Registration Number: 2026-015714, registered 15 May 2026.
02 / SCOPE
This policy applies to all users of vera.ink — website visitors, free tier users, and paid subscribers — regardless of location.
03 / LEGAL BASES FOR PROCESSING
South Africa (POPIA): We process personal information where you have consented (s11(1)(a)), where processing is necessary to perform our contract with you (s11(1)(b)), where we have a legitimate interest not overridden by your interests (s11(1)(f)), or where required by law (s11(1)(c)).
European Union (GDPR): We rely on Article 6(1)(b) (contract performance), Article 6(1)(a) (consent where obtained), Article 6(1)(c) (legal obligation), and Article 6(1)(f) (legitimate interests).
United Kingdom (UK GDPR): We rely on Article 6(1)(b) (contract performance), Article 6(1)(a) (consent where obtained), Article 6(1)(c) (legal obligation), and Article 6(1)(f) (legitimate interests), as retained by the Data Protection Act 2018. We are monitoring implementation of the UK Data (Use and Access) Act 2025 as provisions take effect during 2026.
United States — California (CCPA / CPRA): We do not sell personal information. California residents have the right to know what personal information we collect, to request deletion, and to non-discrimination for exercising these rights. California residents also have the right to opt-out of the sale or sharing of their personal information, and to limit the use and disclosure of sensitive personal information.
04 / WHAT WE COLLECT
Account data: Email address provided when submitting a verification or creating an account.
Verification data: Documents and source material you submit for verification, verification results, findings reports, and corrected documents.
Subscription and billing data: Subscription tier, billing history, and Dodo Payments customer ID. Payment card details are never stored by us — processed solely by Dodo Payments.
Usage data: Verification history, modes selected, packs created, and activity within the platform.
Technical data: IP address, device type, browser type, and access logs collected automatically when you use the platform.
05 / HOW WE USE YOUR INFORMATION
We use your personal information to:
- Provide, operate, and deliver the verification service
- Process payments and manage your subscription
- Communicate with you about your account, verification results, and support
- Process your documents through AI systems to generate verification outputs
- Improve the service through aggregated, anonymised analysis
06 / DOCUMENT PROCESSING AND RETENTION
Documents and source material you submit are processed by AI systems (Anthropic PBC and Google LLC) operating under data processing agreements with us. We do not use your documents to train AI models.
Verification results, including your original document, source material, findings, and corrected document, are retained in your account history until you delete them or close your account. You may delete individual verifications at any time from your account.
We retain account data for as long as your account is active and for up to 2 years after closure for legal and dispute resolution purposes, unless a longer retention period is required by law.
07 / SOURCE PACKS
Source packs you create, including all pasted content and indexed embeddings, are stored in your account and accessible only to you. Source pack content is processed through embedding models (Google Gemini) to enable semantic search. We do not share your source pack content with other users or third parties beyond what is required to operate the service.
08 / WHO WE SHARE YOUR DATA WITH
We share personal data only with:
- Anthropic PBC — AI processing (Claude models) under a data processing agreement
- Google LLC — AI processing (Gemini models and embeddings) under a data processing agreement
- Supabase Inc — database and file storage infrastructure under a data processing agreement
- Resend Inc — transactional email delivery under a data processing agreement
- Dodo Payments — payment processing as merchant of record
We do not sell your personal information. We do not share your documents or source material with other users or for marketing purposes.
All data processing agreements comply with GDPR, UK GDPR, and POPIA Section 72 cross-border transfer requirements.
09 / YOUR RIGHTS
Depending on your jurisdiction, you may have the following rights:
- Access: request a copy of the personal information we hold about you
- Correction: request correction of inaccurate personal information
- Deletion: request deletion of your personal information
- Portability: request your personal information in a structured, machine-readable format
- Objection: object to processing based on legitimate interests
- Restriction: request restriction of processing in certain circumstances
- Withdrawal of consent: where processing is based on consent, withdraw that consent at any time
- Opt-out of Sale/Sharing (California): request to opt-out of the sale or sharing of your personal information
- Limit Use of Sensitive Personal Information (California): request to limit the use and disclosure of sensitive personal information
- Non-discrimination: you will not be discriminated against for exercising your privacy rights
We will respond to your requests within the timeframe required by applicable law: up to one month under GDPR, 45 days under CCPA/CPRA, or 20 business days under POPIA.
You have the right to lodge a complaint with a supervisory authority. South African users may contact the Information Regulator at inforeg.org.za. EU users may contact their national supervisory authority under GDPR Article 77. UK users may contact the ICO at ico.org.uk. California residents may contact the California Privacy Protection Agency at cppa.ca.gov.
To exercise any of these rights, contact support@vera.ink.
10 / COOKIES AND TRACKING
vera.ink uses minimal cookies required for session management and authentication. We do not use advertising or tracking cookies. We do not use third-party analytics platforms that process personal data without your consent.
11 / SECURITY
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. All data is encrypted in transit and at rest. Access to personal data is restricted to personnel who need it to operate the service.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware, and will notify affected users without undue delay where required by applicable law.
12 / INTERNATIONAL TRANSFERS
Your personal data may be transferred to and processed in countries outside South Africa, including the United States (Anthropic, Google, Supabase, Resend, Dodo Payments) and the European Economic Area. We ensure such transfers are subject to appropriate safeguards, including standard contractual clauses where required, in compliance with GDPR Article 46, UK GDPR Article 46, and POPIA Section 72.
13 / CHILDREN
vera.ink is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted personal information to us, contact support@vera.ink and we will delete it promptly.
14 / CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify you of material changes by email at least 30 days before they take effect. The current version is always available at vera.ink/privacy.
15 / CONTACT
Data Controller: iWantIt (Pty) Ltd Information Officer: support@vera.ink Address: Sandton, Gauteng, South Africa For data protection queries: support@vera.ink