Privacy Policy

01Who we are

This website and the Demand Verity service ("DV", "we", "us", "our") are operated by Demand Verity. For anything about privacy, email us at info@demandverity.com.

In this policy, "personal data" and "personal information" mean any information that identifies, or can reasonably be linked to, an individual.

02What this policy covers

We handle personal data in two different roles:

• As a controller. For the following, we decide how personal data is used, and this policy explains that processing in full:
  • this website
  • our Contact form and newsletter
  • our customers' account and billing contacts
  • people who email us
• As a processor. When a business (our "customer") installs DV on its website, the customer is the controller and decides how its visitors' data is used. We process that data on the customer's behalf, only to provide the service, under a Data Processing Agreement. Section 6 explains what the service processes. If you visit a customer's website, that customer's privacy notice also applies to you.

This policy does not cover third-party websites or services linked from our website, such as our social media pages. They have their own privacy policies.

03Information we collect

Information you give us

• Contact and demo requests. When you use the Contact form, we collect:
  • your name, company, work email and role
  • the monthly form submission range you select
  • whether you want a demo or have a general question
  • anything you write in the message.
• Newsletter. Your work email address and the date you subscribed.
• Account information. When you or your company get a DV account, we collect:
  • your name, work email, company name and role
  • your login details, including multi-factor authentication settings
  • the websites you connect to DV.
• Billing information. Once paid plans start, we collect your billing contact and address, plan, and invoice history. Our payment provider handles payment card details. We do not store them.
• Communications. The content of emails and support requests you send us, and our replies.

Information collected automatically on this website

• Server logs. To deliver and secure the website, our hosting provider receives:
  • your IP address, browser type and device type
  • the pages requested and the referring page
  • the time of each request.
• Cost calculator. The numbers you enter in the cost calculator are calculated in your browser and are not sent to us.

Information from others

• Results of email, phone and IP address checks, received from verification providers when DV's own checks cannot decide. See section 6.
• If a colleague adds you to a customer account, the details they provide about you.

We do not ask for sensitive information by email, and we ask you not to send it. That includes health data, government ID numbers and payment card numbers.

04How we use information

• To answer your Contact form request, arrange demos and respond to questions.
• To send the research newsletter to people who subscribed.
• To create and manage accounts and provide the DV service, including the dashboard, verdicts, notes and syncs that customers ask for.
• To provide support.
• To keep the website and the service secure. This includes detecting abuse, fraud and unauthorized access.
• To understand how the service is used and to improve it, using aggregated or de-identified information wherever possible.
• To send service notices, such as security alerts, usage warnings and changes to our terms.
• To bill customers and keep business records once paid plans start.
• To comply with the law, enforce our terms and defend legal claims.

We do not sell personal data. We do not share it for cross-context behavioral advertising. We do not use our customers' visitor data to build advertising profiles or to train models for anyone else's benefit.

05Legal bases (EEA and UK)

Where we rely on legitimate interests, we have weighed them against your rights and expectations. You can object at any time (see section 12).

06The DV service and our customers' visitors

When a customer installs the DV script, DV processes the following about that customer's website visitors. It uses this information to give each form submission a verdict of ACT, DELAY or FILTER.

• Journey events:
  • pages viewed
  • referrer and traffic source, including when a visit comes from an AI assistant, if the browser passes that information
  • timestamps
  • return visits.
• How a form is filled: timing, edits and whether text was pasted. Before a form is submitted, DV records this behavior only, never what is typed.
• Submitted form fields, once the visitor submits the form.
• Technical data: IP address and general network information, such as whether a connection comes from a data center. An IP check may return a country-level location signal. DV does not record city-level or GPS location.
• Verification results for the email address, phone number, IP address and company behind a submission.

What DV never collects or does

• DV never collects passwords, payment card details, government ID numbers, health data or precise geolocation.
• DV does not use device fingerprinting.
• DV honors Global Privacy Control and Do Not Track signals, and never scores anyone worse for limiting tracking.
• DV does not see what someone asked an AI assistant.

What the customer receives: Each submission reaches the customer's CRM, autoresponder or spreadsheet, with the verdict and an operational note added to the contact record.

If you visited a website that uses DV: to exercise your rights, contact that website's owner. We will help them respond. If you contact us directly, we will pass your request to them.

07Automated decisions

DV produces its verdicts automatically by weighing several independent signals.

• No single signal decides the verdict.
• How a form was written, including with AI, is never counted against anyone on its own.
• A verdict is a recommendation to the customer about where to spend sales time. It does not decide anyone's legal rights, access to credit, employment or similar matters.
• Customers decide what their systems do with each verdict.
• DV's original verdict is never overwritten.
• FILTERed submissions are kept, not deleted.

08Sharing and disclosure

We share personal data only in these situations:

• Service providers. Companies that help us run DV and this website, under contracts that require them to protect the data. They may use it only to provide their service to us. They include:

  • verification providers for IP address, email and phone checks
  • hosting providers
  • email hosting and delivery providers.

  The providers that process data for the DV service are named on our Sub-processors page.

• Our customers. Visitor data processed through DV is made available to the customer whose website it came from.

• Business transfers. If we are involved in a merger, acquisition, financing or sale of assets, personal data may transfer to the new owner. The new owner must keep protecting it as this policy describes.
• Legal reasons. When the law requires it, or when needed to protect the rights, property or safety of our users, the public or us.
• With your permission. In any other case, only if you agree.

09International transfers

Demand Verity and some of our providers operate in the United States or in other countries outside the UK and the European Economic Area. When personal data is transferred out of these areas, we use a lawful transfer mechanism. Examples:

• the European Commission's Standard Contractual Clauses
• the UK International Data Transfer Addendum
• a provider's certification under the EU-U.S. Data Privacy Framework, where available.

You can ask us for more information about these safeguards.

10Retention

We may keep information longer if the law requires it or to resolve a dispute. We may also keep aggregated information that no longer identifies anyone.

11Security

We use technical and organizational measures appropriate to the risk:

• each customer's data is kept separate from other customers' data
• role-based access, limited to people who need it
• multi-factor authentication required on every account
• protected credentials
• logging and audit trails
• regular review of our providers.

Records in DV are never silently deleted. Every important action is logged, and DV's original verdict is never overwritten.

No system is perfectly secure. If a personal data breach affects you, we will notify you and the authorities as the law requires.

12Your rights (EEA and UK)

If you are in the European Economic Area or the United Kingdom, you have the right to:

• access the personal data we hold about you and get a copy
• correct data that is inaccurate or incomplete
• have your data deleted
• restrict how we use your data
• receive your data in a portable format
• object to processing based on legitimate interests, and to direct marketing at any time
• withdraw consent at any time, without affecting processing that already happened
• complain to your local data protection authority.

How to use these rights

• Email info@demandverity.com.
• We will reply within one month, and may ask you to confirm your identity first.
• We will not charge you, unless a request is clearly unfounded or excessive.
• If your data came to us through a customer's website, we will forward your request to that customer.

13Your rights (United States)

Depending on your state of residence, you may have the right to:

• know what personal information we collect and how we use it
• access it
• correct it
• delete it
• get a copy.

These states include California, Virginia, Colorado, Connecticut and others with comprehensive privacy laws. You also have the right not to be discriminated against for using these rights.

• Categories we collect:
  • identifiers, such as name, email and IP address
  • commercial information, such as plan and billing history once paid plans start
  • internet activity, such as pages viewed and form-filling behavior
  • professional information, such as company and role.
• Sale and sharing: we do not sell personal information and do not share it for cross-context behavioral advertising. We do not knowingly process the personal information of anyone under 16.
• Sensitive information: we do not collect sensitive personal information for the purpose of inferring characteristics about you.
• Opt-out signals: we honor Global Privacy Control signals.

How to make a request

• You or an authorized agent can email info@demandverity.com.
• We will verify the request before acting on it, and respond within the time the law allows.
• If we decline a request, you may appeal by replying to our decision.

14Marketing emails

We send the research newsletter only to people who subscribed. Every email includes a way to unsubscribe, and you can also email us to stop.

Service notices about your account, such as security or billing messages, are not marketing. They will still be sent while you have an account.

15Children

DV is a business service and is not directed at anyone under 16. We do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

16Changes to this policy

We may update this policy as DV develops or the law changes. When we do, we will update the date at the top. Before any significant change takes effect, we will email customers and newsletter subscribers about it.

17Contact

Demand Verity · info@demandverity.com