Privacy Policy

Last updated Septemper 1, 2026

This Privacy Policy (the “Policy”) describes how Aura Health LLC, a limited liability company incorporated under the laws of the State of Wyoming, with its registered address at 30 N Gould St Ste R, Sheridan, Wyoming 82801, United States of America (the “Platform Operator”, “We”, “Our”, or “Us”), collects, obtains, uses, stores, discloses, shares, retains, and otherwise processes personal information in connection with the website available at www.veritycheck.com (the “Website”), the VerityCheck software platform and any related applications or interfaces (the “Platform”), and all related reverse lookup, search, data aggregation, report generation, subscription, and other features, products, and services made available through the Website or the Platform (collectively, the “Services”).

The Services enable users (“You” or “Users”) to submit supported information, identifiers, images, or other search inputs (“Search Inputs”) to conduct reverse lookups and related searches and generate results, reports, matches, indicators, and other information (“Reports”). Depending on the features available, Search Inputs may include telephone numbers, email addresses, names or other identifying information, images, vehicle identification numbers (“VINs”), and other supported data or content.

In providing the Services, We may process information provided directly by You, information generated through Your use of the Services, information concerning persons or other subjects identified or potentially identified through Search Inputs (“Search Subjects”), and information obtained from public records, open-web sources, third-party websites and platforms, licensed data providers, databases, APIs, and other lawful sources (“Third-Party Sources”).

Certain payment processing, recurring billing, payment recovery, fraud-prevention, and related payment activities may be performed or facilitated by affiliated or authorized payment processing entities (“Payment Processing Entities”) and other authorized payment service providers. Such parties may process transaction-related information, billing identifiers, tokenized payment credentials, payment-status information, fraud-prevention information, and related data. Full payment-card details may be collected and processed directly by authorized third-party payment providers and are not necessarily received or stored by the Platform Operator.

Your use of the Services is also governed by Our Terms and Conditions (the “Terms”). Capitalized terms not otherwise defined in this Policy have the meanings given to them in the Terms.

We process personal information in accordance with applicable privacy and data protection laws, including, where applicable, the GDPR, UK GDPR, the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”), and other applicable U.S. state privacy laws.

1. Personal Information We Collect

Personal Information You Provide to Us

1.1. “Personal information” includes “personal data” and similar terms under applicable privacy laws and generally means information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable individual.

1.2. Depending on how You interact with the Services, We may collect information that You provide directly to Us, including:

1.2.1. Account and contact information, such as Your name, email address, Account identifiers, authentication information, and other information used to create, maintain, or secure Your Account;

1.2.2. Search Inputs, including telephone numbers, email addresses, names, images, VINs, and other supported information or identifiers submitted through the Services;

1.2.3. payment and transaction information, including billing information, transaction identifiers, payment status, Subscription information, refunds, cancellations, chargebacks, and payment-recovery information. Full payment-card details may be processed directly by authorized payment providers;

1.2.4. communications and support information that You provide when contacting Us, submitting a privacy request, reporting a problem, or otherwise communicating with Us; and

1.2.5. other information that You voluntarily provide through the Services.

Search Subjects and Information Obtained from Third-Party Sources

1.3. Reports may contain personal information relating to Search Subjects obtained or derived from Search Inputs and Third-Party Sources. Search Subjects may include individuals who are not Users and who have no Account or direct relationship with Us.

1.4. Depending on the Search Input, available functionality, and Third-Party Sources, such information may include names and aliases, telephone numbers, email addresses, addresses or general location information, online profiles and usernames, publicly available images, links or associated accounts, public-record information, vehicle-related information, and other information lawfully available through relevant sources.

1.5. The availability, accuracy, completeness, and currency of information concerning a Search Subject may vary depending on the relevant Third-Party Sources. Information may be incomplete, outdated, duplicated, incorrectly associated with an individual, or otherwise inaccurate.

1.6. The fact that information is publicly available or included in a Report does not mean that it may lawfully be used for any purpose. Users remain responsible for complying with applicable law and the Terms when submitting Search Inputs or using Reports.

Reverse Image Search and Uploaded Images

1.7. If You use reverse image search or similar functionality, We may process the image You submit and related technical information as reasonably necessary to provide the requested Service. This may include transmitting, hosting, reproducing, cropping, resizing, converting, hashing, analyzing, comparing, or creating temporary derivative files from the image.

1.8. Images submitted solely as Search Inputs are not treated as publicly submitted user content merely because they are uploaded to the Services. Unless separately disclosed and supported by an appropriate legal basis, We do not use such images for advertising or promotional purposes or to train general-purpose artificial intelligence models.

1.9. We do not intentionally create or maintain a proprietary database of biometric identifiers or biometric templates from images submitted solely for reverse image lookup. Depending on the technology used to provide a particular image-search feature, the processing performed by Us or an authorized service provider may involve technical analysis or comparison of visual characteristics of an image. Where such processing constitutes biometric information, biometric data, sensitive personal information, or special-category personal data under applicable law, We will process such information only where an appropriate legal basis exists and will obtain consent or implement other safeguards where specifically required by applicable law.

1.10. Except where separately disclosed and permitted by applicable law, We do not use the substantive contents of Search Inputs, uploaded images, or Reports to train general-purpose artificial intelligence or machine-learning models.

1.11. You are responsible for ensuring that You have any right, authority, permission, consent, or other lawful basis required to upload and use an image through the Services. Additional restrictions concerning Search Inputs and uploaded images are set out in the Terms.

Information Collected Automatically

1.12. When You access or use the Services, We and Our authorized service providers may automatically collect technical, device, usage, security, and interaction information, including device and browser information, operating system, language settings, IP address and approximate location derived from it, online or device identifiers, access and session information, pages and features used, searches initiated, referral and navigation information, authentication events, error and diagnostic data, security and fraud signals, and transaction-related technical information.

1.13. We may also collect information through cookies, pixels, SDKs, local storage, and similar technologies, as further described in Section 4 and any applicable Cookie Policy.

Reports and Cached Reports

1.14. Reports may contain information derived from Search Inputs and Third-Party Sources, including personal information relating to Search Subjects.

1.15. Where Reports History or similar functionality is available, We may temporarily store Reports generated at Your request and associate them with Your Account (“Cached Reports”) so that You may re-access previously generated Reports. Cached Reports are not intended to be publicly searchable, indexed for public discovery, or generally available to other Users solely because a Report was previously generated. Applicable retention periods are described in Section 6.

Information We Receive from Other Sources

1.16. We may receive personal information from authorized service providers and other third parties involved in providing or supporting the Services, including payment and billing providers, fraud-prevention and security providers, hosting and infrastructure providers, analytics and communications providers, and search, lookup, data, or information providers.

1.17. We may combine information received from these sources with other information described in this Policy where reasonably necessary to provide, operate, secure, administer, and improve the Services, process payments, prevent fraud or abuse, comply with legal obligations, or establish, exercise, or defend legal claims.

2. How We Use Your Personal Information

2.1. We process personal information only where reasonably necessary for the purposes described in this Policy and as otherwise permitted or required by applicable law.

2.2. Depending on the relevant information and circumstances, We may process personal information for the following purposes:

2.2.1. to provide, operate, administer, maintain, and support the Services, including creating and managing Accounts, processing Search Inputs, performing searches and lookups, retrieving information from Third-Party Sources, generating and providing Reports, and maintaining available Reports History functionality;

2.2.2. to process and administer Trial Memberships, Subscriptions, payments, billing, refunds, cancellations, payment recovery, chargebacks, and other transaction-related activities;

2.2.3. to authenticate Users, maintain the security and integrity of the Services, detect and prevent fraud, unauthorized access, abuse, automated or prohibited use, and investigate suspected violations of the Terms or applicable law;

2.2.4. to provide customer support, respond to communications, administer privacy requests and Opt-Out Requests, and maintain limited suppression records where reasonably necessary to honor valid suppression requests;

2.2.5. to understand how the Services are used, diagnose technical issues, measure performance, conduct internal analytics and research, and improve the functionality, reliability, usability, and security of the Services;

2.2.6. to send transactional, administrative, billing, security, support, and other service-related communications and, where permitted by applicable law, marketing or promotional communications;

2.2.7. to comply with applicable legal, regulatory, tax, accounting, court, law-enforcement, payment-network, and other binding requirements; enforce the Terms; protect Our rights, property, systems, Users, Search Subjects, and third parties; and establish, exercise, or defend legal claims;

2.2.8. to operate and manage Our business, including in connection with an actual or proposed financing, investment, merger, acquisition, reorganization, sale, transfer, insolvency, or similar corporate transaction; and

2.2.9. for another purpose disclosed to You at the time of collection, with Your consent where required, or as otherwise permitted by applicable law.

Legal Bases for Processing

2.3. Where the GDPR, UK GDPR, or another applicable law requires a legal basis for processing personal information, We rely on one or more of the following legal bases, depending on the relevant processing activity:

2.3.1. We process personal information where necessary to enter into or perform a contract with You, including to administer Your Account, process Search Inputs, provide requested searches and Reports, administer Trial Memberships and Subscriptions, process payments, and provide customer support;

2.3.2. We may process personal information where necessary for Our legitimate interests or those of a third party, provided those interests are not overridden by the rights and interests of the relevant individual. Such interests may include operating, securing, maintaining, and improving the Services; preventing fraud and abuse; administering payments and disputes; protecting Our business, systems, Users, and third parties; and providing search and information-retrieval functionality using information lawfully available from Third-Party Sources;

2.3.3. We process personal information where necessary to comply with applicable legal, regulatory, tax, accounting, consumer-protection, court, law-enforcement, payment, or other legally binding obligations;

2.3.4. We rely on consent where required by applicable law, including for certain marketing activities, cookies or similar technologies, or processing of sensitive or biometric personal information where consent is the applicable required legal basis. Where processing is based on consent, You may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal; and

2.3.5. We may process personal information where necessary to establish, exercise, or defend legal claims or where another legal basis is available under applicable law. Processing of Information Concerning Search Subjects

2.4. Because the Services provide reverse lookup, search, and information-retrieval functionality, We may process personal information concerning Search Subjects who are not Users and who have not provided the information directly to Us.

2.5. Where a legal basis is required for processing personal information concerning Search Subjects, We may rely on Our legitimate interests or those of a third party, where applicable, in providing lawful, user-initiated search and information-retrieval functionality, retrieving and organizing information lawfully available from Third-Party Sources, preventing fraud and abuse, maintaining the security and integrity of the Services, and pursuing other legitimate purposes described in this Policy, provided that such interests are not overridden by the rights, freedoms, or interests of the relevant individual.

2.6. Where We rely on legitimate interests in relation to Search Subject information, We assess the relevant processing and consider factors that may include the nature, source, sensitivity, and public availability of the information; the context in which the information was originally made available; the purpose, scope, and manner of the processing; the reasonable expectations of the individual; the potential impact on the individual; whether the processing is necessary and proportionate to the purpose pursued; and the safeguards available through the Services, including applicable access restrictions, use restrictions, retention limitations, privacy rights, and suppression mechanisms.

2.6.1. The Services are designed primarily to respond to searches initiated by Users and to retrieve, aggregate, organize, match, and present information relevant to those searches. Except where separately disclosed and supported by an appropriate legal basis, We do not process Search Subject information for the purpose of making independent determinations about a person’s trustworthiness, character, creditworthiness, eligibility, employment suitability, insurance risk, or other similarly significant personal characteristics, and We do not use such information to make solely automated decisions producing legal or similarly significant effects concerning a Search Subject.

2.7. The fact that personal information is publicly accessible does not, by itself, remove applicable privacy or data-protection requirements or establish that the information may be processed for any purpose.

2.8. Users are separately responsible for ensuring that their submission of Search Inputs and their access, use, disclosure, or other processing of Reports complies with applicable law and the Terms. A User's submission of a Search Input does not determine or replace the legal basis on which We process personal information as Platform Operator.

Sensitive and Biometric Information

2.9. Where personal information processed through the Services qualifies as sensitive, biometric, special-category, or similarly protected information under applicable law, We will process it only where an appropriate legal basis exists and will obtain specific consent where required by applicable law.

2.10. Unless separately disclosed and permitted by applicable law, We do not use personal information processed through the Services to make solely automated decisions that produce legal or similarly significant effects concerning a Search Subject, and the Services are not intended to be used by Users to make employment, housing, credit, insurance, or other regulated eligibility decisions prohibited by the Terms.

2.10.1. Any automated match, similarity result, association, indicator, score, ranking, or other automated output made available through the Services is intended to assist with information retrieval, organization, security, fraud prevention, or presentation of potentially relevant information, as applicable. Unless expressly stated otherwise, such output does not constitute a determination by Us of a Search Subject’s identity, character, trustworthiness, conduct, eligibility, creditworthiness, or legal status and should not be treated as such.

Data Minimization and Purpose Limitation

2.11. We seek to process personal information that is reasonably relevant and necessary for the purposes described in this Policy and to limit processing to purposes that are compatible with the purpose for which the information was collected or otherwise obtained, except where another lawful basis permits further processing.

3. How We Share Your Personal Information

3.1. We may disclose personal information to third parties where reasonably necessary to provide, operate, secure, administer, and improve the Services, process payments, comply with legal obligations, protect Our rights and interests, or for other purposes described in this Policy.

Service Providers

3.2. We may disclose personal information to service providers that perform services on Our behalf or support Our operations, including hosting, infrastructure, cloud computing, communications, customer support, analytics, security, fraud prevention, payment administration, and other technical or business services. Such providers may process personal information only as permitted by their applicable agreements, roles, and legal obligations.

Search, Lookup and Data Providers

3.3. To perform searches, reverse lookups, matching, data retrieval, and Report generation, We may transmit relevant Search Inputs or related technical information to authorized search, lookup, data, API, database, or information providers and may receive information from them.

3.4. Depending on the circumstances and applicable law, such providers may process information on Our behalf or may independently determine certain purposes and means of their processing. Where a provider acts independently, its processing is also subject to its own privacy practices and legal obligations.

Payment, Billing and Payment Recovery

3.5. We may disclose relevant Account, transaction, billing, device, technical, and fraud-prevention information to Payment Processing Entities, payment processors, merchants of record, acquiring banks, billing providers, payment-recovery providers, fraud-prevention providers, and other parties reasonably necessary to process or administer payments, Trial Memberships and Subscriptions, refunds, cancellations, failed-payment recovery, chargebacks, payment disputes, and related activities.

3.6. Where reasonably necessary to prevent or investigate fraud, abuse, unauthorized transactions, chargebacks, payment disputes, or violations of the Terms, We may disclose relevant information to payment providers, financial institutions, fraud-prevention providers, card networks, advisers, insurers, dispute-resolution providers, or other appropriate parties. Such information may include transaction records, Account information, technical or device information, authentication records, and evidence relating to the relevant transaction or use of the Services.

Legal, Regulatory and Protective Disclosures

3.7. We may disclose personal information where We reasonably believe disclosure is required or permitted by applicable law, regulation, legal process, court order, governmental or regulatory request, or where reasonably necessary to investigate unlawful activity, enforce the Terms, protect the rights, property, safety, or security of the Platform Operator, Users, Search Subjects, or third parties, or establish, exercise, or defend legal claims. Where permitted by applicable law, We may provide notice of such disclosure where appropriate, but We are not required to provide notice where prohibited by law or where notice could reasonably compromise an investigation, legal process, security measure, or the rights or safety of another person.

Professional Advisers and Corporate Transactions

3.8. We may disclose personal information to Our lawyers, accountants, auditors, insurers, consultants, financial advisers, and other professional advisers where reasonably necessary for them to provide services to Us, subject to applicable confidentiality, contractual, professional, and legal obligations.

3.9. We may disclose or transfer personal information in connection with an actual or proposed merger, acquisition, financing, investment, reorganization, bankruptcy, insolvency, sale or transfer of assets, change of control, or similar corporate transaction, including as part of due diligence, subject to applicable law and appropriate confidentiality or other safeguards where required.

Affiliates and Disclosures at Your Direction

3.10. We may disclose personal information to Our affiliates where reasonably necessary for the purposes described in this Policy, and to another person or entity where You direct or request Us to do so, request functionality that requires the disclosure, or provide consent where consent is required by applicable law.

Aggregated and De-Identified Information

3.11. We may create, use, and disclose aggregated, anonymized, or de-identified information that does not reasonably identify an individual for analytics, research, security, product development, business operations, or other lawful purposes. Where applicable law requires such information to remain de-identified, We will take reasonable measures to maintain it in that form and will not attempt to re-identify it except where permitted by applicable law.

Sale, Sharing and Targeted Advertising

3.12. We do not sell personal information for monetary consideration. We also do not sell or share the substantive contents of Search Inputs, uploaded images, or Cached Reports for monetary consideration or disclose such information to third parties for their own independent advertising purposes unless We separately disclose that practice and provide any choices required by applicable law.

3.13. Certain privacy laws define “sale”, “sharing”, “targeted advertising” or similar terms broadly and may treat certain disclosures involving advertising, analytics, cookies, pixels, or similar technologies as sale, sharing, or targeted advertising even where no money is exchanged. Where Our activities fall within such definitions, We will provide applicable notices and opt-out mechanisms as required by law.

3.14. We do not knowingly sell or share personal information relating to minors where applicable law requires prior affirmative authorization and such authorization has not been obtained.

Search Subjects and Reports

3.15. Information concerning a Search Subject may be displayed to the User who initiated the relevant search as part of a Report where identified through the Services and permitted by applicable law. Inclusion of information in a Report does not authorize the receiving User to use, disclose, publish, distribute, or otherwise process that information in violation of applicable law or the Terms.

3.16. Cached Reports are not made publicly searchable or generally available to other Users solely because a Report has previously been generated by another User.

4. Cookies, Tracking Technologies and Analytics

Cookies and Similar Technologies

4.1. We and Our authorized service providers may use cookies, pixels, software development kits (“SDKs”), local storage, tags, scripts, and similar technologies (collectively, “Cookies and Similar Technologies”) in connection with the Website, Platform, and Services.

4.2. Cookies and Similar Technologies may collect or store information such as device and browser information, IP address and approximate location, online identifiers, session information, referring pages, and information about Your interactions with the Services.

4.3. Depending on the technology used and Your jurisdiction, We may use Cookies and Similar Technologies for strictly necessary functions, authentication and security, fraud prevention, remembering settings and privacy choices, analytics and performance measurement, functionality and personalization, and advertising or marketing measurement and attribution.

Your Choices and Consent

4.4. Where applicable law requires prior consent for non-essential Cookies and Similar Technologies, including applicable analytics, advertising, attribution, or marketing technologies, We will not activate or use those technologies until the required consent has been obtained through Our cookie consent mechanism or another legally valid method. Strictly necessary technologies may be used without consent where permitted by applicable law. Acceptance of this Privacy Policy, the Terms, or use of the Services does not, by itself, constitute consent to non-essential Cookies where separate consent is required by applicable law.

4.5. Where available, You may manage Your choices through Our cookie consent or privacy settings and may also control certain technologies through Your browser or device settings. Disabling certain technologies may affect the availability or functionality of parts of the Services. Where processing is based on consent, You may withdraw that consent at any time, without affecting processing that occurred before withdrawal.

Analytics

4.6. We may use analytics and performance providers to understand how the Services are accessed and used, measure traffic and engagement, identify technical or performance issues, and improve the Services. Depending on the provider and configuration, such providers may process IP addresses, device and browser information, online identifiers, approximate location, session information, referral information, and interactions with the Services.

4.7. Where consent is required for a particular analytics technology, We will use that technology only after obtaining the required consent.

Advertising and Attribution Technologies

4.8. We may use advertising, attribution, and marketing technologies to understand how Users discover the Services, measure campaign effectiveness, attribute registrations, purchases, or other interactions to marketing campaigns, and, where permitted by applicable law, provide or measure advertising. Relevant providers may receive online identifiers, cookie identifiers, IP address information, device or browser information, referral information, and information about events such as visits, registrations, or purchases.

4.9. Except where separately disclosed and permitted by applicable law, We do not intentionally disclose the substantive contents of Search Inputs, uploaded images, or Reports to advertising providers for their own advertising purposes, use such contents to create advertising profiles concerning Search Subjects, or enable advertising to be targeted based on the identity or information of a Search Subject.

4.10. Certain uses of advertising, analytics, or similar technologies may constitute a “sale,”, “sharing,” use for “targeted advertising,” or a similar regulated activity under applicable U.S. state privacy laws even where no money is exchanged. Where applicable, We will provide required notices and opt-out mechanisms and will recognize browser-based opt-out preference signals, including Global Privacy Control (“GPC”), where required by applicable law.

Third-Party Technologies

4.11. Certain Cookies and Similar Technologies may be provided or controlled by third parties and may also be subject to their own privacy practices. Additional information concerning the Cookies and Similar Technologies currently used, including their purposes, providers, retention periods, and available choices, may be provided through Our cookie consent tool or a separate Cookie Policy.

5. International Data Transfers

Processing Outside Your Country

5.1. The Platform Operator is established in the United States. We and Our service providers, Payment Processing Entities, Third-Party Sources, search and data providers, and other recipients described in this Policy may process personal information in the United States and other countries outside the jurisdiction in which You or a Search Subject is located. Those jurisdictions may have privacy and data protection laws that differ from those of Your jurisdiction.

Transfer Safeguards

5.2. Where applicable law requires specific safeguards for an international transfer of personal information, We will use an appropriate lawful transfer mechanism. Depending on the circumstances, this may include an adequacy decision, the European Commission’s Standard Contractual Clauses (“SCCs”), the UK International Data Transfer Agreement or UK Addendum to the SCCs, or another transfer mechanism or derogation recognized under applicable law.

5.3. Where appropriate or required, We may implement supplementary technical, contractual, or organizational measures having regard to the nature of the personal information, the recipient, the destination jurisdiction, and applicable legal requirements.

Third-Party Processing

5.4. Our service providers and other recipients may use infrastructure, personnel, subprocessors, or other service providers located in multiple jurisdictions. Where required by applicable law and appropriate to the recipient’s role, We require applicable contractual or other safeguards. Third-Party Sources or other parties acting independently remain responsible for their own international transfers and compliance obligations.

Further Information

5.5. Where required by applicable law, You may contact Us using the details in Section 15 to request further information about the safeguards applicable to transfers of Your personal information, subject to applicable confidentiality, security, and legal restrictions.

6. Data Retention and Deletion

General Retention Principles

6.1. We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or otherwise processed, including to provide and operate the Services, maintain Accounts, process transactions and Subscriptions, prevent fraud and abuse, maintain security, resolve disputes, comply with legal, tax, accounting, regulatory, and payment-related obligations, enforce the Terms, and establish, exercise, or defend legal claims.

6.2. Retention periods may vary depending on the nature and sensitivity of the information, the purposes of processing, applicable legal or contractual requirements, security and fraud risks, technical requirements, and whether continued retention is reasonably necessary for a permitted purpose.

Account Information and Search Inputs

6.3. We may retain Account information for as long as Your Account remains active and thereafter for a reasonable period where necessary for the purposes described in this Policy. If You submit a valid Account deletion request, We will delete, de-identify, or otherwise restrict relevant personal information in accordance with applicable law, subject to information We are permitted or required to retain.

6.4. Search Inputs may be retained for the period reasonably necessary to perform the requested search, generate and provide the relevant Report, maintain available Reports History functionality, troubleshoot technical issues, prevent fraud or abuse, maintain security, comply with legal obligations, and resolve disputes. We do not retain Search Inputs indefinitely solely because they were submitted through the Services.

Uploaded Images

6.5. Images uploaded solely for reverse image lookup may be temporarily retained for up to seven (7) days after upload or the relevant search, unless a shorter period applies or longer retention is reasonably necessary for security, fraud prevention, troubleshooting, dispute resolution, compliance with applicable law, or the establishment, exercise, or defense of legal claims.

6.6. During that period, We may retain temporary processing files or technical representations reasonably necessary to perform or troubleshoot the requested search. After the applicable retention period, such files will be deleted or otherwise made unavailable from active systems within a commercially reasonable period, subject to limited backup, security, fraud-prevention, dispute, or legally required retention.

Reports History and Cached Reports

6.7. Where Reports History functionality is available, Cached Reports may be retained and associated with Your Account for up to one hundred twenty (120) days after the relevant Report is generated, unless a different period is disclosed through the Services or longer retention is reasonably necessary or required for security, fraud prevention, dispute handling, legal compliance, or the establishment, exercise, or defense of legal claims. The general retention period described in this Section does not override a deletion, erasure, suppression, objection, or restriction request that We are required to honor under applicable law.

6.8. After the applicable retention period, Cached Reports will be deleted or otherwise made unavailable from active Reports History systems within a commercially reasonable period. Where functionality allows You to delete an individual Cached Report or clear Your Reports History earlier, the relevant Report will be removed from Your accessible Reports History, subject to limited retention in backups or other records We are permitted or required to retain.

Payment, Fraud, Security and Legal Records

6.9. We may retain payment, billing, Subscription, transaction, refund, cancellation, payment-recovery, chargeback, and payment-dispute information for as long as reasonably necessary to document transactions, comply with legal, tax, accounting, payment-network, anti-fraud, and other applicable requirements, resolve disputes, recover validly incurred amounts, and establish, exercise, or defend legal claims.

6.10. We may retain information reasonably necessary to detect, investigate, document, or prevent fraud, abuse, unauthorized access, security incidents, violations of the Terms, chargeback abuse, or other unlawful or prohibited activity. Information relevant to an actual or reasonably anticipated complaint, investigation, dispute, legal claim, regulatory matter, or proceeding may be retained until the matter is resolved and for any additional period permitted or required by applicable law.

Opt-Out and Suppression Records

6.11. Following a valid Opt-Out Request or other suppression request, We may retain the minimum information reasonably necessary to identify the relevant suppressed identifier and continue honoring the suppression. Maintaining such a record does not mean that the underlying information will continue to be displayed through the Services.

Backups and Deletion

6.12. Personal information deleted from active systems may remain temporarily in backup or disaster-recovery systems until the relevant backup is overwritten, deleted, or otherwise expires in accordance with Our backup practices. Such information will not be restored to active use except where reasonably necessary for disaster recovery, security, legal compliance, or another permitted purpose.

Third-Party Sources

6.13. Deletion, suppression, or restriction of information within the Services does not delete or alter information maintained independently by Third-Party Sources. Such sources may continue to retain or display the same or similar information in accordance with their own practices and legal obligations. Where reasonably and technically feasible, We may maintain suppression measures designed to prevent validly suppressed information from being displayed again through the Services.

De-Identified Information and Legal Exceptions

6.14. We may retain aggregated, anonymized, or de-identified information that no longer reasonably identifies an individual for longer periods where permitted by applicable law. Any deletion or erasure right remains subject to applicable legal exceptions, including where retention is permitted or required to complete a transaction, provide a requested Service, maintain security and integrity, prevent fraud or abuse, comply with legal obligations, exercise or defend legal claims, maintain valid suppression requests, or for another legally permitted purpose.

7. Your Privacy Rights and Requests

Your Privacy Rights

7.1. Depending on Your place of residence and applicable law, You may have certain rights concerning personal information that We process about You. These rights may vary depending on the jurisdiction, nature and source of the information, Our role in the relevant processing, and applicable legal exceptions.

7.2. Subject to applicable law, Your rights may include the right to:

7.2.1. request confirmation as to whether We process personal information concerning You and obtain access to such information;

7.2.2. request correction of inaccurate or incomplete personal information;

7.2.3. request deletion or erasure of personal information;

7.2.4. request restriction of certain processing;

7.2.5. object to certain processing, including processing based on legitimate interests and processing for direct marketing purposes where applicable;

7.2.6. request portability of personal information where the right applies;

7.2.7. withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;

7.2.8. opt out of the sale or sharing of personal information or processing for targeted advertising, and limit certain uses or disclosures of sensitive personal information, where such rights apply;

7.2.9. request information concerning applicable categories and sources of personal information, purposes of processing, and categories of recipients;

7.2.10. appeal Our decision concerning a privacy request where applicable law provides such a right; and

7.2.11. lodge a complaint with a competent privacy, data protection, or supervisory authority.

7.3. We will not unlawfully discriminate or retaliate against You for exercising a privacy right available under applicable law.

Rights of Search Subjects and Other Non-Users

7.4. You do not need to have an Account or to have used the Services to submit a privacy request concerning personal information that We process about You. An individual who believes that their personal information appears or may appear in a Report may submit a request using the methods described in this Policy.

Verification of Requests

7.5. We may take reasonable steps to identify the relevant information and verify the identity or authority of a person submitting a privacy request, particularly where information originates from Third-Party Sources or may relate to multiple individuals with the same or similar identifiers.

7.6. Depending on the request, We may ask You to verify a relevant telephone number or email address, identify a particular Report or record, provide a verification code or one-time password sent to a contact method under Your control, or complete another reasonable verification procedure. We will use verification information primarily to process the request, prevent fraudulent or abusive requests, maintain appropriate records, and comply with applicable law, and will not request information disproportionate to the nature or sensitivity of the request except where reasonably necessary or required by law.

Opt-Out and Suppression Requests

7.7. Where made available by Us, an individual may request that a telephone number or email address belonging to that individual be suppressed from display in future search results generated through the Services (an “Opt-Out Request”).

7.8. We may require reasonable verification that the person submitting an Opt-Out Request is the individual to whom the relevant telephone number, email address, or other identifier relates, including, where appropriate, through a one-time password or verification code. Where verification through the relevant identifier is unavailable or cannot reasonably be completed, We may provide or accept an alternative verification method appropriate to the nature of the request and the information concerned. We will not require verification that is disproportionate to the nature or sensitivity of the request. We may refuse, delay, or limit a request where We cannot reasonably verify the request after providing an appropriate verification method, reasonably believe the request is fraudulent, abusive, or unauthorized, or where an exception or limitation applies under applicable law.

7.9. Following successful verification and processing of a valid Opt-Out Request, We will take reasonable steps to suppress the verified identifier from future search results generated through the Services, subject to applicable legal, technical, security, fraud-prevention, and operational limitations.

7.10. Suppression generally applies only to the specific verified identifier covered by the request and does not automatically apply to other telephone numbers, email addresses, names, images, accounts, identifiers, or records that may relate to the same individual. A separate request or verification may be required for additional identifiers.

7.11. An Opt-Out Request affects display through the Services and does not delete or alter information maintained independently by Third-Party Sources. If information later becomes available through a materially different identifier or source, additional verification or a further request may be necessary. We may retain a limited suppression record as described in Section 6 to help continue honoring a valid suppression.

7.11.1. An Opt-Out Request is a product-specific suppression mechanism and does not limit any separate right to object to processing, request erasure or restriction, or exercise another privacy right available under applicable law. Such requests may also be submitted using the methods described in Section 7.15 and will be evaluated in accordance with the applicable legal requirements.

Cached Reports and Account Deletion

7.12. Where We grant a valid deletion, erasure, suppression, objection, or restriction request concerning personal information displayed through the Services, We will take reasonable and appropriate steps to apply the resulting deletion, suppression, masking, de-identification, or restriction to relevant Cached Reports and other active systems under Our control where required by applicable law and reasonably technically feasible. Such information will not continue to be made accessible through Cached Reports merely because the general Cached Report retention period has not yet expired, except to the extent continued processing or retention is permitted or required by applicable law. Limited copies may remain in backups, security records, fraud-prevention records, dispute records, or other records that We are permitted or required to retain.

7.13. You may request deletion of Your Account through functionality made available through the Services or by contacting Us using the methods described in this Policy. Account deletion does not require deletion of information We are permitted or required to retain, including transaction, payment, security, fraud-prevention, suppression, dispute, and legal records.

Authorized Agents

7.14. Where permitted by applicable law, You may authorize another person to submit a privacy request on Your behalf. We may require reasonable evidence of the agent’s authority and may require You to verify Your identity or confirm the authorization directly with Us, except where applicable law provides otherwise. Submitting and Responding to Requests

7.15. Privacy requests may be submitted using the privacy or opt-out tools made available through the Website or Platform, or by contacting Us at [PRIVACY REQUEST EMAIL / URL]. Please provide sufficient information to allow Us to identify the request and the personal information concerned.

7.16. We will respond to verified privacy requests within the period required by applicable law. Where permitted, We may extend the response period where reasonably necessary and will provide any notice required by law.

7.17. Privacy requests are generally processed without charge. Where permitted by applicable law, We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded, excessive, repetitive, fraudulent, or abusive, and will provide any explanation or appeal information required by applicable law.

7.18. Privacy rights are not absolute. We may deny or limit a request where permitted or required by applicable law, including where necessary to protect the rights and freedoms of others, maintain security and integrity, prevent fraud or abuse, comply with legal obligations, preserve privileged or confidential information, or establish, exercise, or defend legal claims.

8. Security and Security Incidents

Security Measures

8.1. We implement and maintain reasonable and appropriate technical, organizational, and administrative measures designed to protect personal information against unauthorized or unlawful access, acquisition, use, disclosure, alteration, destruction, loss, or other unauthorized processing, taking into account the nature and sensitivity of the information, associated risks, available technology, and applicable legal requirements.

8.2. Depending on the relevant systems and information, such measures may include access and authentication controls, encryption or other protections for information in transit or at rest where appropriate, logging and monitoring, infrastructure security, vulnerability management, fraud and abuse prevention, backup and recovery procedures, personnel access restrictions, and appropriate requirements for relevant service providers. Access to personal information is intended to be limited to persons who reasonably require it for legitimate purposes and are subject to appropriate confidentiality, security, or contractual obligations.

No Absolute Security and Account Security

8.3. No website, platform, transmission method, or information system can be guaranteed to be completely secure. Although We maintain measures designed to protect personal information, We cannot guarantee that unauthorized access, acquisition, use, disclosure, alteration, loss, or destruction will never occur.

8.4. You are responsible for taking reasonable steps to protect Your Account and access credentials, including Your email account, passwords, authentication links, verification codes, and devices. If You know or reasonably suspect that Your Account or an access method used with the Services has been compromised, You should promptly contact Us using the details in Section 15.

Security Monitoring and Incidents

8.5. We may process relevant technical, Account, device, transaction, Search Input, usage, and other information where reasonably necessary to detect, investigate, prevent, or respond to security incidents, unauthorized access, fraud, abusive or prohibited use, automated access, payment abuse, or other activity that may threaten the security or integrity of the Services, Users, Search Subjects, or third parties. Where reasonably necessary, We may restrict, suspend, or investigate Account activity or functionality and retain relevant records as described in Section 6.

8.6. If We become aware of a security incident involving personal information, We may investigate, contain, mitigate, remediate, and document the incident and cooperate with relevant service providers, cybersecurity professionals, insurers, payment providers, regulators, law-enforcement authorities, or other appropriate parties. Where applicable law requires notification of a personal data breach or other security incident, We will provide the required notifications in the manner and within the time periods required by law.

Third-Party Security

8.7. The Services rely in part on third-party infrastructure, hosting, payment, search, lookup, data, communications, security, and other providers. We take reasonable steps to select and manage relevant providers and impose appropriate privacy and security requirements where required by applicable law. Third parties may operate systems outside Our direct control, but nothing in this Section limits any responsibility that We are required to assume under applicable law for service providers processing personal information on Our behalf.

9. Children’s Privacy

Age Requirements

9.1. The Services are intended only for individuals who are at least eighteen (18) years old or have reached the age of legal majority in their jurisdiction, whichever is higher. We do not knowingly permit individuals who do not meet the applicable age requirement to create an Account, purchase a Trial Membership or Subscription, or use the Services.

9.2. We do not knowingly collect personal information directly from children for the purpose of allowing them to use the Services. If We become aware that an individual who does not meet the applicable age requirement has created an Account or provided personal information directly to Us in connection with use of the Services, We may suspend or terminate the Account and delete, restrict, or otherwise process the relevant information as required or permitted by applicable law.

Information Concerning Minors in Third-Party Sources

9.3. Because the Services may retrieve, aggregate, or display information obtained from public records, open-web sources, licensed data providers, databases, and other Third-Party Sources, information concerning a minor may in some circumstances exist within an underlying Third-Party Source or otherwise become relevant to a search. This does not mean that the Services are directed to children or intended to facilitate searches concerning minors.

9.4. Users must not use the Services to exploit, harass, stalk, threaten, locate, profile, contact, or otherwise harm a minor, or to obtain or use information concerning a minor for any unlawful, abusive, exploitative, discriminatory, or otherwise prohibited purpose. Additional restrictions concerning use of the Services are set out in the Terms.

Requests Concerning Minors

9.5. Where We become aware that personal information concerning a minor is being processed through the Services in circumstances requiring deletion, suppression, restriction, consent, authorization, or another safeguard under applicable law, We will take appropriate action as required by applicable law. A parent, legal guardian, or other person legally authorized to act on behalf of a minor may submit an applicable privacy request using the methods described in Section 7, subject to reasonable verification of identity and authority.

10. Communications and Marketing Service and Transactional Communications

10.1. We may use Your contact information to send transactional, administrative, security, billing, privacy, support, and other service-related communications reasonably necessary in connection with Your Account, purchases, Trial Membership, Subscription, Reports, or use of the Services. These may include authentication messages, purchase confirmations, payment receipts, Subscription or Trial Membership notices, cancellation confirmations, payment failure or recovery notices, security alerts, privacy-request communications, and material service-related notices.

10.2. Because certain communications are necessary to provide, administer, secure, or comply with legal obligations relating to the Services, You may not be able to opt out of them while maintaining the relevant relationship with Us. Opting out of marketing communications does not prevent Us from sending non-promotional communications where reasonably necessary or permitted by applicable law.

Marketing and Promotional Communications

10.3. Where permitted by applicable law, We may use Your contact information to send marketing or promotional communications concerning the Services, features, offers, promotions, or other products or services. Where prior consent is required, We will obtain the required consent before sending such communications.

10.4. You may unsubscribe from marketing communications at any time using the unsubscribe mechanism included in the relevant communication or another method made available by Us. We may retain limited information reasonably necessary to record and honor Your marketing preference and prevent communications from being sent contrary to Your request.

Communication Analytics and Service Providers

10.5. Where permitted by applicable law and, where required, with Your consent, communications sent by Us or Our authorized providers may use technologies that allow Us to determine whether a message was delivered, opened, or interacted with or whether a link was selected. We may use this information to administer communications, measure effectiveness, troubleshoot delivery, prevent fraud or abuse, and improve Our communications.

10.6. We may use authorized third-party providers to deliver email or other communications. Such providers may process contact information, delivery information, technical identifiers, and interaction information as reasonably necessary to provide the relevant services. If We introduce a communication channel subject to additional consent, disclosure, or opt-out requirements, We will comply with those requirements before using it for the relevant purpose.

Use of Search Information for Marketing

10.7. Except where separately disclosed and permitted by applicable law, We do not use the substantive contents of Search Inputs or Reports to send marketing communications concerning a Search Subject or enable third parties to market directly to a Search Subject.

10.8. The fact that a telephone number, email address, name, image, or other identifier is submitted as a Search Input does not, by itself, constitute consent by the Search Subject to receive marketing or promotional communications from Us or from the User who submitted the Search Input.

11. U.S. State Privacy Rights

11.1. Residents of certain U.S. states may have additional rights concerning their personal information under applicable state privacy laws. Depending on Your state of residence and applicable law, these rights may include the right to access, correct, delete, or obtain a portable copy of personal information; obtain information about Our collection, use, and disclosure of personal information; opt out of certain sales, sharing, targeted advertising, or profiling; limit certain uses or disclosures of sensitive personal information; appeal certain decisions concerning privacy requests; and exercise applicable privacy rights without unlawful discrimination.

11.2. The categories of personal information We may collect, the sources from which We obtain it, the purposes for which We process it, and the categories of recipients to whom We may disclose it are described in this Privacy Policy.

11.3. We do not sell personal information in exchange for money unless expressly disclosed to You. Certain disclosures to advertising, analytics, or other third parties may nevertheless constitute a “sale,”, “sharing,” or processing for “targeted advertising” under applicable U.S. state privacy laws even where no money is exchanged. Where We engage in such activities, We will provide any notice and opt-out mechanism required by applicable law.

11.4. Except where separately disclosed and permitted by applicable law, We do not sell or share the substantive contents of Search Inputs, uploaded images, or Reports for purposes of allowing third parties to target advertising based on the identity or characteristics of a Search Subject.

11.5. Where required by applicable law, We recognize qualifying browser-based universal opt-out preference signals, including Global Privacy Control (“GPC”), as a request to opt out of applicable sale, sharing, or targeted advertising activities.

11.6. Where We process personal information that qualifies as sensitive personal information or sensitive data under applicable U.S. state privacy laws, We will comply with any consent, limitation, opt-out, or other requirements applicable to that processing. Except where separately disclosed and permitted by applicable law, We do not use sensitive personal information to infer characteristics about a User or Search Subject for unrelated advertising purposes.

11.7. We do not knowingly sell or share personal information relating to minors where applicable law requires prior affirmative authorization and such authorization has not been obtained.

11.8. You may exercise applicable U.S. state privacy rights using the methods described in Section 7. We may take reasonable steps to verify Your identity or authority before processing a request. Where applicable law permits an authorized agent to act on Your behalf, We may require reasonable evidence of that authority.

11.9. We will respond to valid requests within the periods required by applicable law. Where applicable law provides a right to appeal Our decision concerning a privacy request, You may submit an appeal by contacting Us at support@veritycheck.com.

11.10. Where a request concerns personal information obtained from a Third-Party Source, We will process the request to the extent required by applicable law. Deletion, correction, or suppression of information within the Services does not necessarily cause the same information to be deleted, corrected, or suppressed by the independent Third-Party Source from which it originated.

12. EEA, UK and Switzerland Privacy Rights

12.1. If You are located in the European Economic Area (“EEA”), United Kingdom, or Switzerland, applicable data protection law may provide You with additional rights concerning Your personal data.

12.2. Subject to applicable conditions, exceptions, and limitations, these rights may include the right to:

12.2.1. access Your personal data and obtain information about how We process it;

12.2.2. request correction of inaccurate or incomplete personal data;

12.2.3. request deletion of Your personal data;

12.2.4. request restriction of processing;

12.2.5. object to processing based on legitimate interests and object at any time to processing for direct marketing purposes;

12.2.6. receive certain personal data in a structured, commonly used, and machine-readable format and, where applicable, have it transmitted to another controller;

12.2.7. withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal; and

12.2.8. lodge a complaint with a competent data protection or supervisory authority.

12.3. These rights are not absolute and may be subject to conditions, exemptions, verification requirements, and limitations under applicable law. In certain circumstances, We may continue processing personal data notwithstanding a request, including where processing is necessary to comply with a legal obligation or to establish, exercise, or defend legal claims.

12.4. Where We obtain personal information concerning a Search Subject from Third-Party Sources rather than directly from that individual, the categories and sources of such information and the purposes and legal bases for processing are described in this Privacy Policy. We will provide any additional information or notice required by applicable data protection law, subject to applicable exceptions, including where the individual already has the relevant information, providing individual notice would be impossible or involve disproportionate effort, or another exception recognized by applicable law applies.

12.5. You may exercise Your applicable rights using the methods described in Section 7. We may request information reasonably necessary to verify Your identity, authority, or the personal information to which the request relates.

12.6. Where We are required by applicable law to appoint a data protection representative or Data Protection Officer, the applicable contact information will be made available in this Privacy Policy or through the Website.

13. Third-Party Websites, Services and Data Sources

13.1. The Services may rely on, interact with, retrieve information from, or provide links to Third-Party Sources, including public records, publicly accessible websites and platforms, licensed data providers, databases, APIs, search providers, and other third-party services.

13.2. Third-Party Sources operate independently from Us and may collect, use, retain, disclose, or otherwise process personal information under their own terms, privacy policies, and legal obligations. Except where applicable law provides otherwise, We are not responsible for the independent privacy practices of Third-Party Sources.

13.3. Information obtained from Third-Party Sources may be incomplete, inaccurate, outdated, duplicated, incorrectly associated with an individual, or subsequently changed or removed by the original source. Our processing or display of such information does not mean that We independently verified or endorsed the information or the practices of the source from which it was obtained. Except where required by applicable law, We have no obligation to independently investigate, contact, or obtain additional information from a Search Subject or other person solely for the purpose of verifying information obtained from a Third-Party Source.

13.4. A match, association, similarity, link, indicator, or other result displayed through the Services does not necessarily establish that two records, identifiers, accounts, images, vehicles, or other data points relate to the same person or entity. The inclusion, association, or display of information in a Report does not constitute a representation, conclusion, accusation, or endorsement by Us concerning the identity, character, conduct, reputation, background, status, or activities of any Search Subject.

13.5. If You follow a link from the Services to a third-party website, platform, or service, Your interaction with that third party is governed by its own terms and privacy practices. We encourage You to review the applicable privacy information before providing personal information directly to a third party.

13.6. A privacy, deletion, correction, or suppression request submitted to Us generally affects only personal information processed within Our Services. It does not automatically delete, correct, restrict, or suppress information independently maintained by a Third-Party Source. Where appropriate, You may need to contact the relevant Third-Party Source separately.

13.7. Nothing in this Section limits any responsibility or obligation that We have under applicable data protection law with respect to Our own collection, use, disclosure, or other processing of personal information obtained from Third-Party Sources.

14. Changes to this Privacy Policy

14.1. We may update this Privacy Policy from time to time to reflect changes to the Services, Our data-processing practices, legal or regulatory requirements, or for other legitimate business reasons.

14.2. When We update this Privacy Policy, We will revise the “Last Updated” date displayed at the beginning of the Policy.

14.3. Where required by applicable law, or where We make material changes that significantly affect how We process personal information, We will provide additional notice through the Website, Platform, email, or another appropriate method.

14.4. Where applicable law requires Your consent to a new or materially different processing activity, We will obtain that consent before relying on the relevant processing.

15. Contact Information

If You have questions, concerns, or complaints regarding this Privacy Policy or Our processing of personal information, or if You wish to exercise an applicable privacy right, You may contact Us using the details below:

Support Email: support@veritycheck.com

Platform Operator: Aura Health LLC, 30 N Gould St Ste R, Sheridan, Wyoming 82801, United States of America

When contacting Us regarding a privacy request, please provide sufficient information for Us to understand and process Your request. We may request additional information where reasonably necessary to verify Your identity, authority, or the personal information to which the request relates.

Please do not send passwords, full payment-card details, government identification documents, or other sensitive information unless We specifically request such information through an appropriate method where reasonably necessary to process Your request.