Skip to content
ConsentVerified

Privacy Policy

Last updated October 21, 2026.

This Privacy Policy explains how information is handled through consentverified.com and the ConsentVerified service. It distinguishes information about website visitors and account holders from consumer lead data processed for customers. For privacy questions or requests, contact [email protected].

Who is responsible for the information

The administrator of the consentverified.com service is the controller of personal information collected for its own website, account administration, billing, support, and service security purposes. In this policy, we and our refer to that administrator. Applicable privacy law may use different terms for these responsibilities.

For consumer lead data submitted or captured through a customer's use of ConsentVerified, the customer controls the purpose and permitted use of that data. We act as a processor or service provider on the customer's behalf under the applicable service agreement and data processing agreement. The customer owns its data and remains responsible for its privacy notices, permissions, and contact practices.

This policy does not replace a customer's privacy notice or authorize its marketing. If a business collects your information through a lead form, consult that business's notice for its purposes, disclosures, and privacy rights process. Third-party websites linked from our website operate under their own policies.

Information about visitors and account holders

We collect information you provide when you use the service, create or manage an account, request help, or communicate with us. Depending on the interaction, this includes your email, account preferences, team access settings, support correspondence, and information needed to manage your subscription. We receive billing status, transaction references, and subscription details needed to administer paid services. Payment card details are handled by the payment processor.

When you visit or use the service, we process technical information such as IP address, browser and device details, requested pages, timestamps, and service activity. We use this information to deliver pages, maintain sessions, investigate errors, prevent abuse, and protect accounts. Account activity records may also support access reviews and investigation of changes within a workspace.

If you use the Consent Language Checker, we process the disclosure text and settings you submit to generate findings. Submitted wording may contain personal information if you include it. Avoid submitting unnecessary consumer details, financial information, health information, passwords, or other sensitive material in checker input or support messages.

Consumer information processed for customers

Customers use ConsentVerified to capture and review consent evidence. Depending on the customer's configuration and use, that evidence includes a phone number, disclosure text, named sellers, intended channels, page URL, timestamps, visibility and submission actions, IP address, browser details, and certificate identifiers. Messaging records, suppression information, verification results, and evidence exports may also contain personal information.

We process this information to provide capture, verification, disclosure review, storage, retrieval, and related service functions under the customer's instructions. We do not acquire ownership of customer lead data. We do not use it to build our own lead lists or independently market to the consumers in those records.

Customers determine what information they collect and whether their collection and contact activities are lawful. They must limit data to what is necessary for their use and provide the notices and permissions required by applicable law. A consent certificate documents captured evidence. It does not establish that every use of that information is permitted.

For information under our control, we use personal information to operate the website, authenticate users, administer accounts and subscriptions, deliver service communications, answer requests, and protect the service. We also use relevant records to comply with legal obligations, resolve billing issues, investigate misuse, and establish or defend legal claims where permitted.

Where applicable law requires a legal basis, we rely on performance of a contract for account and subscription services, legitimate interests for service operation and security where those interests are not overridden by individual rights, and compliance with legal obligations. Where consent is required for a particular use, we request it and explain how to withdraw it. Withdrawal does not affect processing that is lawful before withdrawal.

Our processing of customer lead data follows the customer's instructions and the applicable data processing agreement. The customer is responsible for establishing its own lawful basis. Disclosure scores and verification findings support customer review. They do not themselves determine a consumer's legal rights or authorize contact.

Who receives information

We use service providers in the categories of hosting provider, email delivery provider, and payment processor to operate the service. They receive the information necessary for their role, subject to appropriate contractual restrictions and safeguards. Payment information is handled for payment processing, while email information supports authentication, support, and service communications.

Within a customer workspace, authorized users can access information according to the permissions and service features the customer uses. Customers may retrieve and export their own records. We disclose customer lead data to fulfill authorized customer instructions under the applicable agreement rather than for an independent lead distribution purpose.

We may disclose information when required by applicable law or a binding legal demand, or when necessary and lawful to protect rights, investigate abuse, or address a security incident. Any such disclosure is limited to the purpose and information reasonably required. We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined by California privacy law.

Cookies and similar storage

The website uses essential cookies and similar storage needed for functions such as sessions, authentication, security, and settings necessary to deliver the service. These technologies do not serve cross-context behavioral advertising. We do not use optional advertising or analytics cookies unless we clearly describe that use and obtain consent where required before enabling them.

You can control cookies through your browser settings. Blocking essential cookies can prevent sign-in or other service functions from working correctly. Where applicable law gives a recognized browser preference legal effect, we honor it as required. Because we do not sell or share information for cross-context behavioral advertising, an opt-out preference does not change such a practice on this website.

How long information stays in the service

We retain visitor and account information for as long as needed for the purposes described in this policy, including account operation, billing, security, and applicable legal obligations. The appropriate period depends on the type of record, its purpose, contractual obligations, and whether a dispute, investigation, or legal preservation requirement applies. We do not retain all categories for the same period.

Customer evidence retention follows the selected subscription and applicable agreement. Customers should choose a period that meets their obligations and arrange any required legal hold under the relevant terms. When retention ends or a valid deletion instruction applies, information is deleted or de-identified subject to legal requirements and the agreed deletion process. Backup copies may remain until they expire through the backup cycle and remain protected while retained.

Temporary checker results expire according to the checker's storage settings and are distinct from evidence saved under a subscription. Account cancellation does not automatically remove every billing or security record or override a lawful preservation duty. Contact us if you need information about the retention or deletion process for your records.

Security and international processing

We use technical and organizational safeguards designed to protect information, including encryption in transit and at rest, access controls, and integrity checks for captured evidence. Available team controls depend on the subscription. Customers are responsible for managing authorized users, protecting credentials, and using appropriate permissions. No system can guarantee absolute security. Report concerns to [email protected].

Information may be processed in countries other than the country where you live. Privacy laws and rights of public authorities can differ between countries. Where a transfer requires additional safeguards, we use the safeguards required by applicable law, such as appropriate contractual protections, and assess the transfer as required. Customers can request information about relevant processing arrangements and the applicable data processing agreement.

See security and data handling for further information about the service's safeguards. A record hash supports integrity review and does not replace encryption, access controls, or a lawful basis for processing.

Your privacy choices and rights

Depending on where you live and the law that applies, you may have rights to access personal information, correct inaccuracies, request deletion, receive a portable copy, restrict processing, object to processing, or withdraw consent where processing relies on consent. You may also have the right to complain to a supervisory authority or appeal a denied request under applicable law.

California residents may have rights under the CCPA and CPRA to know the categories and specific pieces of personal information collected, the purposes of processing, categories of sources and recipients, and applicable disclosure practices. They may request correction or deletion, subject to exceptions, and exercise applicable rights to opt out of sale or sharing and limit certain uses of sensitive personal information. We do not sell or share personal information for cross-context behavioral advertising or use sensitive personal information for purposes that require a limitation right under those laws.

We do not discriminate against people for exercising applicable privacy rights. You may use an authorized agent where law permits. We may need information to verify your identity and the agent's authority, limited to what is appropriate for the request. Rights are subject to applicable exceptions and do not require disclosure of another person's information.

Send requests to [email protected] and identify the right you want to exercise. We respond within the period required by applicable law and explain any relevant verification step, exception, or appeal process. Avoid sending sensitive documents unless we request an appropriate verification method.

For customer lead data, direct your request to the business that collects or controls the information. If you contact us, identify that business where possible. We assist the responsible customer as required by our agreement and law, and address information under our own control directly. A request to us does not itself unsubscribe you from a separate business's calls or texts.

Information about children

ConsentVerified is a business service and is not directed to children. We do not knowingly collect personal information from children under the age at which applicable law requires parental authorization. Customers must not use the service to collect children's information unlawfully. If you believe a child provides personal information through our website or service, contact us so we can review and take appropriate action.

Changes to this policy and how to contact us

We update this policy when service practices or legal requirements change. The date at the beginning identifies the current version. For material changes, we provide notice through the service or by email where appropriate and obtain consent when required. A policy update does not remove rights that applicable law protects.

Contact the administrator of the consentverified.com service at [email protected] for privacy questions, rights requests, or information about processing on behalf of customers. The contact page explains what to include, and the Terms of Service describe the subscription relationship.