Privacy Policy

PehleVerify India Private Limited

CIN: U58201TS2026PTC216096

Registered Office: Nizamabad, Telangana, India

Data Protection Officer: Pranay Mudigonda — dpo@pehleverify.in

2.1 From the Requester (person initiating a verification): Name and mobile number; payment information (processed by Cashfree — we do not store card details); login and session data; IP address and device information.

2.2 About the Subject (person being verified): Full name and date of birth; mobile number, address, city and state; government identity numbers (Aadhaar, PAN, Voter ID, Driving Licence, Passport) as provided by the requester or the subject; in self-verification (consent link) mode, photographs, selfies and document images uploaded by the subject; court and criminal record data retrieved from official government databases; credit history data (CIBIL) where applicable to the service selected; and employment history data where applicable.

We process personal data only for the specific, stated purpose selected by the requester at the time of initiating a check: Matrimonial verification, Romance & Dating Safety, Domestic Help verification, Tenant verification, Business Partner verification, or Employee verification.

Under the DPDP Act, we rely on consent, obtained explicitly from the requester before any check begins and from the subject where they self-verify; and on legitimate use, limited strictly to fulfilling the specific verification service purchased.

We do not use subject data for any purpose beyond the stated verification service. We do not build profiles of subjects across multiple unrelated checks.

4.1 Requester Consent: Before any check begins, the requester must affirmatively confirm, through individual checkboxes, that they have a legitimate purpose for the check; that they understand the subject will be notified; that the subject is 18 years or older; that they understand data usage limitations; and that they agree to these Terms and this Privacy Policy.

4.2 Subject Notification: Where the requester enters the subject's details directly ("Requester Mode"), we send the subject an SMS notification informing them that a verification check has been initiated about them, in compliance with DPDP Act notice requirements. This notification does not disclose the requester's identity or the purpose of the check.

4.3 Subject Self-Consent: Where verification proceeds via a consent link ("Consent Link Mode"), the subject provides their own details directly to PehleVerify and explicitly consents to the specific check before any data is submitted.

We use certified government-approved verification infrastructure partners to query official databases (UIDAI for Aadhaar, Income Tax Department for PAN, National Court Registry for court records, CIBIL for credit history, and other government sources as applicable). These partners are contractually bound to process data solely for the purpose of fulfilling the specific check and are prohibited from retaining or reusing the data for any other purpose.

We use Cashfree Payments for payment processing. We do not store your card or bank details; these are handled entirely by Cashfree under their own PCI-DSS compliant systems.

We use SMS infrastructure providers for OTP authentication and notification delivery.

We use Anthropic's Claude AI to generate plain-language summaries of verification results. Only verification result data (not raw identity documents) is sent to this service for summary generation.

Verification reports are retained for 12 months from the date of generation, after which they are permanently deleted from our active systems. Payment records are retained as required under Indian tax and accounting law (currently 8 years). Consent logs and audit trails are retained for 3 years to demonstrate DPDP Act compliance.

You may request early deletion of your data by contacting dpo@pehleverify.in, subject to any legal retention obligations.

All data is encrypted in transit (TLS 1.2+) and at rest. Access to subject identity data is restricted to automated verification processes and is not accessible to PehleVerify staff in plain text outside of necessary system operations. We conduct periodic security reviews of our infrastructure.

As a data principal, you have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; request erasure of your data, subject to legal retention requirements; withdraw consent at any time (withdrawal does not affect the lawfulness of processing carried out before withdrawal); nominate another individual to exercise your rights in the event of death or incapacity; and file a grievance with our Data Protection Officer, and thereafter with the Data Protection Board of India if unresolved.

To exercise any of these rights, contact dpo@pehleverify.in. We will respond within 30 days.

PehleVerify does not sell, rent, or trade personal data to any third party for marketing or any other purpose, under any circumstances.

PehleVerify's services must not be used to verify individuals under 18 years of age. We implement safeguards to block such attempts. If we become aware that data relating to a minor has been processed in violation of this policy, we will delete it immediately and take appropriate action.

Data may be processed on servers located outside India where our technology infrastructure providers operate (including cloud hosting and AI processing services), in accordance with the DPDP Act's provisions on cross-border data transfer. We ensure such transfers occur only to jurisdictions and providers offering adequate data protection safeguards.

We may update this Privacy Policy periodically. Material changes will be notified via email or platform notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights:

Data Protection Officer: dpo@pehleverify.in

General inquiries: contact@pehleverify.in