Draft for legal review. This document is not in force yet.
Privacy Policy
Draft dated November 10, 2026
This policy explains what personal information VeriLevel collects, why we collect it and the choices you have. We do not sell your personal information.
Who is responsible
Bold Latitude LLC, 30 N Gould St, Sheridan, WY 82801, USA, is responsible for your personal information. For privacy questions or requests, email privacy@verilevel.com.
What we collect
- Your email address and your choice about receiving news from us.
- Exam details you give us, which are your email address and your full name as it should appear on the certificate. There are no accounts or passwords.
- Purchase details, which are what you bought, when and the amount. Card details go directly to Stripe and we never see the full card number.
- Exam details, which are your answers, scores, attempt times and certificate records.
- Technical details, which are your IP address, browser type and basic logs needed to run and secure the service.
- Messages you send us, including accommodation requests. Information about a disability is used only to arrange your accommodation and is kept separately with restricted access.
We do not use camera, microphone, screen recording or biometric data, including face scans.
How we use it
- To email you your exam link, results and certificate.
- To sell, deliver and score exams and issue certificates.
- To show the public verification record for your certificate.
- To prevent fraud and misuse of exam content.
- To answer your messages and handle refunds and appeals.
- To meet tax, accounting and other legal duties.
If you agree, we will also send you news about new exams. You can unsubscribe from any marketing email with one click.
The public certificate record
When you pass, your name, level, issue date, expiry date and status appear on a public page at verilevel.vercel.app/verify, so anyone with the link or certificate ID can check it. You can make your record private at any time from your exam page.
Who we share it with
We share personal information only with service providers that help us run the service, under contracts that limit how they use it. These include our hosting provider, our database provider, our email provider and Stripe for payments. We may also share information when the law requires it, or with a buyer if our business is sold, in which case this policy continues to apply.
We do not sell personal information and we do not share it for cross-context behavioral advertising.
Cookies
The website uses only cookies and similar storage needed for it to work, such as keeping an exam in progress. We do not use advertising cookies. If we add analytics in the future, we will update this policy and ask for consent where the law requires it.
How long we keep it
- Marketing preferences are kept until you unsubscribe.
- Certificate records are kept for as long as the certificate is valid and for 5 years after it expires, so that past certificates can still be checked.
- Purchase records are kept for as long as tax law requires.
- Accommodation documents are deleted 12 months after the exam they relate to.
Your rights
Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it and to opt out of marketing. Residents of US states with privacy laws, such as California, and people in the EU and UK can use these rights by emailing privacy@verilevel.com. We will not treat you differently for using them. We may need to confirm your identity before acting on a request. You may also use an authorized agent where the law allows it.
If you are in the EU or UK, our legal bases are performing our contract with you, our legitimate interest in running and protecting the service, your consent for marketing emails, and legal obligations. You can complain to your local data protection authority.
International transfers
We and our service providers may process information in the United States and the European Union. Where the law requires it, we use standard contractual clauses or other approved safeguards.
Security
We use encryption in transit, access controls and reputable providers to protect your information. No system is completely secure, and we will tell you without undue delay if a breach affects you where the law requires it.
Children
Our service is for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.
Changes
We will post any change to this policy on this page with a new date, and tell you by email if the change is significant.