numOctaves="4" seed="2" result="noise" /> numOctaves="4" seed="2" result="noise" />
1
2
3
4
5
6
7
8
9
10
11
12
KiVerify™ Replace Trust With Proof.™
Book a meeting
Book a meeting
KiVerify™ Replace Trust With Proof.™
Book a meeting
Book a meeting
KiVerify™ Replace Trust With Proof.™
Book a meeting
Book a meeting
KiVerify™ Replace Trust With Proof.™
Book a meeting
Book a meeting
legal pages

Privacy Policy

Europe
US
Asia
Australia

Version 2.5 - Effective Date: September 10, 2026

1. Introduction - Who We Are and What This Policy Covers

This Website Privacy Policy describes how Covenantz, Inc. (“Covenantz,” “CVTZ,” “we,” “us,” or “our”) collects, uses, and protects personal data in connection with your visit to kiverify.com (the "Site"), which is the public-facing product website for the KiVerify™ independent verification ecosystem.

The website kiverify.com is the public product website for the KiVerify™ Ecosystem, where visitors may browse product information and review documentation. Registration for the KiVerify™ Ecosystem takes place at ecosystem.kiverify.com. This policy applies to anyone interacting with kiverify.com before they become a registered Ecosystem participant; once registration begins, the KiVerify™ Ecosystem Privacy Policy governs your data.

This policy does not apply to:

  • Registered users of the KiVerify™ Ecosystem, whose data is governed by the KiVerify™ Ecosystem Privacy Policy. Once you begin the KiVerify™ Ecosystem registration flow at ecosystem.kiverify.com, the Ecosystem Privacy Policy governs your data.
  • Visitors to covenantz.net, whose data is governed by the Covenantz Website Privacy Policy published at covenantz.net/legal/privacy-policy.
  • CVTZ employees and contractors, whose data is governed by separate internal policies.

The boundary between this policy and the Ecosystem Privacy Policy is the start of the Ecosystem registration and onboarding flow at ecosystem.kiverify.com. From the point you begin registration, your data as a KiVerify™ Ecosystem user is governed by the Ecosystem Privacy Policy. Any activity on the kiverify.com public website is subject to this policy, whether or not you are a registered KiVerify™ Ecosystem user.

2. Data Controller

For purposes of the General Data Protection Regulation (EU) 2016/679 (GDPR) and the UK General Data Protection Regulation (UK GDPR), Covenantz, Inc. is the data controller responsible for personal data collected through kiverify.com prior to Ecosystem registration.

Contact:

Mailing Address: Covenantz, Inc., The Corporation Trust Company, Corporation Trust Center, 1209 Orange St, Wilmington, DE 19801
Privacy Inquiries: security@covenantz.com
General Legal: security@covenantz.com
Data Protection Officer: dpo@covenantz.com

3. What Data We Collect and Why

3.1. Data You Provide During Pre-Registration Interest
Before you formally begin the registration process, you may interact with kiverify.com in ways that involve providing personal data, such as submitting a contact or interest form, requesting a demo or product briefing, or downloading documentation. In these interactions, we may collect your name, business email address, company name, job title, and any message content.

3.2. Data Collected Automatically
When you visit kiverify.com, we and our third-party analytics and technology providers automatically collect certain technical data about your device and browsing activity. This may include technical identifiers and browsing information such as your IP address, browser type and version, operating system, referring URL, pages visited on the Site, time spent on pages, and date and time of visit. Analytics configurations are intended to support privacy-preserving analytics practices where implemented and operationally configured.

The KiVerify™ Ecosystem (the authenticated working environment accessed after login) uses only strictly necessary and functional cookies for logged-in users. Analytics cookies on the public-facing pages of kiverify.com are governed by this policy and our Cookie Policy.

4. How We Use Personal Data

We use the personal data collected through kiverify.com for the following purposes:

  • Responding to pre-registration inquiries, demo requests, and product interest forms.
  • Sending information about the KiVerify™ Ecosystem, product updates, or regulatory developments relevant to prospective users, where you have subscribed or consented.
  • Improving the Site, understanding how prospective Ecosystem participants navigate kiverify.com and which content drives Ecosystem engagement.
  • Security and fraud prevention, monitoring for malicious traffic, credential stuffing, scraping, and pre-registration abuse.
  • Legal compliance, complying with applicable law, regulatory obligations, and lawful requests from authorities.

Once you become a registered KiVerify™ Ecosystem participant, the purposes for which we process your data are governed by the Ecosystem Privacy Policy.

5. Sharing Personal Data

5.1. Service Providers (Sub-Processors)
We share data with third-party service providers who process personal data on our behalf, including analytics providers, cloud hosting providers, CRM platforms, and our Consent Management Platform (CMP) provider. These providers are bound by data processing agreements and may only process data in accordance with our instructions.

See Covenantz / KiVerify Sub-Processor List at trust.delve.co/covenantz/subprocessors.

5.2. Legal Obligations
We may disclose personal data where required by applicable law, court order, or regulatory authority, or to protect the rights, property, or safety of Covenantz, its personnel, or others.

5.3. Business Transfers
In the event of a merger, acquisition, or sale of all or part of CVTZ's business or assets, visitor and pre-registration data held under this policy may be transferred to the relevant successor entity, subject to equivalent privacy protections.

5.4. No Sale of Personal Data
Covenantz does not intentionally sell, rent, or lease personal data collected through kiverify.com for monetary consideration or for independent third-party marketing purposes. Where analytics or similar third-party technologies are used, certain disclosures or processing activities may be characterized as “sharing” under applicable privacy laws depending on technical configuration, regulatory interpretation, or third-party technology behavior. California residents may exercise applicable privacy rights as described in Section 9.2.

6. International Data Transfers

Covenantz, Inc. is incorporated in the State of Delaware, United States. Personal data collected through kiverify.com may be transferred to, stored in, or processed in the United States or other countries outside the European Economic Area (EEA) or the United Kingdom. As a global product, kiverify.com is specifically designed to serve users across multiple jurisdictions, including the EU/EEA, United Kingdom, United Arab Emirates, Singapore, and other markets.

Where personal data is transferred from the EU/EEA or UK to countries not recognized as providing an adequate level of data protection, where applicable and operationally implemented, Covenantz may rely on transfer safeguards such as the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, contractual commitments from service providers, or other lawful transfer mechanisms recognized under applicable data protection laws.

7. Cookies and Tracking Technologies

The public-facing website of kiverify.com (those accessible without logging in) use cookies and similar tracking technologies to operate and improve the Site. A complete description of all cookies deployed on the public-facing website of kiverify.com, including each cookie's name, purpose, setting party, and duration, is provided in our Cookie Policy, available at kiverify.com/legal/cookies.

We use the following categories of cookies on the public-facing pages of kiverify.com:

  • Strictly Necessary - Essential for Site function: session management for the registration flow, security tokens (CSRF protection), and load balancing.
  • Functional - Remember language and display preferences for returning visitors.
  • Analytics / Performance - Understand how prospective Ecosystem participants navigate and engage with kiverify.com. We use Google Analytics 4 and related analytics technologies to understand engagement with public-facing product documentation and registration workflows. Analytics configurations are intended to support privacy-preserving analytics practices and limitations on advertising personalization features where implemented and operationally configured.

The authenticated KiVerify™ Ecosystem (the Workspace accessed after login) uses only strictly necessary and functional cookies, session authentication, security (CSRF), and display preferences. It does not place analytics, advertising, or tracking cookies on authenticated Ecosystem users.

You can manage your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of the Site. Specific cookie, consent, analytics, and tracking technology configurations may evolve over time as the Site, applicable legal requirements, vendor technologies, and operational practices change.

8. Retention

We retain personal data collected through kiverify.com only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law.

  • Pre-registration inquiry and interest data: retained for the duration of the pre-contractual relationship plus a reasonable period thereafter, not to exceed three (3) years, unless you request deletion or proceed to Ecosystem registration (at which point your data is governed by the Ecosystem Privacy Policy retention schedule).
  • Analytics and technical data: retained in accordance with our analytics provider's data retention settings; typically no more than 14 months at individual session level.
  • Security and server logs: retained for up to seven (7) years unless an investigation requires longer retention.

9. Your Rights

9.1. Rights Under GDPR / UK GDPR
If you are located in the EU/EEA or the United Kingdom, you have the following rights with respect to personal data collected through kiverify.com:

  • Right of access - to obtain a copy of the personal data we hold about you.
  • Right to rectification - to correct inaccurate or incomplete personal data.
  • Right to erasure ("right to be forgotten") - to request deletion of your personal data, subject to applicable legal exceptions.
  • Right to restriction - to restrict processing in certain circumstances.
  • Right to data portability - to receive your data in a structured, machine-readable format.
  • Right to object - to object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent - where processing is based on consent, you may withdraw at any time.

To exercise any of these rights, contact security@covenantz.com with the subject line "Data Subject Rights Request, kiverify.com." We will respond within one month of receipt. Where the complexity or number of requests requires it, we may extend this period by up to two additional months, with written notice to you within the first month explaining the reason for the extension (GDPR Art. 12(3)).

You also have the right to lodge a complaint with your local supervisory authority. In the EU, this is the data protection authority in your country of residence. In the UK, this is the ICO (ico.org.uk).

If you have begun or completed KiVerify™ Ecosystem registration and wish to exercise rights with respect to your KiVerify Ecosystem account data, please refer to the KiVerify™ Ecosystem Privacy Policy.

9.2. Rights Under CCPA / CPRA (California Residents)
California residents have the right to know what personal data is collected, used, disclosed, or sold; the right to delete personal data (subject to exceptions); the right to correct inaccurate personal data; and the right to opt out of the sale or sharing of personal data.

Covenantz does not intentionally use personal data collected through kiverify.com for cross-context behavioral advertising or advertising personalization purposes and does not intentionally sell personal data collected through the Site. Certain analytics, consent-management, security, or website technologies may nevertheless involve disclosures or processing activities that could be characterized as “sharing” under applicable privacy laws depending on technical configuration, regulatory interpretation, or third-party technology behavior.

To exercise your California privacy rights, contact security@covenantz.com with "California Privacy Rights Request" in the subject line.

10. Children

The website kiverify.com is a professional product website directed to business entities and professionals. It is not directed to children under the age of 18, and we do not knowingly collect personal data from anyone under 18. The KiVerify™ Ecosystem requires users to be at least 18 years of age to complete registration and participate. If we become aware that personal data of a person under 18 has been collected, we will delete it promptly. Contact security@covenantz.com if you believe a minor's data has been submitted.

11. Links to Other Sites

The website kiverify.com may contain links to covenantz.net and to third-party websites. This policy applies only to the public-facing pages of kiverify.com. Links to third-party sites, including CVTZ's identity verification providers, legal counsel websites, or regulatory body pages, are subject to the privacy policies of those sites. We are not responsible for the privacy practices of any linked third-party sites.

12. Changes to This Policy

We may update this Website Privacy Policy from time to time to reflect changes in applicable law, our data practices, or the technologies deployed on kiverify.com. We will update the "Effective Date" at the top of this policy when changes are made. For material changes, we will provide prominent notice on the Site. Prior versions of this policy may be available upon reasonable request by contacting admin@covenantz.com.

13. Contact Us

For privacy-related questions, data subject rights requests, or concerns about this policy, contact:

Email: security@covenantz.com
Legal: security@covenantz.com
Data Protection Officer: dpo@covenantz.com
Mailing Address: Covenantz, Inc., The Corporation Trust Company, Corporation Trust Center, 1209 Orange St, Wilmington, DE 19801