Legal
Privacy Policy
Last updated 23 June 2026
Note: VERIDIA is currently a demonstration product. No real personal data or item images are processed or stored in the demo. This policy describes how we will process data in production and is provided for transparency.
1. Who we are
VERIDIA is operated by MIRIMIRI INTERNATIONAL S.R.L. (CUI 46133447, Reg. Com. J40/9200/2022), Șos. Colentina nr. 40, Bl. 71, Sc. 4, Et. 10, Ap. 186, Sector 2, București, România. We are the data controller. Contact: privacy@veridia.app.
2. What we process
Account data (name, email), item images you upload for authentication, the resulting verdicts and certificates, billing data (via Stripe), and privacy-friendly usage analytics. Item images may incidentally contain personal data (a face in frame, a name on a receipt, or EXIF geolocation); we treat these as sensitive.
3. Why, and on what basis
To provide the service (performance of a contract); for image processing specifically, on your explicit consent; for billing and tax (legal obligation); and to improve the service (legitimate interest, no cross-site tracking).
4. Image handling
In production, EXIF/metadata is stripped on upload, images are stored privately, and access is only via short-lived signed URLs. We ask only for the angles needed to authenticate.
5. Retention
Images are kept for the certificate validity window plus a short grace period, then deleted, unless you delete them sooner. Certificates are retained for verification. Minimal billing records are kept as required by law.
6. Your rights (GDPR)
You may request access, portability (export), rectification, erasure (delete-my-data), restriction, or object to processing. Email privacy@veridia.app. You may also lodge a complaint with the Romanian supervisory authority (ANSPDCP).
7. Data residency & sub-processors
Production data is hosted in the EU. Sub-processors include Supabase (database, auth, storage), Stripe (payments), and error/analytics providers, each under a data processing agreement. A current list is available on request.