What we keep, and what we never keep.

What we store

• Your account: your email, your display name, which application formats you are preparing for, and whether you hold a cycle pass.
• Your activities: category, title, organization, role, dates, hours, period, the description you write, and any private notes. Private notes are shown to you and to nobody else, including your verifier.
• Your verifier details: the name, title, organization, email, phone number and relationship you enter.
• Verification records: the frozen copy of each entry that a verifier was shown, a SHA-256 hash of it, the verifier's answer, any wording they suggested, any comment they left, and the date they responded.
• Email records: a copy of each request, reminder and sign-in link sent from here, so you can see exactly what went out.
• Payment records: if you buy the cycle pass, the amount, currency, date, your email and Stripe's reference number. Stripe takes your card details; this site never sees or stores them.

What we never store

• No IP addresses are stored by Verify-Now. The hosting provider sees them while it delivers pages.
• No device fingerprints or browser identifiers.
• No tracking pixels, no advertising identifiers, no third-party analytics.
• No verifier link is ever stored in readable form: only a hash of it. The link itself exists in the email and nowhere else.
• No card numbers. Payments are handled by Stripe.

Your verifier's rights

A verifier never needs an account, and never sees your board, your other activities or your private notes. Each email states who is asking, why, and what is kept, and each email carries a "do not contact me again" link. Choosing it stops all further emails about you. To honour that request even if you later delete your account, the platform keeps a hash of that email address and the date of the request, and nothing else.

Where it lives

Verify-Now runs on Cloudflare, which hosts the site and its database. Email goes out through Resend, and payments are processed by Stripe. Those three services handle your data on our behalf, and nobody else does. Access is scoped to the signed-in applicant: the service answers a request for records only with rows that belong to the account making the request, and verifier pages return only the frozen entries in that one link. We have not confirmed which country the database is held in, so this page makes no claim about it.

A verifier's email address and phone number are encrypted at rest whenever an encryption key is configured for the installation, and Settings shows which mode is active. Where encryption is on, a "don't contact me again" record is a keyed hash of the address rather than the address itself.

How long it is kept

Records stay until you delete them. Verifier links expire after 30 days and stop working the moment the verifier answers. Deleting your account removes your activities, your verifier records, your verification records, the email log and your sign-in records in one action, from Settings. Two things stay: the hashed opt-out record described above, and the record of any payment you made, which we keep for accounting.

What is used for what

A verifier's details are used to send your requests about your activities, and for nothing else. Never marketing, never sold, never used to build a profile, and shared only with the services named above that run the site. The service sends email through a delivery provider when one is configured, and otherwise writes each message to your delivery log so nothing is lost.

Canadian privacy law, in plain words

Under Canadian privacy law you can ask to see the personal information held about you, ask for corrections, ask who it has been shared with, and withdraw your consent to its use. Withdrawing consent here means deleting your account, which removes the records rather than keeping them. There is no analytics service and no data broker in the chain, so there is nothing to opt out of beyond your own account.

Two honest caveats. First, this page was written by the person who built Verify-Now and has not been reviewed by a lawyer. Second, a school may perform its own verification; nothing here replaces that, and Verify-Now is not affiliated with OMSAS, AMCAS or any school.