Privacy Policy

1. Information We Collect and Store

CHEKKD takes privacy seriously. We store minimal personal information and do NOT store sensitive verification data like ID photos, bank account details, biometric data, employment records, or income information.

We only collect and store:

Basic Account Information: Name, email address, phone number, mailing address, password (encrypted)
Verification Completion Records: Records that you completed identity verification, bank verification, or employment verification (but NOT the actual verification documents or data)
Device Information: IP address, browser type (for security and fraud prevention)
Usage Data: Login history, feature usage (anonymized analytics)
Transaction Records: Records that verification was shared with another party (but NOT the content of transactions)

1.1 What We Do NOT Store

CHEKKD does NOT store or retain:

Government-issued ID photos or documents
Bank account numbers, balances, or transaction details
Biometric data (facial scans, fingerprints, etc.)
Employment details, employer information, or income data
Social Security Numbers or Tax IDs

How verification works: When you verify your identity, Plaid Identity performs the verification and provides us with a pass/fail result. We store only that you passed verification, not the underlying sensitive data.

2. How We Use Your Data

Your data is used for the following purposes:

Calculate Reliability Score: Combine verification signals to generate your trust score and TrustBadge
Verify Identity: Prevent fraud and ensure platform integrity across marketplaces and peer-to-peer transactions
Provide Service: Enable account access, authentication, and features
Share Verification Status: When YOU choose to share your TrustBadge, we provide only your verification status and score (NOT your name, email, phone, or address)
Improve Service: Analyze usage patterns and optimize scoring algorithms
Communicate: Send important updates, security alerts, and notifications

3. Data Sharing - We Don't Sell or Share Your Private Information

IMPORTANT: CHEKKD does NOT sell your data. CHEKKD does NOT share your private information (name, email, phone, address) with anyone.

What We Share (Only With Your Permission)

When you choose to share your TrustBadge with someone (during a marketplace transaction, hiring process, etc.), we share only:

Your verification status (verified or not verified)
Your reliability score and grade
That you passed certain verification checks (ID verified, bank verified, etc.)

We do NOT share: Your name, email, phone number, address, or any other personal information unless you explicitly choose to share it yourself.

Third-Party Services (For Verification Only)

We use these services to verify your identity. They process verification requests but we do not store the sensitive data they collect:

Plaid Identity - Performs identity verification (government ID, bank account, employment checks). Plaid stores verification data; CHEKKD receives only pass/fail results.
Supabase - Secure database for storing your basic account info (email, phone, name, address)
Vercel - Website hosting infrastructure

Legal Requirements

We may disclose basic information if required by valid legal process (court order, subpoena), to protect our rights, prevent fraud, or ensure user safety. We will notify you of such requests unless legally prohibited.

4. Data Security

Since we store only basic account information (not sensitive verification data), our security requirements are simpler. We implement industry-standard security measures:

Encryption: All data is encrypted at rest and in transit using TLS/SSL and AES-256
Access Control: Role-based access with multi-factor authentication for staff
Secure Infrastructure: SOC 2 compliant hosting (Supabase/Vercel) with enterprise-grade security
Password Security: Passwords are hashed using bcrypt with salt
Monitoring: System monitoring for suspicious activity and unauthorized access

Sensitive verification data security: ID photos, bank details, and biometric data are handled entirely by Plaid Identity's secure infrastructure. CHEKKD never sees or stores this sensitive information.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain only the minimal data described in Section 1 (email, phone, name, address, verification completion records) for as long as your account is active.

When you delete your account:

Your TrustBadge and reliability score become inactive immediately
Your personal data (email, phone, name, address) is deleted within 30 days
Anonymized verification records may be retained for fraud prevention and compliance
Some data may be retained longer if required by law or for legal defense

Remember: We never stored sensitive verification data (ID photos, bank details, etc.) in the first place, so there's no sensitive data to delete.

6. Your Rights

You have the following rights regarding your personal data:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and data
Portability: Export your data in a machine-readable format
Opt-Out: Unsubscribe from marketing communications
Object: Object to certain data processing activities
Revoke Consent: Withdraw consent for data sharing with specific partners

To exercise these rights, contact us at support@chekkd.com

7. Cookies & Tracking

We use cookies and similar technologies for:

Essential Cookies: Authentication, session management, security
Analytics: Usage statistics, performance monitoring (anonymized via Google Analytics)
Preferences: Remember your settings and preferences

You can control cookie preferences in your browser settings. Disabling cookies may limit functionality.

8. Third-Party Services

Our service integrates with third-party providers that have their own privacy policies:

Plaid End User Privacy Policy - Identity verification, bank verification, employment verification
Supabase Privacy Policy - Database and authentication services

We recommend reviewing these policies to understand how your data is handled by our partners.

9. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you are a parent and believe your child has provided us with personal data, please contact us immediately at support@chekkd.com.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws (GDPR, CCPA, etc.).

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt-out of the sale of personal information
Right to deletion of personal information
Right to non-discrimination for exercising CCPA rights

IMPORTANT: CHEKKD does NOT sell your personal information to third parties. We do NOT share your private information (name, email, phone, address) with anyone except as described in Section 3 (only verification status when YOU choose to share your TrustBadge).

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with a supervisory authority.

13. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes via email or prominent in-app notification. Your continued use of the Service after changes constitutes acceptance.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: