Privacy Policy

1. Introduction

Veriton AI Technologies Pvt. Ltd. ("CreadLayer," "we," "us," or "our") operates the CreadLayer workforce trust verification platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act 2023) and applicable data protection laws.

2. Information We Collect

Personal Data You Provide

• Identity information: name, photo, date of birth, CKYC reference, PAN card
• Contact information: phone number, email address, physical address
• Employment information: employer history, training records, certifications
• Background information: police clearance declarations, incident reports
• Biometric data: facial images for liveness detection and face matching

Information Collected Automatically

• Device information: IP address, browser type, operating system
• Usage data: pages visited, features used, interaction patterns
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

• To verify worker identity and generate trust scores
• To facilitate employer verification checks
• To maintain and improve our platform
• To comply with legal obligations and regulatory requirements
• To detect and prevent fraud or abuse
• To communicate with you about your account and our services

4. Legal Basis for Processing (DPDP Act 2023)

We process your personal data based on:

• Consent: You have provided explicit consent for specific processing purposes
• Contractual necessity: Processing is necessary to provide our services to you
• Legal obligation: Compliance with applicable laws and regulations
• Legitimate interests: Fraud prevention, network security, and service improvement

5. Data Sharing and Disclosure

We may share your information with:

• Employers: Verified employers you authorize can view your trust profile
• Service providers: Third-party vendors who assist in service delivery (KYC providers, cloud infrastructure)
• Law enforcement: When required by law or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. You may request deletion of your data at any time. Certain data may be retained longer to comply with legal obligations.

7. Your Rights

Under the DPDP Act 2023, you have the right to:

• Access your personal data
• Correct inaccurate data
• Withdraw consent at any time
• Request deletion of your data (right to be forgotten)
• Grievance redressal
• Nominate a representative for data processing after your death

To exercise these rights, contact us at info@veritonaitechnologies.com.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including AES-256 encryption at rest, TLS 1.3 in transit, role-based access control, and immutable audit logs.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at info@veritonaitechnologies.com.