What we store

When you scan a domain, we store the domain, its score, grade, and check results, and the time of the scan. When you submit an email (a lead form, a beta request, or an ownership challenge), we store that email together with the domain and pricing tier you associated with it. When you buy a service, we also store the order reference, product, amount, payment status, billing name and email returned by Stripe, delivery status, and the Stripe references needed to reconcile the payment.

Scan reports are public

A report page is viewable by anyone who knows its domain, the same way any public URL is. Recently scanned domains and their scores may also appear on the homepage. Do not scan a domain expecting the result to stay private.

What we do not store

We do not store anything from the target site itself beyond the specific technical signals each check looks at (for example: does agents.md exist, is the homepage readable). We do not store card numbers or payment credentials. Stripe handles those directly. We do not track visitors to verified.md with third-party advertising cookies.

Retention

We keep scan history and lead records for as long as the service operates, or until you ask us to delete them, whichever comes first.

How we use it

Email addresses are used to reply about a beta request or certification, and to send certification related notices (a score drop, a re-verification result). We do not sell or share your data with third parties for marketing. Our lawful basis is contract for paid services, and legitimate interest for running scans and following up on leads.

No cookies

verified.md sets no cookies and uses no browser storage. There is no cookie banner because there is nothing to consent to.

Who processes it

Cloudflare provides our hosting and database. Resend delivers our transactional email. Stripe processes payments and payment-related identity data. These providers process data to deliver their services and do not receive it from us for third-party advertising.

Where it lives

verified.md is operated by a United States company with day-to-day operations from Spain. Data may be processed in the United States, the EU, and Cloudflare's global network as part of normal service delivery.

Your rights

If GDPR applies to you, you have the right to access, correct, erase, or receive a portable copy of your data, and to object to how we use it. Exercise any of these by emailing hello@verified.md. If you are unsatisfied with our response, you can complain to the Spanish data protection authority, the AEPD.

Deletion

Email us at hello@displace.agency to request deletion of your email, your domain's lead record, or both. We will confirm once removed.

Contact

Questions: hello@displace.agency.