This policy explains what MuVertex does with personal data when you use this website or our verification APIs. It is written to be read rather than skimmed.
Who is responsible
MuVertex, MuVertex, 60/5, Kattigenahalli, Hoskote, Bengaluru, Karnataka 562114. For any question about this policy or about data we hold, write to hello@muvertex.com.
Data we collect from this website
If you submit the contact form, we receive the details you enter: name, company, email, optional phone number, the APIs you are interested in, your expected volume, and your message. We use them to reply to you and to maintain a record of the conversation.
We collect limited technical data automatically — pages visited, approximate region, referrer and device type — to understand how the site is used. Essential cookies keep the site working; optional analytics cookies are only set if you accept them.
Data processed through the APIs
When you call a verification endpoint, you act as the controller of the personal data in the request, and we act as your processor. We process it to perform the verification you requested and for no other purpose. We do not use it to build profiles, we do not sell it, and we do not share it beyond what performing the check requires.
Identity endpoints require a consent reference and a stated purpose as request parameters. Calls without them are rejected rather than queued. Full identifiers are not returned in responses and are not written to our logs.
Retention
Website enquiries are kept for up to 24 months from the last contact. API transaction metadata — timestamp, endpoint, account, consent reference, outcome — is retained for the period configured on your account, defaulting to the shortest term that still supports audit obligations. Verification payload contents are not retained beyond the life of the request.
Sub-processors
We use a small number of service providers for hosting, email and error monitoring. Each is bound by a data processing agreement. A current list is available on request.
Security
Transport is encrypted in both directions. Access to production systems is restricted to the engineers who need it, authenticated with multi-factor authentication, and logged. We test our own systems regularly and have a documented process for handling incidents, including notification.
Your rights
You may ask what personal data we hold about you, request a correction, request deletion, or object to processing. Write to the address above and we will respond within 30 days. If the data was submitted through a customer's API integration, we will route your request to that customer, who is the controller.
Changes
If we change this policy materially, we will update the date below and, where the change affects you, tell you directly.
Last updated: 7 October 2026