Privacy Policy

1. Who we are

AgeCheck API (“we”, “us”, “our”) operates the AgeCheck API service at https://agecheckapi.com. We provide a privacy-first age verification API for websites and applications.

We are committed to privacy by design. This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

2. Data we collect

2.1 Waitlist sign-ups

When you join our waitlist, we collect your email address, and optionally your name, company name, and a description of what you are building. We use this information solely to contact you about early access, product updates, and the launch of AgeCheck API.

2.2 Contact form submissions

When you submit our contact form, we collect your name, email address, and the content of your message. We use this to respond to your enquiry.

2.3 Usage data

When you use our website, we may collect standard server log data including your IP address, browser type, referring URL, and pages visited. This data is used for security monitoring and to improve our service.

2.4 API customers (post-launch)

When you use the AgeCheck API, we collect API usage data including request timestamps, response codes, and your platform identifier. We do not store identity documents or personal data belonging to the end users your platform verifies. Our system returns a boolean verification result only.

3. Legal basis for processing

We process your personal data on the following legal bases under the UK GDPR and EU GDPR:

• Legitimate interests — to operate our waitlist, respond to enquiries, and improve our service.
• Contract performance — to provide the API service to customers who have agreed to our Terms of Service.
• Consent — where you have explicitly opted in to marketing communications.

4. How we use your data

• To contact you about early access and product updates (waitlist members)
• To respond to your enquiries (contact form submissions)
• To provide and improve the AgeCheck API service
• To monitor for security threats and abuse
• To comply with our legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

5. Data retention

Waitlist data is retained until you unsubscribe or request deletion, or until 12 months after the public launch of AgeCheck API, whichever is sooner.

Contact form data is retained for up to 24 months to allow us to reference previous correspondence.

API usage logs are retained for up to 90 days for security and debugging purposes.

6. Your rights

Under the UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your personal data
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@miaid.net.

7. Cookies

We use cookies to operate our website. Please see our Cookie Policy for full details.

8. Third-party services

Our website is hosted on infrastructure provided by GoDaddy. We may use third-party analytics tools to understand how visitors use our site. Any third-party processors are bound by data processing agreements consistent with GDPR requirements.

9. International transfers

Your data may be processed in countries outside the UK or EU. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant supervisory authority.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify waitlist members of material changes by email. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@miaid.net or use our contact form.