Privacy Policy

Operated by: ID Pool is a product of Wanlogix Ltd, registered in the United Kingdom. For privacy and data protection enquiries: support@wanlogix.com

1. Introduction

ID Pool is a privacy-preserving identity and attribute verification platform operated by Wanlogix Ltd ("we", "our", or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

We collect information that you provide directly to us:

  • Account Information: Email address, password, user type
  • Documents: Identity documents you choose to upload (passport, DBS, qualifications, etc.)
  • Verification Tokens: Time-limited tokens you generate for third-party verification
  • Usage Data: Logs of your activities on the platform

3. Identity Verification (Stripe Identity)

Third-Party Identity Verification

When you choose to verify your identity through our platform, we use Stripe Identity, a third-party service. This process involves:

  • Document Capture: Stripe Identity will capture images of your government-issued ID
  • Biometric Matching: A selfie may be taken and matched against your ID photo
  • Data Processing: Stripe processes this data to verify your identity
  • Data Sharing: Verification results (verified/not verified) are shared with ID Pool
  • Data Retention: Stripe retains verification data according to their privacy policy

Important: By initiating identity verification, you consent to sharing your identity information with Stripe. Please review Stripe's Privacy Policy at stripe.com/privacy.

4. How We Use Your Information

  • To provide and maintain our identity verification service
  • To process verification tokens and enable third-party verification
  • To send you email notifications (token delivery, expiry alerts, etc.)
  • To maintain audit logs for security and compliance
  • To enforce our subscription tiers and usage limits
  • To improve our services and user experience

5. GDPR Compliance

ID Pool is designed with privacy at its core:

  • No Document Access: Agencies NEVER have access to your actual documents
  • YES/NO Only: Verification results provide only YES or NO responses
  • Time-Limited Tokens: Tokens automatically expire (24-48 hours)
  • Your Control: You decide when and with whom to share verification tokens
  • Right to Deletion: You can request deletion of your data at any time

6. Data Sharing and Disclosure

We do not sell your personal information. We share information only in these circumstances:

  • With Your Consent: When you share verification tokens with agencies
  • Service Providers: Stripe (identity verification), SendGrid (emails), Replit (hosting)
  • Legal Requirements: When required by law or to protect our rights

7. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS), secure password hashing, file integrity verification (SHA-256 hashing), and comprehensive audit logging.

8. Your Rights

Under GDPR and other privacy laws, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to data processing
  • Export your data (data portability)
  • Withdraw consent for identity verification

9. Consent for Identity Verification

Before using Stripe Identity verification, you will be asked to provide explicit consent to:

  • Share your identity documents and biometric data with Stripe
  • Allow Stripe to process and analyze your verification data
  • Store verification results in ID Pool's system
  • Display your verified status to agencies using your tokens

You can withdraw this consent at any time by contacting us or deleting your account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our platform.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact Wanlogix Ltd:

Data Controller: Wanlogix Ltd, United Kingdom
Last Updated: May 2026
Effective Date: May 2026