Privacy Policy
How VeriHub handles your data. VeriHub is operated by Cedar Forge Consulting LLC, based in Casper, Wyoming, USA. Contact: support@verihub.io
What we store
- Account data: your username, a bcrypt hash of your password, and your two-factor settings.
- Notification email: stored encrypted with AES-256. A leaked database backup does not reveal it.
- Personal details: name and postal address fields, stored only while you have given consent.
- Verification status: a single marker (pending or verified). No documents are stored on our servers.
- Activity trail: every change is logged with SHA-256 hashes of the old and new values, never the values themselves.
What we deliberately do not do
- No advertising cookies, no tracking pixels, no analytics scripts from third parties.
- No marketing emails, ever. Transactional email only: confirming your address or securing your account.
- No sale or sharing of your personal data with anyone.
Consent and your controls
Personal details are only kept while you consent. Withdrawing consent permanently deletes them: name and address fields are erased, not hidden, and the deletion is recorded in your activity trail. You can review your trail at any time in the Activity section.
Identity verification and processors
Identity verification is performed by Shufti Pro, our verification processor. When you start a verification, the documents and face images you provide go directly to Shufti Pro; VeriHub receives only the outcome. Their handling of verification data is governed by their own privacy policy.
Email delivery runs through a transactional email provider (Resend) solely to send the messages you request.
Sign-in to other services
When you use Sign in with VeriHub on a connected service, we issue a single-use token that vouches for your username and membership type only. It expires within one hour, can be used once, and carries none of your personal details. Your email is never shared with connected services.
Connected services are the websites and services of the YEM ecosystem, such as yem.foundation, yemchain.com and yemsupporters.club, with more to come. YEMpay is operated by Cedar Forge Consulting LLC, the same company as VeriHub: when you sign in there, your username and membership type stay within the company. Every other connected service is operated independently: when you sign in, your username and membership type are shared with that service only after you approve, and none of your other details are ever shared. Any personal details you enter directly on a connected service, such as a postal address for an invoice, are handled under the privacy policy of that service.
Sessions and security
We set one session cookie, marked Secure and HttpOnly. Sessions end automatically after 30 minutes of inactivity. Failed sign-in attempts are limited and accounts lock temporarily under attack. All traffic runs over HTTPS.
Retention
Account data is kept while your account exists. Personal details are kept only while consented (see above). Hashed activity entries are kept as the integrity record of changes to your account. Verification records store the outcome and provider reference only.
Your rights
You can access, correct, or delete your data yourself from the Profile, Consent, and Security pages: that is the point of VeriHub. Deleting your account also ends your access to all YEM network sites and any YEM you hold. For anything else, write to support@verihub.io. Where GDPR or similar laws apply to you, we honor access, rectification, erasure, restriction, portability, and objection rights, and you may complain to your local supervisory authority.
Changes to this policy
Material changes will be announced on the site before they take effect.
Cedar Forge Consulting LLC · 5830 E 2nd St Ste 7000 #35855, Casper, WY 82609, USA · cedarforgeconsulting.com