01
Consent per document, not per account
You are told what each upload is used for at the moment you upload it, which is what the Nigeria Data Protection Act 2023 and India’s DPDP Act 2023 both require for this class of data.
Security and privacy
We are asking for your passport and your bank statement.
That is the largest ask a product can make of you, and being sceptical is the correct response. This page is the argument. The policy is in Privacy.
Why the checks need the real thing
A summary you type yourself cannot be checked.
Every check compares a value in one document against a value in another: the name on the passport against the name on the statement, the closing date against the appointment date, the insurance cover against the requirement.
There is no version of this that works on figures you retype, because the errors we look for are precisely the ones you would not notice while typing. A one day gap between a policy and a flight survives any amount of careful self-reporting.
What we do about it
Four commitments, each visible in the product.
None of these are settings buried in an account page. Each one shows up on the surface it applies to.
02
Automatic deletion after a decision
On by default. You pick the window, you see the countdown on every document, and you can delete anything sooner.
03
Redaction before anything is shared
Sharing a statement into a forum without masking it is a privacy incident. The redaction tool is part of the sharing flow, not an optional extra.
04
Export or delete everything, on your own
One action for a full export, one for permanent deletion. Neither needs a support ticket or a reason.
What we will never do
Five things, stated plainly.
- Sell or share your documents, or anything derived from them
- Use your documents to train anything another user could benefit from
- Keep documents after a decision unless you tell us to
- Require a support conversation before you can export or delete
- Publish anything of yours to the community without you choosing to, redacted
The law we build against
Consent has to be specific, and a single checkbox is not.
Our two largest markets both regulate this. Nigeria's Data Protection Act 2023 and India's Digital Personal Data Protection Act 2023 each require consent that is free, specific, informed and unambiguous before processing personal data of this kind, given after a notice that states the purpose.
One checkbox at signup covering everything forever does not meet that standard, so we do not use one. Consent is asked per document, at the point of upload, naming what that document is used for.
Read the whole thing, then decide.
If the trade does not look right to you, the requirement guides and the community are free and need no account at all.