Privacy and personal data
Veriphee processes two categories of data: that of its customers, in order to operate their account, and public professional data about company officers, in order to allow targeted B2B prospecting. No contact file is resold.
Updated : 2026-10-10
This page is a courtesy translation. Only the French version is legally binding.
Data controller
MENESGUEN SERVICES (Créacodeal), 14 rue du Commandant Pilot, 92200 Neuilly-sur-Seine, France. Contact for any question or request to exercise rights: [email protected].
1. Customer data
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address, encrypted password | Account creation and security | Performance of the contract | Lifetime of the account, then 12 months |
| Credits, payments, invoices | Management of credit purchases and accounting obligations | Performance of the contract and legal obligation | 10 years for accounting records |
| Companies searched, activity history | Display of the customer's database, usage-based billing, prevention of abuse | Performance of the contract and legitimate interest | Lifetime of the account |
| IP address at the time of registration | Limitation of multiple registrations and of abuse | Legitimate interest | 24 hours |
2. Data of the company officers appearing in the reports
Veriphee processes strictly professional data: last name and first name, position in the company, the company and its domain, the professional email address built and then verified, the public source and the date of that source. No private-life data, no sensitive data, no personal number.
Origin of the data: the legal business register and public open data (SIREN, corporate officers), the company's website, the trade press, professional directories and public pages. The email address is not collected from a purchased file: it is deduced from the format of the company's addresses, then verified technically.
Purpose: to allow a professional customer to contact the right person within an identified company, as part of prospecting between professionals.
Legal basis: legitimate interest, within the meaning of article 6.1.f of the GDPR, as accepted by the CNIL, the French data protection authority, for professional prospecting where the message sent relates to the position held. Individuals retain an unconditional right to object.
Retention: the data relating to a company remains attached to the account of the customer who searched for it, for as long as that account exists. Verification results are kept for a maximum of 12 months, then recalculated on request. An address that has been the subject of an objection is deleted and entered on a permanent exclusion list.
3. Recipients and subprocessors
The data is neither sold, nor rented, nor transferred. It is accessible to the customer who launched the search, and to the following categories of subprocessors, bound by contract:
- hosting of the site and the application: Cloudflare, Inc.;
- hosting of the database: Neon Inc., servers located in the European Union, Frankfurt (Germany);
- online payment: Stripe, which alone processes bank card data;
- audience measurement: Google Ireland Limited (Google Analytics), only with your consent, and Cloudflare, Inc. (Cloudflare Web Analytics, cookieless);
- technical providers for searching public information and verifying email addresses, located inside and outside the European Union.
Transfers outside the European Union are governed by the standard contractual clauses of the European Commission and, for certified companies such as Google LLC and Cloudflare, Inc., by the EU-US Data Privacy Framework.
4. Your rights
Every data subject has a right of access, of rectification, of erasure, of restriction, of portability and of objection. For professional data used for prospecting purposes, the right to object may be exercised without having to give reasons for the request.
Stop appearing in Veriphee: the objection form lets anyone have their professional address erased in two minutes. A confirmation link is sent to that address; once confirmed, the address is erased from the results and entered on the permanent exclusion list.
A single address for all of these requests: [email protected]. A reply is given within one month. In the event of disagreement, a complaint may be lodged with the CNIL, the French data protection authority, 3 place de Fontenoy, 75007 Paris, cnil.fr.
5. Cookies and audience measurement
Veriphee uses no advertising tracker and no embedded social network. The cookies set on veriphee.com are the following:
| Cookie | Purpose | Duration | Consent |
|---|---|---|---|
| veriphee_session | Keeps you signed in to your account | 30 days, deleted when you log out | Not required: strictly necessary |
| veriphee_lang | Remembers the language you chose | 1 year | Not required: results from your own choice |
| vp_consent | Remembers your choice about audience measurement | 6 months | Not required |
| _ga, _ga_LB0ZYHCXWP (Google Analytics) | Audience measurement: number of visits, pages viewed, where visitors come from | 13 months at most | Required: set only if you click “Accept” |
Google Analytics is provided by Google Ireland Limited. It is loaded only if you accept audience measurement in the banner shown on your first visit. It measures only the public site and the sign-in page: the application (searches, My database, reports) is never measured. Advertising signals and Google Signals are disabled, and page addresses are sent without their parameters. Your choice is kept for 6 months, then asked again.
Change your mind at any time: the “Cookie settings” link at the bottom of every page reopens the banner. Declining after having accepted stops Google Analytics and deletes its cookies.
Cloudflare Web Analytics also measures traffic, without any cookie: nothing is stored on or read from your device, and you are not tracked from one site to another. It provides overall statistics (pages viewed, country, browser) and does not require consent.
AnnuAree, a tool run by the publisher, counts without any cookie the visitors who arrive from a software directory: it only keeps a number of visits per directory and per day, with no IP address, no page address and no visitor identifier. It does not require consent.
6. Security
Exchanges are encrypted with HTTPS, passwords are stored as hashes and never in plain text, access to the data of an account is partitioned and checked on every request. Administration access is restricted to the publisher.
Frequently asked questions
- My professional email address appears in a Veriphee report, how can I have it removed?
- Write to [email protected] stating the address concerned. It is deleted from Veriphee's databases and entered on an exclusion list so that it is no longer rebuilt during subsequent searches. The request is handled within one month at the latest.
- Does Veriphee resell contact files?
- No. No file is sold or transferred to third parties. Addresses are calculated and verified at the request of a customer, for their own professional use, and remain in their account.
- Does Veriphee send emails to the persons verified?
- No. The verification dialogues with the mail server and stops before the message is transmitted. The person receives nothing and does not learn that a verification has taken place.