What we hold, and what we do not

When you use the paid assessment, your files are read in your browser. A PDF with a text layer is parsed there; a scan or a photograph is read there too, by optical character recognition running as WebAssembly on your own machine. Files are held in memory for the length of the session and discarded when you close the tab.

There is no upload step, because there is no server involved in reading them. This is an architectural constraint rather than a policy promise: the page is not permitted to send data anywhere but its own origin, and your browser enforces that.

A consequence worth knowing: nothing is recoverable. Close the tab and the assessment is gone, and the report you downloaded is the only copy.

We record which country and profession were selected, whether a check was started and completed, which result type was produced, whether a report was downloaded, and whether a checkout was started or completed. That is the whole list.

We do not transmit names, dates of birth, passport or licence numbers, document contents, extracted fields, filenames or the files themselves. Not in analytics, not in error reports, not anywhere. Errors are reported with the error’s type and nothing else, precisely because a stack trace from a document parser could carry text out of somebody’s passport.

We set no cookies and assign no visitor or session identifier.

Payment is taken on our provider’s own hosted checkout, on their domain. Your card details are never entered on a MEDVERIK page and never reach our servers. They collect the billing information they need, including your email address, and act as merchant of record for the sale.

What we store against a purchase is deliberately minimal: a random purchase reference, the provider’s order number, whether payment succeeded, and whether the included re-check has been used. No name, no email, no document, no assessment content.

If you buy an assessment, our payment provider sends a receipt, and we send a short summary of the result — how many matters need attention, how much evidence is missing. The detailed findings are not in the email; they are in your report.

We do not send marketing email and we do not sell or share your address.

Because we hold no account and no document, there is generally nothing about you for us to show you or delete. Where you have purchased, the purchase record can be deleted on request, subject to the records our payment provider must keep for tax purposes.

privacy@medverik.com

See also our terms and disclaimer.