Privacy

Privacy Policy

How Ndini handles personal information in providing secure identity verification.

Last updated: 19 September 2026

Who this Policy covers

This Policy applies to people who visit Ndini, create an account, use our APIs or hosted verification flows, contact us, or whose identity information is submitted through a customer’s use of our Services. Ndini Technologies is responsible for the processing described here where we determine the purpose and means of processing. In some integrations, our customer determines those purposes and remains responsible for its own privacy notices and lawful basis.

Information we handle

Depending on how the Services are used, this may include account details, contact information, identity document images and data, selfie and liveness captures, biometric comparison data, verification results, technical logs, device and security information, support communications and payment related records. Identity and biometric information require particular care and are handled only where necessary for verification, security, legal compliance or another lawful purpose.

Why we use information

We use information to provide and secure the Services, create and manage accounts, process verification requests, prevent fraud and misuse, communicate about accounts and reviews, respond to support requests, meet legal obligations, improve the reliability of our Services and establish, exercise or defend legal claims. We do not sell personal information.

Sharing and service providers

We share information only where needed to provide the Services, comply with law, protect rights and security, or complete a business transfer permitted by law. Recipients may include authorised personnel, the customer that submitted a verification request, payment providers, hosting and security providers, professional advisers and authorities where legally required. Service providers must handle information under appropriate instructions and safeguards.

Retention and security

We retain information only for as long as reasonably necessary for the purpose it was collected, including security, dispute resolution and legal obligations. We use reasonable technical and organisational safeguards designed to protect information. No method of transmission or storage can be guaranteed completely secure, so you must also protect your account credentials and use official Ndini channels only.

Your choices and rights

Subject to applicable law, you may ask to access, correct or delete inaccurate personal information, object to certain processing, or raise a privacy concern. Where Ndini processes information for a customer, we may direct your request to that customer where appropriate. We may ask for information needed to verify a request and may retain limited information where the law permits or requires it.

International processing and updates

Information may be processed in locations where Ndini or its service providers operate. When information is transferred, we use safeguards appropriate to the circumstances and applicable law. We may update this Policy as our Services or legal requirements change. Material changes will be posted here with an updated date.

Privacy questions or requests

Contact privacy@ndini.me. You may also contact us at support@ndini.me.