Privacy policy

Last updated: 1 December 2025

Zero data storage by design

Verify ID Number validates ID numbers entirely in memory. We never store, log, or retain any ID numbers or personal information processed through our API.

1. Introduction

Verify ID Number ("we", "our", or "us") operates the verifyidnumber.co.za website and the South African ID validation API service. This Privacy Policy explains how we collect, use, and protect information when you use our services.

We are committed to protecting your privacy and complying with the Protection of Personal Information Act (POPIA) of South Africa.

2. Information we collect

2.1 Account information

When you create an account, we collect:

  • Email address
  • Name (optional)
  • Password (stored securely using industry-standard hashing)

2.2 ID numbers processed through the API

We do NOT store ID numbers. When you use our API to validate South African ID numbers:

  • ID numbers are processed entirely in memory
  • No ID numbers are written to any database or log files
  • No ID numbers are retained after the API response is returned
  • We cannot retrieve or provide any ID numbers you have validated

2.3 Usage data

We collect anonymised usage statistics to improve our service:

  • Number of API requests (without the ID numbers themselves)
  • Timestamp of requests
  • API response times
  • Error rates

3. How we use your information

We use the information we collect to:

  • Provide and maintain our service
  • Authenticate you when you access your account
  • Process payments and manage subscriptions
  • Send important service updates
  • Respond to your enquiries and support requests
  • Monitor and improve service performance

4. POPIA compliance

We comply with the Protection of Personal Information Act (POPIA) by:

  • Minimisation: We only collect information necessary to provide our service
  • Purpose specification: We clearly explain why we collect information
  • Security safeguards: We implement appropriate security measures
  • Data subject rights: You can access, correct, or delete your account information
  • Zero ID storage: We don't store the personal information (ID numbers) you validate

5. Data security

We implement industry-standard security measures including:

  • HTTPS encryption for all data in transit
  • Secure password hashing
  • API key authentication
  • Regular security reviews
  • Limited access to production systems

6. Data retention

ID numbers: Not retained at all—processed in memory only.

Account information: Retained while your account is active. You can request deletion at any time.

Usage statistics: Anonymised data may be retained for up to 2 years for service improvement.

7. Third-party services

We use the following third-party services:

  • Cloudflare: For hosting and DDoS protection
  • Payment processors: For handling subscription payments (they do not receive ID numbers)

8. Your rights

Under POPIA, you have the right to:

  • Access your personal information
  • Request correction of inaccurate information
  • Request deletion of your account and data
  • Object to processing of your information
  • Lodge a complaint with the Information Regulator

To exercise these rights, contact us at [email protected].

9. Cookies

We use essential cookies to:

  • Keep you logged in to your account
  • Remember your preferences

We do not use tracking or advertising cookies.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact us

If you have questions about this Privacy Policy or our data practices, please contact us: