Skip to content
AdverseMe

Privacy Policy

Last updated: September 7, 2026

AdverseMe (“AdverseMe,” “the Company,” “we,” “us,” or “our”) is committed to handling personal data responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the AdverseMe platform and related services (the “Service”). This policy forms part of, and should be read together with, our Terms of Service. Where we rely on consent for optional measurement, the relevant technology remains off until you make that choice.

1. Our Roles

1.1. Account holders. For personal data of registered users and account holders (registration details, billing, usage), AdverseMe acts as the data controller.

1.2. Screening subjects. The Service enables business customers to screen third parties (“Screening Subjects”) against public, governmental, regulatory, and media sources. For personal data of Screening Subjects, the customer who initiates the screening is the data controller, and AdverseMe processes such data on the customer’s instructions as a processor and service provider. Customers are responsible for ensuring a lawful basis for every screening, as set out in the Terms of Service. If you believe you have been screened through the Service, please direct your inquiry to the organization that performed the screening; we will assist as required by applicable law.

2. Information We Collect

2.1. Account Information. When you create an account, we collect your name, email address, organization name, and other registration details.

2.2. Screening Data. We process the entity names, search queries, and parameters our customers submit for compliance screenings, as well as the results generated. Screening Results are compiled from publicly available and third-party sources; we do not verify, and are under no obligation to monitor, update, or correct, the content of those sources.

2.3. Payment Information. We collect billing details necessary to process subscription payments. Payment card information is processed and stored by our third-party payment processor (Stripe) and is not stored on our servers.

2.4. Usage Data. We automatically collect information about your interactions with the Service, including pages visited, features used, screening frequency, API calls made, IP addresses, browser type, device information, and access timestamps.

2.5. Cookies & Tracking Technologies. We use cookies, local storage, and similar technologies as described in Section 9.

2.6. Communications. We retain records of correspondence when you contact our support team or provide feedback.

Where applicable law requires a legal basis, we process personal data on the following bases:

  • Contract Performance: Processing necessary to provide the Service under our Terms of Service.
  • Legitimate Interests: Processing for purposes including fraud prevention, security, service improvement, analytics, marketing of our own services, enforcement and defense of legal claims, debt recovery, and business administration.
  • Legal Obligation: Processing required to comply with applicable laws and regulations.
  • Consent: Where you have provided consent for specific processing activities (such as non-essential cookies), which you may withdraw at any time.

4. How We Use Information

We use collected information to:

  • Provide, operate, and maintain the Screening Services
  • Process subscriptions and billing, and recover amounts owed
  • Manage accounts and provide customer support
  • Send transactional communications (receipts, alerts, security notifications)
  • Monitor and analyze usage trends to improve the Service
  • Detect, prevent, and address fraud, abuse, and security issues
  • Enforce our Terms of Service and other policies, and establish, exercise, or defend legal claims
  • Comply with legal obligations
  • Send marketing communications about our services (you may opt out at any time)
  • Any other purpose disclosed to you at the time of collection or otherwise permitted by law

5. Data Sharing & Disclosure

We do not sell personal information. We may share information in the following circumstances:

  • Service Providers: With third-party processors who assist in operating the Service (e.g., payment processing via Stripe, cloud infrastructure, AI processing, email delivery, analytics, and advertising-measurement providers). These providers are contractually obligated to protect personal data.
  • Affiliates & Advisers: With our affiliates and professional advisers (legal, accounting, insurance, audit) where reasonably necessary.
  • Legal Requirements: When required or permitted by law, regulation, legal process, or governmental request.
  • Protection of Rights: To protect the rights, property, or safety of AdverseMe, our users, or the public, and to establish, exercise, or defend legal claims, including recovery of unpaid amounts and chargeback disputes.
  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, in which case data may be transferred to the successor entity.
  • With Your Consent: When you have given consent to share your data.

6. Data Security

We implement commercially reasonable technical and organizational measures designed to protect personal data, including encryption of data in transit and access controls. No method of transmission or storage is 100% secure, and we cannot and do not guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for securing your own systems and networks.

7. Data Retention

We retain personal data for as long as an account is active or as needed to provide the Service, and thereafter as follows, unless a longer period is required or permitted by law:

  • Account Data: Up to 90 days after account closure.
  • Screening Results: For the duration of the subscription; deleted within a reasonable period after account closure unless retention is required by law or for the establishment, exercise, or defense of legal claims.
  • Billing Records: Up to 7 years as required by applicable tax and financial regulations.
  • Usage & Security Logs: Up to 12 months, or longer where needed for security investigations or legal claims.
  • Local Measurement Choices: Stored in your browser for up to 180 days so that we can remember your choices. Validated Google advertising click IDs are stored separately for no more than 30 days and only when advertising measurement is enabled.
  • Optional Analytics & Heatmaps: Google Analytics property settings permit user-level event-data retention periods of 2 or 14 months; this setting does not control all aggregated reports. Microsoft Clarity currently retains playback data for 30 days and heatmap, click, and labeled-session data for 9 months. These provider-side retention and deletion controls are not enforced by the website code.

8. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention obligations.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Restriction: Request restriction of processing in certain circumstances.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at privacy@adverseme.com. We will respond within the period required by applicable law. We may require verification of your identity before processing a request, and we may refuse or charge a reasonable fee for requests that are manifestly unfounded, excessive, or repetitive, to the extent permitted by law. Requests concerning Screening Subject data will be handled in accordance with Section 1.2.

9. Cookies & Tracking Technologies

We use the following categories of cookies and similar technologies. Analytics, advertising measurement, and public-page heatmaps are separate choices and are off by default:

  • Essential Cookies: Required for the Service to function (authentication, session management, remembering your consent choices). These cannot be disabled.
  • Analytics Cookies: Google Analytics 4 counts canonical public pages, fixed funnel events, and sanitized private-app page templates and action IDs. For referral reporting, recognized sources such as Google, Bing, LinkedIn, ChatGPT, Perplexity, or Claude are converted to a fixed source origin; we do not send the referring path, query, fragment, credentials, or an unrecognized hostname. We do not send app record IDs, names, query strings, document titles, form contents, screening or case contents, search entities or results, download URLs, email addresses, or payment-card information. A completed purchase event is sent only from the server-verified checkout return and contains the server-issued transaction UUID, plan, USD amount, and a sanitized checkout location.
  • Preference Cookies: Remember your settings and preferences.
  • Advertising Measurement: If selected, we accept only strictly validated Google gclid, gbraid, or wbraid click IDs from a public landing URL, store them separately for up to 30 days, and restore those IDs only to the sanitized, server-verified checkout success measurement. We do not store free-text UTM values. Google Signals, remarketing, ad personalization, enhanced conversions, and user-provided or hashed identifiers are disabled.
  • Public-page Heatmaps: If selected, Microsoft Clarity loads only on allowlisted public pages on https://adverseme.com that have no query string or URL fragment. The public page is marked for strict content masking. Clarity is not loaded on sign-in, invitation, checkout-success, admin, or private application pages, and it does not receive screening content, account content, payment information, or private-app session recordings. Clarity can create masked public-page interaction recordings to produce heatmaps.

Optional measurement is used only in accordance with the separate choices you make in our banner, and those choices are stored locally on your device. A consent record from the previous, combined banner is not treated as permission for the new purposes; returning visitors are asked again. You can change or withdraw any choice through Cookie settings in the public-site footer, by clearing your browser’s site data for adverseme.com, or through browser settings. Withdrawal disables later measurement and removes the relevant first-party measurement cookies where the browser permits it. It does not cancel or alter checkout, navigation, or other Service actions. Disabling essential cookies may impair your ability to use the Service.

10. International Data Transfers

Personal data may be processed and stored in countries outside your jurisdiction, including countries that may not provide the same level of data protection. Where required by applicable law, we implement appropriate safeguards for such transfers, such as standard contractual clauses. By using the Service, you acknowledge that your data may be transferred and processed internationally as described.

11. Children’s Privacy

The Service is offered to business users only and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that we have collected data from a child under 18, we will delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@adverseme.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect upon posting to the Service or website. Material changes may also be communicated via email or a prominent notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

13. Contact Information

For privacy-related inquiries, data requests, or complaints, contact us at:

Data Protection Contact: privacy@adverseme.com

Website: adverseme.com

If you are unsatisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

The service providers referred to in section 5 are listed, with their role and location, on the sub-processors page.