Privacy summary
Draft v0.1: plain-language summary. The formal policy follows compliance review.
What we collect, and why
Your Reddit username (the account your code resolves to) and your email (identity verification and the instant records match). To improve the match, we resolve your email to a public professional profile (name, city, employer); the result is encrypted and used only for that check. Your legal name and home address are optional; adding them strengthens the instant match and they are used once, for that check only.
No SSN, no date of birth, no phone number.
What we never store
Your net worth or income figure. Record checks return a yes/no for a tier, and that is all we keep, along with a match-confidence score.
Recordings you submit for Complete verification are reviewed automatically and deleted within 7 days. We keep the pass/fail outcome and the institution name, never balances or amounts.
Who sees what
Anyone with your code sees: your Reddit username, a checkmark, and, only if you choose, your tier. Never a number, never your name, never your email or address.
There is no reverse search. Nobody can enter a Reddit username and learn whether it is verified.
Moderators see verification status only. No personal information, ever.
No human watches your recordings or reads your documents in the standard flow. A small human-review queue exists for flagged edge cases, operating under a documented access policy.
Your email's lifespan
Your email is used to send your verification code. The moment your verification completes, we delete the address and keep only a one-way hash of it.
One exception, and it is your choice: if you check the expiry-reminder box when minting your code, we keep the address encrypted for the life of that verification, email you before it expires, and delete the address the moment the verification ends (expiry or revocation, whichever comes first). Leave the box unchecked and nothing is retained.
No marketing either way.
Security posture
Name and address are encrypted at rest with keys held separately from the database. Codes are stored hashed. Lookup logs keep a hashed IP for 90 days for abuse detection, then delete.
Verification pages are excluded from search engines.
Who pays for this
Flairproof is free for communities and users. The first 1,000 instant checks each month are covered; after that an instant check is priced to net us one dollar after processor fees (about $1.34 by card, about $1.03 in USDC), or you can wait for the monthly reset. The service is supported by a single sponsor shown on the success screen and in our verification and reminder emails. We do not sell or share your data with the sponsor.