Privacy policy

Last updated: 27 October 2026.

This Privacy Policy (the "Policy") explains how NEUROVISION GLOBAL INTELLIGENCE - FZCO, Registration Number 72252, Trade License Number 74254, registered office at IFZA Business Park, DDP, PO Box 342001, Dubai, United Arab Emirates ("Company", "we", "us" or "our"), collects, uses, stores, discloses, and otherwise processes Personal Data in connection with:

• the website located at https://global.nv.run/ and its pages, documentation pages and developer pages (the "Website"); and
• our identity verification, face recognition, liveness, document verification, AML, analytics, API, SDK, developer and related products and services (the "Services").

This Policy addresses both Personal Data relating to visitors of the Website, business customers and customer personnel, and Personal Data relating to end users whose data is submitted to the Services by our business customers ("Business Customer End Users").

This website

The Website is a static website. It sets no cookies, runs no analytics or advertising tags, and has no contact forms. When you visit, our web servers process technical data such as your IP address and the time of your request, in order to deliver and secure the Website. If you write to us by email, we process your email address and the content of your message to answer you.

Role allocation

When we act as controller

We act as a controller (or equivalent concept under applicable law) for Personal Data that we collect and process for our own purposes, including: Website usage data; contact and inquiry data; marketing and communications data; account, onboarding and developer portal data of customers and prospective customers; billing, contract administration and relationship management data; security, fraud prevention, compliance, audit and legal defense data.

When we act as processor

Where a business customer submits end-users' Personal Data to the Services for identity verification, onboarding, AML screening, face comparison, liveness detection, document verification, authentication, fraud prevention or similar purposes, we generally act as a processor on that business customer's documented instructions, while the business customer acts as the controller.

In those circumstances, the business customer is primarily responsible for determining the purposes and legal basis for the processing, providing required privacy notices to its end users, obtaining any required consents or authorizations, ensuring that the submitted Personal Data may lawfully be disclosed to us, and responding to data subject requests, except to the extent we are required to assist under applicable law or contract.

Limited independent processing

Even where we primarily process end-user Personal Data on behalf of a customer, we may also process certain related data as a controller for limited purposes: maintaining the security, integrity, availability and resilience of the Services; preventing fraud, misuse and unlawful activity; maintaining audit trails, logs and compliance records; establishing, exercising or defending legal claims; complying with legal, regulatory, sanctions or reporting obligations; and internal governance, risk management and incident response.

Categories of Personal Data

Website visitors and customer personnel

Identity and contact data (name, company, job title, business email address, telephone number, country); inquiry and correspondence data; account and onboarding data; technical and usage data (IP address, browser type, device type, time of request); marketing and preference data; billing and commercial data; and any other data you voluntarily submit to us.

Business Customer End Users

Depending on the Service used and the business customer's configuration: identification data (full name, date of birth, nationality); government-issued document data and document images; image and video data (selfies, portraits, live capture, liveness interaction data); biometric or face-comparison related data where the workflow requires it and where permitted by applicable law; verification and screening results (document authenticity, face match, liveness, sanctions, PEP and watchlist screening results, risk flags); device, network and risk data; case management data; and support and audit data.

Sources of Personal Data

We may collect Personal Data directly from you; automatically from your device or browser; from our business customers; from service providers, partners and integrators acting on your or the business customer's instructions; from publicly available sources, sanction lists, watchlists, corporate registries and similar sources where relevant and permitted by law; and from internal corporate systems, affiliates or group entities.

Purposes of processing and legal bases

We may process Personal Data to operate, administer, secure and improve the Website; to respond to inquiries, provide demos and communicate with prospects, customers and partners; to administer accounts, trials, sandbox and developer access; to provide support; to send service-related and, where permitted, marketing communications; to detect and prevent fraud, abuse and security incidents; to comply with legal, regulatory, accounting, tax, sanctions and reporting obligations; and to establish, exercise or defend legal claims.

Depending on the circumstances and applicable law, the legal basis on which we process your data as sole controller may include performance of a contract or steps taken at your request prior to entering into a contract, our legitimate interests, your consent, compliance with legal obligations, or any other legal basis available under applicable law.

Where we process Personal Data on behalf of a business customer, the customer determines the applicable legal basis, which may include performance of a contract with the end user, compliance with KYC and AML obligations, legitimate interests in fraud prevention and account security, explicit consent where required, or another lawful basis available under applicable law.

Automated processing and service outputs

Certain Services use automated tools to analyze documents, facial images, liveness signals, watchlist matches, technical signals or fraud indicators. Where we process data on behalf of a business customer, such processing is carried out in accordance with the customer's configuration and instructions, and the customer is responsible for assessing whether any legally significant decision may be based on such outputs. This Policy does not replace any privacy notice that a business customer is separately required to provide to its own end users.

Cookies and similar technologies

The Website sets no cookies. Where our other online resources use cookies or similar technologies, we will request your consent before placing non-essential ones where the law requires it.

Disclosure of Personal Data

We may disclose Personal Data, to the extent necessary and permitted by law, to our affiliates and group entities; to cloud hosting, infrastructure, analytics, customer support, communication, identity and fraud technology partners and screening data providers acting on our behalf; to professional advisers, auditors, insurers and legal counsel; to business customers where relevant to providing the Services; to counterparties and advisors in a merger, acquisition, reorganization or similar transaction; to courts, regulators, supervisory bodies, law enforcement and other public authorities where required or permitted by law; and to any other person with your consent or on your documented instruction. We may also disclose aggregated, anonymized or de-identified information that does not identify an individual.

International transfers

We operate internationally and may process Personal Data in the United Arab Emirates and in other jurisdictions where we, our affiliates, our business customers or our service providers operate. Where Personal Data is transferred across borders, we take steps designed to ensure an appropriate level of protection in accordance with applicable law, which may include reliance on an adequacy determination, contractual safeguards, intra-group data transfer arrangements, technical and organizational security measures, or another transfer mechanism recognized by applicable law.

Data retention

We retain Personal Data only for as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. Retention periods depend on the nature and sensitivity of the data, the purpose of collection, whether the data is required to perform a contract or provide the Services, statutory limitation periods, legal, regulatory, accounting, audit and reporting requirements, security and abuse prevention needs, the customer's documented instructions where we act as processor, and the need to establish, exercise or defend legal claims. Where we process end-user Personal Data on behalf of a business customer, we generally retain and delete it in accordance with the contract, the customer's instructions, the system configuration and applicable law.

Data security

We implement appropriate technical, organizational, contractual and administrative measures designed to protect Personal Data against unauthorized or unlawful access, acquisition, disclosure, alteration, loss, misuse or destruction. These may include access controls and role-based permissions, encryption where appropriate, logging and monitoring, environment segregation, secure development and testing practices, vulnerability management, incident response procedures, vendor due diligence, and staff confidentiality and security obligations. No system or method of transmission over the Internet is entirely secure, and we cannot guarantee absolute security. See also our information security policy.

Your rights

Subject to applicable law, you may have the right to obtain information about the Personal Data we hold about you; request access, correction or deletion; request restriction of processing; object to certain processing; withdraw consent where processing is based on consent; request portability; object to certain automated processing or profiling; and lodge a complaint with a competent supervisory authority.

Website visitors and customer personnel

If we process your Personal Data as controller, you may submit your request to us using the contact details below.

Business Customer End Users

If your Personal Data was submitted to the Services by or on behalf of one of our business customers, that business customer is usually the primary point of contact for your request, because it generally determines the purpose and means of the processing. If you contact us directly, we may require information reasonably necessary to verify your identity, we may forward your request to the relevant business customer, and we may respond directly where required or permitted by applicable law, contract or operational necessity.

Children's privacy

The Website and Services are intended for business and professional use and are not directed to children. We do not knowingly collect Personal Data directly from children through the Website. If you believe that a child has provided Personal Data to us unlawfully, please contact us so that we may take appropriate steps.

Third-party links

The Website may contain links to third-party websites, tools or services. This Policy does not apply to third-party websites, products or services that we do not control.

Changes to this Policy

We may amend or update this Policy from time to time to reflect changes in law, regulation, our business practices, our Services or Website functionality. The updated version becomes effective when posted on the Website, unless a later date is specified. Where required by applicable law, we will provide additional notice or request renewed consent.

Contact details

If you have questions, requests or complaints regarding this Policy or our processing of Personal Data, please contact:

NEUROVISION GLOBAL INTELLIGENCE - FZCO. Registration Number 72252. Trade License Number 74254. Registered office: IFZA Business Park, DDP, PO Box 342001, Dubai, United Arab Emirates. Email: top@nv.global. General enquiries: hello@nv.global.