Servco SecuritySECURE ACCESS
Privacy Policy
Controller and contact
The controller of the personal data described here is Servco Security, owned and operated by Amir Taghavi, of 6 Laipu iela, Ģintermuiža-Būriņi, Jelgava, LV-3001, Latvia. For any privacy question, or to exercise any right below, write to support@llcservco.org. We answer within one month.
Where a business uses our services to check its own staff or visitors, that business is the controller of those checks and we act as its processor.
What we collect, and why
| Data | Why | Lawful basis |
|---|---|---|
| IP address, and the technical characteristics of the connection it arrives on | To produce the assessment that is the service itself, and to protect the site from automated abuse | Contract; legitimate interest in securing the service |
| Device characteristics your browser or our app reports | To recognise the same device across sessions, which is how account takeover is detected | Contract; legitimate interest in preventing fraud |
| Identity document images and a short live face capture, when you start a verification | To confirm that the person presenting the document is its holder | Explicit consent, given on the verification screen before the camera opens |
| Name, e-mail address, and the content of support messages | To operate your account and answer you | Contract |
| Orders, invoices and payment references | To take payment and to keep the accounting records we are required to keep | Contract; legal obligation |
A facial image is biometric data. We ask for it only for a verification you started, we tell you before the camera opens what it is used for, and you can refuse -- refusing ends that verification and nothing else.
How long we keep it
- Identity document images and live captures: deleted once the verification reaches a decision, and in any case within one year. They are never sent to the organisation that requested the check unless you tick the box that says so.
- Assessment records and device signatures: kept while your account is open, so a later session can be compared with an earlier one.
- Support conversations: two years.
- Invoices and accounting records: as long as tax law requires.
Who else sees it
We do not sell personal data and we do not share it for anyone else's marketing.
Assessment draws on public reputation sources for the address being assessed. Those queries carry the address and nothing about the person.
Where a business asked for a verification, it receives the outcome and the reasoning. It receives the images only if you agreed to that on the verification screen.
Our servers are in the European Union. Where a supplier is outside it, the transfer is covered by the European Commission's standard contractual clauses.
Your rights
You have the right to a copy of your data, to correction, to erasure, to restriction, to portability, and to object to processing based on legitimate interest. Where processing rests on consent you can withdraw it at any time, and withdrawal does not affect what was lawful before it.
Write to support@llcservco.org. If you believe we have handled your data wrongly you may complain to your national data protection authority; in Latvia that is the Data State Inspectorate.
Automated decisions
An assessment is produced by measurement and weighting, without a person looking at every case. A result that refuses or restricts something is not final on its own: you can ask for it to be reviewed by a person, and the review reads the same evidence the engine used.
Cookies
We set a session cookie so that a signed-in page knows it is you, and nothing else. There is no advertising cookie, no analytics cookie and no third-party tracker on this site.