FAQ
Last updated: October 2, 2026. The Spanish version prevails.
Validento Internacional S.L., NIF B13696422, Carrer de les Garrigues 3, 46001 Valencia, Spain. Contact: info@validento.com.
(a) Clients: identification, contact, company, billing and platform-usage data, and the cases and documents they submit.
(b) Verified parties: identification data and the documents submitted to a case (identity documents, payslips, bank statements, certificates, company or property records) and the data they contain; for an ID check of a person, a photo of their identity document and a selfie.
(c) Sales Agents and Affiliates: identification and contact data, a photo of an identity document and a selfie for the Sales Program's identity check, payout details (Stripe account or bank account), training progress, commission records, and, for Sales Agents, the prospect data they record in the CRM.
(d) Visitors: technical data such as a hashed IP address (to limit the free trial and detect fraudulent clicks), the referring page, and the referral or affiliate link through which they arrived.
This policy covers all Validento services: Quick Scan, Personal Investigation, Property Due Diligence, Foreign Company Research, the Sanctions & PEP Check and the Enterprise API, as well as subscription plans, and the Sales, Affiliate and Client referral programs.
Providing the verification services and producing the Reports; managing the contractual relationship, payments and billing; running the Sales, Affiliate and referral programs (attribution, commission, credit and payouts); complying with legal obligations, including anti-money-laundering and sanctions rules; preventing fraud and abuse; and handling support requests and communications.
Performance of the contract (client and participant data); the verified party's consent, obtained through the consent document, or another legal basis warranted by the client (verified-party data); compliance with legal obligations (including Spanish AML Law 10/2010 and applicable sanctions rules); and legitimate interest in fraud prevention, platform security and correct attribution of referrals.
The Quick Scan and the identity checks use automated document processing under human supervision. Cases below the internal certainty threshold, and possible sanctions or PEP matches, are reviewed by a person. Affected persons have the right to obtain human intervention, to express their point of view and to contest the outcome (art. 22 GDPR) by writing to info@validento.com.
Technology providers acting as processors (art. 28 GDPR) — cloud hosting and storage, document processing, email delivery — located in the EU or covered by appropriate safeguards (standard contractual clauses); Stripe, for payments and payouts; and, where a case requires it, local legal partners in the relevant jurisdiction, who operate under local privacy and data-protection law. Sales Agents only see the data of their own prospects and clients. We do not sell personal data.
We use only what the site needs to work: your language and theme preference, your login session, and — when you arrive through a referral, affiliate or sales link — a referral token kept for up to 90 days so the right person is credited if you buy. We do not use advertising cookies. With your permission only, we also use Google Analytics and Google Ads conversion measurement (Google Ireland Ltd.) to measure how the site is used and which ads lead to a purchase: it sets analytics cookies and receives your IP address and browser details; personal links (upload, payment, identity check) are masked before they are sent. You choose when you first visit and can change your choice at any time via "Cookies" at the bottom of every page.
For the duration of the contractual relationship and the applicable statutory periods — up to ten years where anti-money-laundering rules require it. Commission and payout records are kept as long as tax law requires. Data is then blocked and erased.
Access, rectification, erasure, objection, restriction and portability, by writing to info@validento.com. You may lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Encryption in transit and at rest, role-based access control with two-factor authentication for Validento staff, and an audit log of case and staff actions.
See also: Terms & Conditions · Disclaimer · Sales & Affiliate Terms