Last updated: May 19, 2026 (draft)

Privacy Policy

Who we are

Expat Verified is a community platform for expats relocating abroad. The site is operated by Warren Business Group LLC (“we,” “us,” “our”), a Wyoming limited liability company. This policy explains what information we collect when you visit expatverified.com, how we use it, who we share it with, and what rights you have.

If you have questions about this policy or how we handle your data, email support@expatverified.com.

What information we collect

We only collect information that helps us run the service. We try to keep it minimal.

Information you give us directly

• Email address — when you fill in the gateway form, sign up for the waitlist, or subscribe to the newsletter.
• First name — when you fill in the gateway form or waitlist.
• Country information — your country of origin, destination country, and your relocation situation (planning to move or already living abroad), captured by the gateway form.
• Language preference — your selection between English and Spanish.

Information collected automatically

• IP address — recorded in our hosting provider's server logs for security and operational purposes.
• Browser data — your browser type, operating system, and the pages you visit on our site.
• Cookies and local storage — small data files stored by your browser. We use these only for essential functions: remembering your language preference, and verifying you're a human (anti-bot challenge).

What we don't collect

• Payment information (we don't currently charge for anything)
• Government-issued ID
• Health information
• Precise geolocation beyond IP-derived country level
• Data from social media accounts

How we use your information

We use your information to:

1. Route you to relevant content — your country and situation answers tell us which Tier 2 page to send you to.
2. Send transactional emails — your gateway form submission triggers a welcome email; your waitlist signup triggers a confirmation email.
3. Send the monthly newsletter — if you've subscribed, we email you the monthly expat roundup. You can unsubscribe at any time.
4. Block automated abuse — Cloudflare Turnstile briefly checks that you're a human, not a bot.
5. Operate the service — hosting, error logging, security monitoring.

We use your information for the purposes above only. We don't profile you for advertising, sell access to your data, or share it with brokers.

Legal bases for processing (GDPR)

If you're in the European Union, United Kingdom, or another GDPR jurisdiction, our legal bases for processing your data are:

• Consent — for newsletter subscriptions and any marketing communications.
• Legitimate interest — for operating the site, preventing abuse, and routing you to relevant content.
• Contract performance — for sending transactional emails tied to your form submission.

Who we share your information with

We share data only with third-party service providers who help us operate the service. These providers act as data processors on our behalf and are contractually bound to handle your data securely.

We never sell your personal information. We never share it for third-party advertising. We don't have affiliate or referral partners who would receive your data.

If we ever change this — for example, if we add a payment processor for premium features — we'll update this policy and notify subscribers before the change takes effect.

International data transfers

Some of our processors store data in the United States. When we transfer your data outside the EU/UK to providers in the US, we rely on:

• The provider's adoption of the EU-US Data Privacy Framework, where applicable, or
• Standard Contractual Clauses (SCCs) approved by the European Commission.

If you would like more information about specific transfer mechanisms, email support@expatverified.com.

Cookies and tracking

We use the minimum number of cookies and local storage entries required to run the site:

• Locale cookie — stores your English/Spanish preference so you don't have to choose every visit.
• Turnstile session token — used by Cloudflare's bot challenge during form submissions. Cleared at the end of the session.

We do not use third-party advertising cookies, social media pixels, or cross-site tracking.

We use Vercel Analytics, which collects anonymized page-view data with no personally identifying information. You can read Vercel's privacy practices at vercel.com/legal/privacy-policy.

Data retention

• Active subscribers and members — we retain your data while your account or subscription is active.
• Inactive accounts — we delete data on request within 30 days.
• Database backups — encrypted backups are retained for up to 30 days before being overwritten.
• Email logs — Resend retains email delivery logs per their own retention policy (typically 30 days).
• Server logs — Vercel retains short-term operational logs per their own policy.

To request deletion of your data, email support@expatverified.comwith the subject line “Delete my data.” We'll confirm receipt within 7 days and complete deletion within 30 days.

Your rights

If you're in the EU, UK, or another GDPR jurisdiction

You have the right to:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”) — request that we delete your data.
• Restrict processing — limit how we use your data.
• Data portability — receive your data in a structured, machine-readable format.
• Object — object to specific processing, including direct marketing.
• Withdraw consent — withdraw consent at any time for processing based on consent.
• Lodge a complaint with your national data protection authority.

If you're a California resident (CCPA / CPRA)

You have the right to:

• Know what personal information we collect, use, and disclose about you.
• Delete personal information we've collected from you (with limited exceptions).
• Correct inaccurate personal information.
• Opt out of sale or sharing — we don't sell or share for cross-context behavioral advertising, but you have the right regardless.
• Limit the use of sensitive personal information — we don't collect sensitive categories.
• Non-discrimination — we won't penalize you for exercising your rights.

To exercise any of these rights, email support@expatverified.com. We'll verify your identity by matching your request to data on file (typically your email address).

If you're in Mexico

Under the Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, LFPDPPP), you have ARCO rights: Access, Rectification, Cancellation, and Opposition. Exercise by emailing support@expatverified.com.

Security

We use industry-standard security practices:

• HTTPS everywhere
• Encryption at rest for stored data (Supabase managed PostgreSQL)
• Limited internal access to user data, restricted to operational necessity
• Cloudflare Turnstile to block automated abuse on form submissions

No system is perfectly secure. If a breach occurs that affects your data, we'll notify you per applicable law.

Children

Expat Verified is not directed at children under 16. We don't knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, email support@expatverified.comand we'll delete it.

Changes to this policy

We may update this policy from time to time. When we make material changes, we'll:

• Update the “Last updated” date at the top of this page.
• For significant changes, email subscribers in advance of the effective date.

Continuing to use the site after a policy update means you accept the updated terms.

Contact

For privacy questions, data access requests, deletion requests, or any concerns about how we handle your information:

Email: support@expatverified.com

Postal address:
Warren Business Group LLC
30 N Gould St Ste N Sheridan, WY 82801

If you don't receive a response within 30 days, you have the right to lodge a complaint with your local data protection authority.