Privacy Policy

Last updated: October 16, 2026

Merv is a first-pass, client-side verification tool for U.S. vital records and related documents. This policy describes how information is handled.

What stays on your device

On the automatic (high-confidence) path, the document you capture or select is processed entirely in your browser. The full document is not uploaded. Only the verification result (match status, scores, and limited metadata) is sent to the server.

What is sent to the server

• Account information (email, password hash, user class)
• Project configuration and expected values needed for matching
• Verification results (overall match, scores, quality signals, timestamps)
• The document itself only if the case is escalated for human review

How we use information

Information is used to operate the service, record verification outcomes, and support human review when a document cannot be auto-verified. We do not sell personal information.

Retention

Verification results and escalated documents are retained only as long as needed for the project’s stated purpose and any applicable legal or contractual requirements. Escalated documents may be subject to a defined retention window.

Security

Passwords are stored as one-way hashes. Sessions are used for authentication. Database credentials are kept outside the web root.

Contact

Questions about this policy: Contact page or sales@project-lee.com.