Privacy Policy

Last updated: 30 September 2026

Data controller

Overit Malta is operated by Verde Holding Kft. (contact: office@verdeholding.hu). You can reach us at this address with any privacy-related request.

What we process

• Your account: your email address, a scrypt hash of your password (never the password itself), when you signed up and from which part of the site, your plan, and how many company verifications you have run this month.
• Sign-in security: a keyed hash of each network address you sign in from, so we can email you when a sign-in comes from a new one. That email contains the address. Short-lived counters of sign-in attempts, also keyed hashes, protect against password guessing and are deleted after two days.
• Payments: if you subscribe, Stripe processes your card, name, billing address and any VAT number. We never see or store your card details; we keep the Stripe customer and subscription references.
• Invoices: for each payment Verde Holding Kft. issues an invoice through bizonylat.hu, which reports it to the Hungarian tax authority (NAV). The invoice carries your name, address, email and any tax number.
• Email: account and billing emails are sent through Resend.
• Analytics: with your consent, Google Analytics measures anonymous traffic (pages visited, device type). It is not linked to your account.

Purpose and legal basis

Account, sign-in and payment data are processed to provide the service you signed up for (Art. 6(1)(b) GDPR). Invoices are issued and kept because accounting and tax law require it (Art. 6(1)(c)). Sign-in alerts and attempt counters protect your account (Art. 6(1)(f)). Analytics and optional emails rely on your consent (Art. 6(1)(a)), which you can withdraw at any time. We do not sell your data.

Retention

Account data is kept until you delete your account, which you can do yourself in the account settings. Invoices are kept for as long as accounting law requires, also after an account is deleted. Attempt counters are deleted after two days.

Your rights

• access to your data and a copy of it — download it any time from the account settings,
• rectification of inaccurate data,
• erasure ("right to be forgotten") — delete your account from the account settings,
• withdrawal of consent at any time — just email office@verdeholding.hu,
• lodging a complaint with the Information and Data Protection Commissioner (Kummissarju għall-Informazzjoni u l-Protezzjoni tad-Data, idpc.org.mt).

Company data

Company information shown in search results comes from public registers — the Malta Business Registry(Reġistru tan-Negozju ta' Malta), the filed annual return and audited financial statements, and VIES — and is processed in line with their public-sector information re-use terms.