Privacy Policy

Last updated: October 9, 2026

SourceValidate is operated by O’Alomor & Co Investment LLC (“SourceValidate,” “we,” “us,” or “our”). This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use our product authenticity verification platform and this website.

Information We Collect

We collect information in the following ways:

• Account information. When a manufacturer creates an account, we collect details such as name, email address, organization name, and authentication credentials managed through Amazon Cognito.
• Product and verification data. Information you provide when generating QR codes, including manufacturer details, batch numbers, serial numbers, and optional expiration dates.
• Scan data. When a QR code is scanned, we record a timestamp and an approximate location (city/region), where available and permitted, to support authenticity verification and counterfeit detection.
• Contact information. Details you submit through our contact form, such as your name, email address, and message.
• Technical data. Standard web and security information such as IP address, browser type, and pages visited, used to operate and secure the service.

How We Use Information

• To provide, operate, and maintain the verification platform.
• To authenticate products and display verification results to consumers.
• To detect, investigate, and prevent counterfeiting and fraudulent activity.
• To respond to inquiries submitted through our contact form.
• To improve, secure, and analyze the performance of our service.

How Information Is Stored and Protected

SourceValidate is built entirely on Amazon Web Services (AWS). Verification data is stored in Amazon DynamoDB, static content is served through Amazon CloudFront, and access is protected with JWT-based authentication through Amazon Cognito. Data is encrypted in transit (HTTPS everywhere) and at rest. Each organization’s data is isolated within a multi-tenant architecture.

Sharing of Information

We do not sell your personal information. Limited product and scan information is displayed on the public verification page when a consumer scans a QR code. Detailed analytics and organization-level data are only accessible to authenticated members of your organization. We may share information with service providers who help us operate the platform, or when required by law.

Cookies and Analytics

We may use cookies and analytics tools, such as Google Analytics, to understand how our website is used and to improve it. You can control cookies through your browser settings.

Your Choices and Rights

Depending on your location, you may have rights to access, correct, or delete your personal information. To make a request, contact us using the details below.

Data Retention

We retain information for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at contact@sourcevalidate.com or visit our contact page.