Yes you are taking legal responsibility because you do manual verification, your data is hosted on your server, go ask a lawyer or chatGPT, great opportunity to learn something new