Privacy Policy

Last Updated: August 15, 2025

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide when you:

• Create an account (name, email, company name, job title)
• Use our services (queries, configurations, preferences)
• Contact customer support (support tickets, communications)
• Participate in surveys or feedback (responses, comments)
• Attend events or webinars (registration information)

1.2 Information Automatically Collected

When you use our platform, we automatically collect:

• Usage Data: Pages viewed, features used, time spent, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: General location based on IP address
• Cookies & Tracking: Session data, preferences, analytics information

1.3 Information from Third Parties

We may receive information from:

• Business partners and resellers
• Data enrichment services (company information, industry data)
• Social media platforms (if you connect accounts)
• Payment processors (transaction details)

2. How We Use Your Information

We use collected information to:

• Provide Services: Deliver AI-powered analytics, insights, and automation
• Improve Platform: Enhance features, develop new capabilities, fix bugs
• Personalization: Customize experience, provide relevant recommendations
• Communications: Send updates, newsletters, marketing materials (with consent)
• Security: Detect fraud, prevent abuse, protect user accounts
• Compliance: Meet legal obligations, enforce terms of service
• Analytics: Understand usage patterns, measure performance

3. Data Sharing and Disclosure

3.1 We Share Data With:

• Service Providers: Cloud hosting (AWS, Azure), analytics tools, payment processors
• Business Partners: Integration partners, resellers (with your consent)
• Legal Requirements: Law enforcement, regulatory authorities when required by law
• Business Transfers: In case of merger, acquisition, or sale of assets

3.2 We Do NOT:

• ❌ Sell your personal data to third parties
• ❌ Use your data to train AI models accessible to other customers
• ❌ Share your business data with competitors
• ❌ Allow unauthorized access to your information

4. Data Security

We implement industry-standard security measures:

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access Controls: Role-based permissions, multi-factor authentication
• Infrastructure: SOC 2 Type II certified data centers
• Monitoring: 24/7 security monitoring, intrusion detection
• Audits: Regular security assessments and penetration testing
• Training: Employee security awareness programs

5. Data Retention

We retain your information for as long as necessary to:

• Provide services to you (account active + 90 days after closure)
• Comply with legal obligations (tax records for 7 years)
• Resolve disputes and enforce agreements
• Backup and disaster recovery (encrypted backups for 30 days)

6. Your Rights and Choices

6.1 GDPR Rights (EU Residents)

• Access: Request copies of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in machine-readable format
• Objection: Object to processing for direct marketing
• Restriction: Limit how we use your data

6.2 CCPA Rights (California Residents)

• Know: What personal information we collect and how it's used
• Delete: Request deletion of your personal information
• Opt-Out: Opt out of sale of personal information (we don't sell data)
• Non-Discrimination: Equal service regardless of privacy choices

6.3 How to Exercise Your Rights

Contact us at: privacy@verustrict.com

We will respond within 30 days (GDPR) or 45 days (CCPA).

7. Cookies and Tracking

We use cookies for:

• Essential: Authentication, security, session management
• Analytics: Google Analytics, Mixpanel (anonymized)
• Preferences: Language, theme, dashboard settings
• Marketing: Campaign tracking, conversion measurement (with consent)

Manage cookie preferences: Cookie Policy

8. International Data Transfers

We operate globally and may transfer data to:

• United States (our primary data centers)
• European Union (EU data center for EU customers)
• Other regions where our service providers operate

We use Standard Contractual Clauses (SCCs) and ensure adequate safeguards for international transfers.

9. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us immediately.

10. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for their privacy practices. Review their privacy policies before providing information.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be notified via email or platform notification.

12. Contact Us

For privacy-related questions or to exercise your rights:

• Email: privacy@verustrict.com
• Mail: Verustrict, Inc.
  Attn: Privacy Officer
  1875 Connecticut Avenue NW
  Washington, DC 20009
  United States
• Data Protection Officer (EU): dpo@verustrict.com

13. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract: To provide services you've requested
• Consent: For marketing communications and optional features
• Legitimate Interest: To improve our platform and prevent fraud
• Legal Obligation: To comply with applicable laws