VeriGenAI Privacy Policy

Effective Date: Monday, October 21st, 2024

1. Introduction

VeriGenAI (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you use our services, including our website, applications, and APIs (collectively, the “Services”). By accessing or using our Services, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1. Personal Information

We may collect personal information that can identify you directly or indirectly, such as:

  • Contact Information: Name, email address, phone number, and mailing address.
  • Account Information: Username, password, and other credentials used to access our Services.
  • Payment Information: Credit card details or other financial information for processing transactions.
  • Communication Data: Records of your communications with us, including support requests and feedback.

2.2. Usage Data

We collect information about how you interact with our Services:

  • Log Data: IP address, browser type, operating system, referral URLs, page views, and clickstream data.
  • Device Information: Information about the device you use to access our Services, including device identifiers.
  • Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your experience. For more details, please see our Cookie Policy.

2.3. Content Data

  • User-Submitted Content: Text, documents, or data you submit to our Services for processing or analysis.
  • AI Interaction Data: Records of interactions with our AI models, including input prompts and generated outputs.

2.4. Sensitive Personal Data

We do not intentionally collect sensitive personal data (e.g., social security numbers, health information). Please refrain from submitting such data through our Services.

3. How We Use Your Information

We may use your information for the following purposes:

  • To Provide Services: Facilitate your use of our Services, process transactions, and provide customer support.
  • To Improve Services: Analyze usage patterns to enhance and personalize our Services.
  • To Communicate: Send administrative information, updates, security alerts, and promotional materials (with your consent).
  • To Enforce Policies: Monitor compliance with our Terms of Service and prevent misuse.
  • To Comply with Legal Obligations: Respond to legal requests and prevent harm, fraud, or illegal activities.
  • To Aggregate Data: Anonymize and aggregate data for analytics and improvement of our Services.

4. Legal Bases for Processing (For Users in the European Economic Area)

We process your personal information based on the following legal grounds:

  • Contract Performance: Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
  • Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our Services, provided these interests are not overridden by your rights.
  • Consent: Where you have provided consent, particularly for marketing communications.
  • Legal Obligations: Compliance with legal obligations to which we are subject.

5. Disclosure of Your Information

5.1. Service Providers and Subprocessors

We may disclose information to third-party service providers (“Subprocessors”) who assist us in operating our Services, such as:

  • Cloud Hosting Providers
  • Payment Processors
  • Analytics Services
  • Customer Support Platforms

These parties are contractually obligated to protect your information and process it on our behalf in compliance with applicable laws.

5.2. Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5.3. Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

5.4. With Your Consent

We may share your information with third parties if you have given us explicit consent to do so.

6. International Data Transfers

Your information, including personal data, may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy, such as:

  • Standard Contractual Clauses: Utilizing European Commission-approved clauses for data transfers outside the European Economic Area (EEA).
  • Privacy Shield Frameworks: Complying with frameworks for data transfers between the U.S. and other countries (where applicable).

7. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including:

  • Encryption: Data is encrypted in transit using SSL/TLS protocols and at rest where applicable.
  • Access Controls: Restricted access to personal data to authorized personnel only.
  • Security Audits: Regular assessments of our security practices.

However, no method of transmission over the internet or electronic storage is 100% secure.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including:

  • Account Information: Retained until your account is deleted or as required for legal obligations.
  • Content Data: Retained in accordance with your subscription plan and our data retention policies.
  • Backups: Data may remain in backups for a limited period before being deleted.

Upon request, we will delete or anonymize your personal information, unless we are required to retain it to comply with legal obligations.

9. Your Choices and Rights

9.1. Access and Correction

You may access, update, or correct your personal information by logging into your account or contacting us directly.

9.2. Opt-Out

  • Marketing Communications: You can opt-out of receiving promotional emails by following the unsubscribe instructions in those emails or contacting us.
  • Cookies: You can set your browser to refuse all or some browser cookies or to alert you when cookies are being used.

9.3. Data Portability and Deletion

Subject to applicable laws, you may:

  • Request a Copy: Obtain a copy of your personal data in a structured, commonly used, and machine-readable format.
  • Request Deletion: Ask us to delete your personal data, subject to certain exceptions.

9.4. Object to Processing

You may object to our processing of your personal data when we rely on legitimate interests as the legal basis.

9.5. Withdraw Consent

If we process your personal data based on your consent, you may withdraw your consent at any time.

9.6. Lodging Complaints

You have the right to lodge a complaint with a data protection authority if you believe our processing of your personal data violates applicable laws.

10. Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect and use personal information about you, including:

  • Essential Cookies: Required for the operation of our Services.
  • Functional Cookies: Enhance the functionality and personalization of our Services.
  • Analytics Cookies: Help us understand how you interact with our Services.
  • Marketing Cookies: Enable us to deliver relevant advertisements to you.

You can manage your cookie preferences through your browser settings

11. Children’s Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

12. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

13. Data Processing Agreement

When you use our Services to process personal data, you acknowledge that we act as a data processor on your behalf. We will process such data in accordance with our Data Processing Agreement, which is incorporated into this Privacy Policy.

14. User Responsibilities

You are responsible for:

  • Accuracy of Information: Ensuring that the information you provide is accurate and up-to-date.
  • Security of Credentials: Safeguarding your account credentials and preventing unauthorized access.
  • Compliance with Laws: Abiding by applicable laws and regulations when using our Services.
  • Obtaining Consent: Acquiring necessary consents from data subjects before submitting their personal data to our Services.
  • Prohibited Data: Refraining from submitting sensitive personal data or content that violates our Terms of Service.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting a Notice: Displaying a prominent notice on our website.
  • Email Notification: Sending an email to the address associated with your account.

Your continued use of our Services after the effective date constitutes acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

17. Data Protection Officer and EU Representative

If required under applicable law, you may contact our Data Protection Officer (DPO) or EU Representative at:

18. California Privacy Rights (For California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

  • Right to Know: Request information about the categories and specific pieces of personal information we have collected.
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out: Opt-out of the sale of your personal information.
  • Right to Non-Discrimination: Exercise your privacy rights without fear of discrimination.

To exercise your rights, please contact us at privacy@verigen.ai

19. European Economic Area (EEA) and UK Users

If you are located in the EEA or the UK, you have the following additional rights under the GDPR and UK GDPR:

  • Right to Access: Obtain confirmation of whether we process your personal data and request access to your personal data.
  • Right to Rectification: Request correction of inaccurate personal data.
  • Right to Erasure: Request deletion of your personal data, subject to certain exceptions.
  • Right to Restriction of Processing: Request restriction of processing of your personal data.
  • Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: Object to processing of your personal data based on legitimate interests.
  • Automated Decision-Making: We do not engage in automated decision-making, including profiling, that produces legal effects concerning you.

20. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant regulatory authorities as required by applicable law.

21. Manage Your Consent Preferences

You can manage your consent preferences for the storage and usage of your data. Please use the checkboxes below to update your consent settings.