Privacy Policy changed Verda, Nov 9, 2026

1. +Added: Thank you for choosing to be part of our community at Verda ("Verda", "we", "us", or "our"). Your privacy is important, and we are committed to respecting it.
2. -Removed: Thank you for choosing to be part of our community at Verda, ("Verda", "we", "us", or "our"). Your privacy is important, and we are committed to respecting it.
3. +Added: When you use our services as our customer and we process the data you provide on your behalf, such processing is governed by our Terms & Conditions , which integrates the Data Processing Terms ("DPA") .
4. +Added: If you are applying for a role at Verda, please refer to our separate Candidate Privacy Policy , which describes how we process candidate data throughout the hiring process.
5. -Removed: When you use our services as our customer and we process the data you provide on your behalf, such processing is governed by our Terms & Conditions , which integrates Data Processing Terms (DPA).
6. -Removed: If you are applying for a role at Verda, please refer to our separate Recruitment Privacy Notice , which describes how we process candidate data throughout the hiring process.
7. +Added: First and last name, email address, city, country, street address, post/zip code and phone number, and other similar contact details you provide when registering, contacting us, or participating in activities on our Sites.
8. -Removed: First and last name, email address, city, country, street address and phone number, and other similar contact details you provide when registering, contacting us, or participating in activities on our Sites.
9. +Added: Data needed to process your payments, such as your payment instrument number (e.g., credit card number) and security code. Payment data (other than those with invoice-based payment) are processed by the third party vendor- Stripe . We only get billing information and not your payment data.
10. +Added: Records of chats, messages, emails or communications with us when you reach out for support or assistance. For customer support chat we use a third party vendor- Front . For email exchange we use Google Workspace .
11. +Added: We automatically collect some technical information when you visit our Sites or use our Services. This data helps us ensure the security, stability, and reliable performance of our platform and Services.
12. -Removed: Data needed to process your payments, such as your payment instrument number (e.g., credit card number) and security code. Payment data (other than those with invoice-based payment) are processed by the third party vendor-Stripe, and therefore their privacy policy applies. We only get billing information and not your payment data.
13. -Removed: Records of chats, messages, emails or communications with us when you reach out for support or assistance. For customer support chat we use the third party vendor Front and therefore their Products and Services Privacy Notice also applies. For email exchange we use Google Workspace and their privacy policy also applies.
14. +Added: Content and materials you choose to receive or interact with when subscribing to marketing emails, newsletters, updates, or promotional materials. To manage these communications, we use third party vendor. You may update your communication preferences at any time.
15. -Removed: Content and materials you choose to receive or interact with when subscribing to marketing emails, newsletters, updates, or promotional materials. To manage these communications, we use HubSpot , and their privacy policy also applies. You may update your communication preferences at any time.
16. +Added: Enable interactions between users where applicable. (e.g, via Discord and forum)
17. -Removed: Enable interactions between users where applicable (e.g., via Discord and forum).
18. +Added: Where we store your personal data depends on where you use our services and which Verda entity provides them to you. We generally process personal data within the European Economic Area (EEA). If you use our services through one of our entities in another region, such as the U.S. or U.K., your personal data may be stored and processed in that region instead.
19. +Added: We use third party vendors for some support services, such as support chat via Front, Payments via Stripe, and so forth. These vendors may process data outside of the EEA or the UK but under appropriate data processing agreements and GDPR-based mechanisms.
20. +Added: Data you upload and process on our platform through our services is stored in the region you select, and the Data Processing Terms in our Terms and Conditions govern how it's handled.
21. +Added: In short: We take privacy and security seriously. We try our best to protect your data through certified safeguards, comprehensive privacy compliance framework, and we also encourage you as a user, to take measures to protect your data on your end.
22. +Added: We strive to protect your personal data with a combination of organizational, technical, and administrative measures designed to prevent unauthorized access, misuse, or loss. Our infrastructure and practices are built on internationally recognized standards, including ISO 27001 , ISO 27017, ISO 27018, ISO 27701, SOC 2 type II and C5 type II (More information about Verda's compliance posture is available on our Trust Center ) and we are fully committed to privacy compliance. This includes measures such as:
23. +Added: Encryption of data in transit (TLS/SSH).
24. -Removed: Our main cloud infrastructure activities, including data you upload and process into our cloud services, remain within the EEA .
25. -Removed: We use third party vendors/sub-processors for some support services, such as support chat via Front, Payments via Stripe, and so forth. These sub-processors may process data outside of the EEA but under appropriate Data Processing Agreements and GDPR-based mechanisms.
26. -Removed: To maintain full transparency, all of our sub-processors, where they store data, and the specific purposes for which data may be transferred to them are listed on our Trust Center page.
27. -Removed: In short: We take privacy and security seriously. We try our best to protect your data through certified safeguards, GDPR compliance, and we also encourage you as a user, to take measures to protect your data on your end.
28. -Removed: We strive to protect your personal data with a combination of organizational, technical, and administrative measures designed to prevent unauthorized access, misuse, or loss. Our infrastructure and practices are certified under ISO 27001 , and we are fully committed to GDPR compliance. This includes measures such as:
29. -Removed: Encryption of data in transit (TLS/SSH);
30. +Added: Training : Our staff receive annual privacy and security training.
31. -Removed: Training : Our staff receive annual GDPR and security training.
32. +Added: YOUR PRIVACY RIGHTS in EEA and U.K
33. +Added: In short: If you are in the European Economic Area (EEA), the United Kingdom or in other regions with similar data protection laws you have specific rights regarding your personal data. As a European company we comply with the General Data Protection Regulation and the UK GDPR (EU GDPR and UK GDPR collectively being "GDPR"), which provide comprehensive privacy responsibilities and rights. These rights give you more control over how your information is used. You can exercise these rights by adjusting your settings in your account or contacting us at privacy [at] verda.com .
34. -Removed: In short: If you are in the European Economic Area (EEA) or other regions with similar data protection laws (e.g. UK GDPR , CCPA in California) you have specific rights regarding your personal data. As a European company we comply with the General Data Protection Regulation (GDPR), which provides comprehensive privacy responsibilities and rights. These rights give you more control over how your information is used. You can exercise these rights by adjusting your settings in your account or contacting us at [email protected] .
35. +Added: You can delete your account and ask us to erase related personal data. Upon your request to terminate your account, we will deactivate or delete your account and information from our databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with legal requirements.
36. -Removed: You can ask us to delete your account and related personal data. Upon your request to terminate your account, we will deactivate or delete your account and information from our databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with legal requirements.
37. +Added: Processing on your behalf: When we process data that you upload or run on our platform, your rights in relation to that data are governed by our Data Processing Terms , which form part of our Terms and Conditions .
38. +Added: In short: Depending on the U.S. state you reside, you may have certain rights over your personal data under state privacy laws. You can exercise these rights by contacting us at privacy [at] verda.com . The exact scope of these rights varies by state.
39. +Added: Ask us what personal data we collect about you and how we use or share it. This covers the categories of personal data we collected, where it came from, why we collected or shared it, and the categories of third parties we disclosed it to. Depending on your state, you can make this request up to twice in a 12-month period.
40. +Added: Request a copy of the specific personal data we hold about you, in a readily usable format. This does not include data generated to keep our services secure or data we hold as required by law.
41. +Added: Ask us to correct inaccurate personal data. We will verify your identity first and use commercially reasonable efforts to make the correction. You can make this request at any time.
42. +Added: Ask us to delete the personal data we collected from you, at any time. We may keep some information where necessary to complete a transaction or perform a contract with you; detect, prevent or prosecute security incidents, fraud or illegal activity; use it internally in ways you would reasonably expect as our customer (such as maintaining sales records); or comply with legal obligations.
43. +Added: Tell us not to sell your personal data. We already do not sell your personal data, for money or for any other valuable consideration.
44. +Added: Opt out of having your personal data shared for cross-context behavioral advertising. We do not share your personal data for this purpose. This does not include using your interactions with us or information that you provide to us to select advertisements to show you.
45. +Added: Limit how we use or disclose Sensitive Personal Data (as defined under applicable law) to the purposes disclosed when it was collected.
46. +Added: We will not discriminate against you for exercising any of these rights.
47. +Added: If we deny your request, you can appeal our decision by emailing privacy [at] verda.com .
48. +Added: You can name an authorized agent to make a request for you. To do this, you must give the agent written, signed permission and verify your own identity directly with us. We may deny a request from an agent who cannot prove they are acting for you.
49. +Added: Some browsers and extensions can send a GPC signal to opt you out of certain processing, such as data "sales". When we detect this signal, we will make reasonable efforts to respect it as required by applicable law.
50. +Added: How we handle your request: To protect you, we need to verify your identity before we act on a request. We may ask for information that confirms you are the person whose data we hold, and we will use it only for that purpose. We may also ask for a signed statement, under penalty of perjury, that you are who you say you are. We will confirm we received your request within 10 days and aim to respond within 45 days. If we need more time (up to another 45 days), we will tell you. If we cannot verify your identity or confirm that the personal data relates to you, we cannot respond to your request.
51. +Added: DO WE SHARE YOUR INFORMATION WITH THIRD PARTIES?
52. +Added: In short: We might share your data within Verda group companies and with third parties (our sub-contractors/service providers) when strictly necessary to deliver our services (e.g. for payment processing), and they are bound by contractual obligations to protect data according to privacy and security standards. We may also disclose data when strictly required by law. We never sell your personal data to third parties .
53. +Added: We believe your data belongs to you. If we ever receive a lawful request for your information, for example, from a court or government authority, we will only comply where strictly legally required. And if that request concerns your data, we'll let you know, unless the law prevents us from doing so. At this time, we have not received any requests of such types.
54. -Removed: Processing on your behalf: When we process data that you upload or run on our platform, your rights in relation to that data are also governed by our Data Processing Terms , which form part of our Terms and Conditions .
55. -Removed: Do we share your information with anyone?
56. -Removed: In short: We might share your data with our sub-processors when strictly necessary to deliver our services (e.g. for payment processing), and they must follow the same privacy and security standards that we do. We may also disclose data when strictly required by law. We never sell your personal data to third parties .
57. -Removed: We believe your data belongs to you. If we ever receive a lawful request for your information, for example, from a court or government authority, we will only comply where strictly legally required. And if that request concerns your data, we'll let you know right away, unless the law prevents us from doing so. At this time, we have not received any requests of such types.
58. +Added: Sub-processors are our carefully chosen partners who help us run our services. We check their security and privacy measures before trusting them with your data and they have contractual obligations to protect it.
59. -Removed: Sub-processors are our carefully chosen partners (for example, hosting, monitoring, or analytics, payment processing providers) who help us run our services. We check their security and privacy measures before trusting them with your data and they have contractual obligations to protect it.
60. +Added: We apply the principle of data minimization under, this shortly means:

15 more changed paragraphs are on the page itself.