Last updated: October 6, 2026.
This Privacy Notice explains how VeriCord ("VeriCord," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information in connection with this website, the VeriCord platform, sales, support, and related services (the "Services"). It should be read with the terms of use and the cookie policy.
Information we collect
Account and business contact data. Name, business email, company, job title, phone number, and account identifiers, from you, your employer, or a workspace administrator.
Authentication and access data. Sign-in events, IP address, device and browser data, and access logs, collected automatically when you use the Services. Sign-in may use a magic link or a passkey.
Transaction data. Plan, invoices, billing contact, and payment status. Payment-card data is handled by our payment processor. We receive limited billing records such as the plan, status, and a payment reference. We do not store full card numbers.
Project metadata and review content. Project and file names, document metadata, discipline tags, review settings, drawings, specifications, extracted text, candidate findings, reviewer decisions and rationales, and questions you ask about a review. This material may include personal information if it is present in the documents you upload.
Support and communications. Support requests, feedback, and the name, email, and message you send through the contact page.
Usage and diagnostics. Feature usage, performance data, error logs, and audit events, collected automatically from the Services.
Website data. Pages viewed, referral data, and the cookies and similar storage described in the cookie policy.
Plans, specifications, files, prompts, and project materials may contain personal or confidential information. When VeriCord processes that information on behalf of a business customer, VeriCord generally acts as a service provider or processor under the customer's instructions and the applicable agreement.
How we use information
We use personal information to:
- Provide, authenticate, operate, secure, support, and improve the Services.
- Create and administer accounts, subscriptions, reviews, and customer workspaces.
- Process project documents and generate the analyses, findings, and responses you request.
- Respond to support, security, billing, and sales inquiries.
- Monitor reliability, prevent fraud or abuse, and investigate security incidents.
- Comply with law, enforce agreements, and protect rights and safety.
- Send service communications and, where permitted, business communications about the Services.
AI and model processing
Customer Content is not used to train third-party foundation models, and it is not used to train shared models for other customers, unless the customer expressly agrees in writing. Model providers named on the subprocessors list process content only to return the result of a request. Our approach to automated review is described in the AI and data governance statement.
How we disclose information
We disclose information to the service providers and subprocessors listed at subprocessors that support hosting, infrastructure, model processing, authentication, payments, communications, monitoring, support, and security. We may also disclose information to professional advisers, in connection with a corporate transaction, or when required to comply with law or to protect rights and security.
We share review content inside a workspace with members who have access to that workspace.
Sale and advertising
VeriCord does not sell personal information. We do not sell customer or project data, and we do not use customer project data for targeted advertising or for cross-context behavioral advertising. We do not use personal information for targeted advertising, and we do not sell or share it as those terms are defined by the California Consumer Privacy Act.
Retention
We retain personal information only as long as reasonably necessary for the purposes in this Notice, to provide the Services, meet contractual requirements, resolve disputes, enforce agreements, maintain security and audit records, and comply with law.
Account and review information is kept while the account or workspace is active, and then for a limited period to complete deletion, resolve disputes, and meet accounting and security duties. A specific project-data retention period will be stated here when the production schedule is confirmed. Until then, deletion follows the applicable customer agreement and a request made through the contact page. Backup copies may persist for a limited additional period according to backup cycles. Payment records are kept for the period required by tax and accounting rules.
You may ask us to delete your account. Deletion removes the personal information we control, except for records we must keep by law. Information in another member's workspace is controlled by that workspace until the workspace is deleted.
Security
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, use, alteration, loss, and disclosure. No system is completely secure, and we cannot guarantee absolute security. Additional information is on the security page.
Your privacy rights
Depending on where you live, you may have the right to request access, correction, deletion, or portability, to object to or restrict certain processing, to withdraw consent, to appeal a denial, and to complain to a supervisory authority.
To submit a request, use the contact page. We may need to verify your identity and authority before acting. You can also update account details in your settings.
Where the GDPR or a similar law applies, we rely on contract to provide the account and the reviews you request, on legitimate interests to secure the Services and prevent abuse, on consent where we ask for it (including non-essential cookies), and on legal obligation where we must keep or disclose information.
U.S. state privacy
Where a state privacy law applies to VeriCord and is not exempt, you may use the rights above. Whether a particular statute applies depends on VeriCord's activities and the statutory thresholds. This Notice does not add a state-specific appeal process beyond the contact path above until counsel confirms which statutes apply.
Cookies
The public website uses essential cookies and, if enabled, analytics or similar technologies, as described in the cookie policy. Essential cookies do not require a separate consent where the law treats them as strictly necessary. Where the law requires consent or an opt-out before non-essential tracking, we ask before those cookies are stored.
International transfers
Our providers may process information in the United States and other countries where they operate. Where the law requires a safeguard for a transfer, we use an approved mechanism such as standard contractual clauses. Enterprise customers may request transfer terms through a data processing addendum.
Children
The Services are intended for business and professional use and are not directed to children. VeriCord does not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us and we will delete it.
Changes
We may update this Notice from time to time. Material changes will be posted on this page, and the date above will change. If a change materially reduces your rights, we will provide a more prominent notice.
Contact
Privacy questions and requests can be sent through the contact page.