Privacy Policy

1. Introduction

At Verydash (“we”, “our”, or “us”), we are committed to protecting your privacy and ensuring you have a positive experience on our website and in using our products and services. This Privacy Policy applies to our website and our suite of industry solutions (collectively, the “Services”).

2. Information We Collect

We collect information about you in the following ways:

• Information You Provide: Name, email address, company name, billing information, and any data you submit via our platforms.
• Automatically Collected Information: IP addresses, browser types, usage data, and device information collected via cookies and similar technologies.
• Third-Party Data: Information from integrated services (e.g., Salesforce, Slack) if you explicitly authorize those connections.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Services.
• Process transactions and send related information, including confirmations and invoices.
• Improve, personalize, and expand our Services, including training our predictive AI models (using anonymized, aggregated data only).
• Communicate with you regarding updates, security alerts, and support messages.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with trusted third-party service providers who assist us in operating our Services (e.g., AWS for hosting, Stripe for payments), provided they agree to strict confidentiality and security requirements.

5. Data Security

We take the security of your data seriously and apply industry-standard safeguards across our infrastructure:

• Infrastructure: Our services are hosted on AWS within isolated Virtual Private Clouds (VPCs), with strict firewall rules enforced at every ingress and egress point.
• Encryption: Data in transit is encrypted using TLS 1.3 with Perfect Forward Secrecy. Data at rest, including databases and backups, is encrypted using AES-256, with keys managed and rotated via AWS KMS.
• Compliance: We maintain a clean SOC 2 Type II report and align our data handling practices with GDPR and CCPA. Our MedFlow healthcare solution offers Business Associate Agreements (BAAs) and HIPAA-ready environments.
• Vulnerability Management: We run continuous automated vulnerability scans, contract independent security firms for bi-annual penetration tests, and maintain a responsible disclosure program.

To request a copy of our latest SOC 2 report or ask a security question, email team@verydash.com.

6. Your Rights

Depending on your location (e.g., GDPR in Europe, CCPA in California), you may have the right to access, correct, delete, or restrict the processing of your personal data. To exercise these rights, please contact us at team@verydash.com.