This Privacy Policy describes how Veritatlas ("COMPANY," "we," "us," or "our") collects, uses, shares, and protects the personal information of users of our software-as-a-service platform, website, and associated applications (collectively, the "Services"). We recognize the critical importance of privacy, particularly given the evidentiary nature of the cryptographic protocols underlying our platform.
1. Information We Collect
We collect information necessary to provide, secure, and improve our Services, and to comply with legal obligations.
1.1 Personal Identifiers: Including name, email address, physical address, and telephone number, collected during account registration and verification processes.
1.2 Cryptographic & Evidentiary Data: Photographic captures, video recordings, geolocational metadata, device telemetry (accelerometer, gyroscope data), and cryptographic signatures generated dynamically over the course of your usage of the Services.
1.3 Technical Data: IP addresses, browser types, operating systems, referring URLs, device identifiers, and log data pertaining to your interaction with the Services.
1.4 Financial Data: Billing information, processed solely by third-party payment gateways (e.g., Stripe). We do not store raw credit card numbers on our servers.
2. Use of Information
The information we collect is strictly utilized for the following business and commercial purposes:
2.1 Provision of Services: To facilitate the creation of independently verifiable, tamper-evident digital records for property, fleet, and gig-work verification.
2.2 Security & Integrity: To prevent fraud, detect malicious activity, and enforce our Terms of Service. Geolocation and telemetry data are explicitly used to validate the authenticity of media captures.
2.3 Communication: To send administrative notices, platform updates, security alerts, and customer support communications.
2.4 Legal Compliance: To comply with applicable laws, respond to lawful subpoenas, court orders, and regulatory inquiries.
3. Data Sharing and Disclosure
We do not sell your personal information to third parties. We may disclose your data only under the following limited circumstances:
3.1 Authorized Third-Party Verifiers: If you utilize our Services to generate verifiable evidence (e.g., condition reports) for a specific third party (e.g., a property manager, gig platform, or rental agency), that specific data will be shared with them by your explicit action.
3.2 Service Providers: We engage trusted third-party vendors to assist in operating our platform (e.g., cloud hosting infrastructure, payment processing). These entities are contractually bound by strict confidentiality and data protection obligations.
3.3 Legal Obligations: When required by law, subpoena, or valid legal process, or to protect the rights, property, and safety of Veritatlas, our users, or the public.
3.4 Corporate Transactions: In connection with a merger, acquisition, restructuring, or sale of assets, data may be transferred as a business asset, subject to ongoing commitments to this Privacy Policy.
4. European Economic Area (EEA), UK, and California Residents
Depending on your jurisdiction (e.g., GDPR in the EEA/UK, CCPA in California), you possess specific rights regarding your personal data. These include the rights to access, rectify, delete ("right to be forgotten"), restrict processing, and data portability. To exercise these rights, please contact our Data Protection Officer at legal@veritatlas.com. We will process requests in accordance with applicable statutory timelines.
5. Data Retention
We retain personal information and evidentiary captures only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law or necessary for the establishment, exercise, or defense of legal claims. Captures designated for long-term evidentiary storage are maintained under cryptographic seal.
6. Security Measures
We implement state-of-the-art technical, physical, and administrative security measures designed to protect your data from unauthorized access, disclosure, alteration, and destruction. While the core of our platform relies on cryptographic verification to guarantee data immutability, no transmission system over the internet is completely infallible. We disclaim absolute guarantees of security but consistently align with industry best practices (e.g., SOC2 Type II, ISO 27001 standards where applicable).
7. Contact Information
If you have inquiries, concerns, or requests relating to this Privacy Policy or our data processing practices, please direct your correspondence to our legal department: