Privacy Policy

Veridue AI, Inc. ("we") operates the Veridue platform. This policy explains how we handle personal data.

Our role

For our website, marketing and account administration we are a controller. For personal data contained in documents our customers upload to the platform, we are a processor acting on the customer’s instructions; that processing is governed by our Data Processing Agreement, and the customer, or the party it acts for, is the controller.

What we collect

Account and contact details (name, work email, employer, role); usage data (log data, device and browser information, feature usage); communications with us; and cookies as described in our Cookie Policy. Documents uploaded to the platform may contain personal data belonging to third parties; we process this only as a processor.

Why we use it, and our legal basis

To provide and administer the platform and support individual self-serve customers, where necessary to perform our contract with them; to administer business customer accounts, provide access to customer personnel and invited users, support the platform and protect its security, where necessary for our legitimate interests and those of our customers; to analyse the platform and prevent fraud (legitimate interests); to send marketing where you have opted in (consent); and to meet legal obligations (legal obligation).

Who we share it with

Our service providers and sub-processors, including hosting and AI model providers, listed at veridue.ai/legal/sub-processors; professional advisers; and authorities where required by law. We do not sell personal data.

AI model providers

We use third-party AI models to generate outputs. These providers are contractually prohibited from using content sent to them to train their models.

International transfers

Where personal data leaves the UK or EEA we rely on an appropriate safeguard under applicable data protection law, such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision. You can request details of the safeguard we rely on by contacting privacy@veridue.ai.

Retention

Account data is kept for the life of the account and for 12 months afterwards. Content uploaded to or created in the platform is kept for the subscription term; customers may download it for 30 days after termination, and we delete it at the end of that period, including any export we have produced. Copies may persist in routine encrypted backups until those expire in the ordinary backup cycle, and we retain data where the law requires us to. Information we have anonymised so that no one can be identified from it is not personal data, and we may keep and use it indefinitely.

Your rights

You may request access, correction, deletion, restriction, portability, or object to processing, and may withdraw consent at any time. Where we act as a processor we will refer your request to the relevant customer. Contact privacy@veridue.ai. You may complain to the UK Information Commissioner’s Office or your local supervisory authority.

California and other US states

If you are a California resident you may request disclosure or deletion of personal information and may opt out of sale or sharing. We do not sell or share personal information as those terms are defined. Where we process personal information for a customer we act as a service provider and do not retain, use or disclose it outside the direct business relationship.

Contact

Veridue AI, Inc., Fora, Montacute Yards, Shoreditch, London. privacy@veridue.ai. Last updated: 4 September 2026.