Privacy Policy
This document describes what personal data VerdictIQ processes, why, for how long, and the rights you have. It complements the operational details on the Trust page.
Scope and roles
VerdictIQ acts as a data controller for visitors of the marketing website (verdictiq.io) and as a data processor for IOCs and metadata that customers submit to the enrichment API under their own contracts.
This policy covers the marketing website. The processor relationship for API customers is governed by the Data Processing Agreement (DPA) included in the customer contract.
Data we collect
Information you provide: messages composed through the contact form (name, email, company, message), demo requests, support correspondence, and account-related details if you sign up for the product. The contact form on the website opens your local mail client with the message prefilled; we receive your message only after you press send.
Information collected automatically: IP address, browser and device type, referrer, pages visited, and approximate region. We use this to operate the site, prevent abuse, and improve content.
We do not place advertising trackers and we do not sell personal data.
How we use it
To respond to your requests (sales, demo, support).
To operate, secure, and improve the website and product.
To meet legal obligations and to prevent fraud or abuse.
We do not use website data to train any machine-learning model.
Lawful basis (GDPR)
Consent for optional cookies and marketing communications.
Contract performance for paid customers.
Legitimate interests for site operation, security monitoring, and abuse prevention.
Legal obligation where applicable.
Retention
Contact form and sales correspondence: kept for the time needed to respond and for a reasonable follow-up window, then archived or deleted.
Operational logs: kept for a short rolling window for security and abuse-detection purposes.
Aggregated, de-identified analytics: may be kept longer with no individual-level identifiers.
Sharing
We do not sell or rent personal data.
We do not share customer-submitted IOCs or query results with third-party processors for the core enrichment service. See the Trust page for the data-path explanation.
We disclose data when required by law, in response to a valid legal request, or to protect our rights and the safety of our users.
Your rights
Under GDPR you may request access, correction, deletion, portability, restriction, or objection regarding your personal data, and you may withdraw consent where processing relies on it.
Submit requests to privacy@verdictiq.io. We respond within the GDPR statutory window (30 days).
If you are in the EEA you may also lodge a complaint with your local supervisory authority.
International transfers
Where personal data is processed outside your home jurisdiction, we rely on standard contractual clauses or other legally recognized safeguards.
Cookies
We use a minimal set of cookies needed to operate the site and remember preferences. Optional cookies (analytics) require consent and can be withdrawn at any time from the cookie banner.
Changes to this policy
We may update this policy from time to time. The Last reviewed date at the top reflects the latest substantive change. Material changes will be communicated through the website.
Contact
Privacy questions and data subject requests: privacy@verdictiq.io.
General legal: legal@verdictiq.io.