Privacy Policy

1. Introduction

Verdan ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our construction workforce management platform.

2. Information We Collect

Personal Information

We may collect personal information that you provide, including:

• Name, email address, phone number
• Company name and job title
• Profile photos and signatures
• Worker certifications and credentials
• Sign-in/sign-out times and location data

Automatically Collected Information

When you use our Service, we automatically collect:

• Device information (type, operating system, browser)
• IP address and general location
• Usage data and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use collected information to:

• Provide and maintain our Service
• Process worker sign-ins and generate daily logs
• Verify insurance and credential compliance
• Send important notifications and alerts
• Improve and personalize user experience
• Analyze usage patterns and optimize performance
• Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information with:

• Your Organization: Data is shared with your employer/contractor as part of the workforce management features
• Service Providers: Third parties that help us operate the Service (hosting, analytics, email delivery)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for marketing purposes.

For GDPR and procurement review, see our Subprocessor Inventory, which lists service providers, data categories, retention notes, processing regions, and DPA references.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, secure data centers, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this policy. We may also retain certain information as required by law or for legitimate business purposes (e.g., compliance records, audit trails).

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability
• Withdraw consent where applicable

To exercise these rights, contact us at privacy@verdansafety.com

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

Verdan's pilot production environment is currently hosted in the United States and does not automatically route tenant data to an EU-only database or storage region. Customers requiring EU-only hosting must have a separate regional deployment commitment before production onboarding.

SMS delivery through Bird (and the legacy Telnyx inbound keyword webhook until it is retired) may leave vendor-managed telecom delivery logs outside Verdan's automated delete flow. Phone-number deletion requests that require provider log handling are processed through a manual Bird or Telnyx privacy request within the applicable DPA response SLA.

For installed mobile apps, account deletion sends a best-effort force-logout-and-wipe signal so the app can clear offline cache on receipt or next foreground. The server cannot synchronously reach an offline device; if the app has been uninstalled, the mobile operating system removes the app cache.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: