Privacy and data protection.

Effective date: September 24, 2026. This Privacy Policy applies to information processed by VeriFund through its public website, platform, account services, customer support, demonstrations, and related business activities, except where a separate written agreement or privacy notice expressly applies.

1. Scope and applicability

This Privacy Policy applies to personal information processed by VeriFund in connection with visitors to the VeriFund website, prospective customers, authorized platform users, customer representatives, vendors, service providers, and other individuals who interact with VeriFund. Where VeriFund processes information on behalf of an organization using the platform, that organization may determine the purposes and means of certain processing activities, and its own privacy notices, contractual terms, or legal obligations may also apply.

2. Information we collect

Depending on how you interact with VeriFund, we may collect information that you provide directly, information generated through your use of the services, and limited information obtained from authorized third parties. This may include your name, business contact information, organization, job title or role, account credentials, authentication information, support communications, demonstration requests, billing and subscription information, records submitted through platform workflows, and other information you choose to provide.

We may also collect technical and usage information such as IP address, device and browser information, session information, access timestamps, security events, authentication activity, application interactions, diagnostic information, and other data reasonably necessary to operate, maintain, secure, and improve the services.

3. Financial and payment information

VeriFund may process billing, invoice, payment-status, transaction-reference, reconciliation, and related financial records required to provide the services. Where electronic payment processing is made available through an external payment provider, certain sensitive payment credentials may be transmitted directly to or handled by that provider rather than stored by VeriFund. VeriFund is designed to minimize unnecessary collection and storage of highly sensitive payment credentials.

4. How we use personal information

We may use personal information to provide, administer, operate, maintain, secure, and improve the VeriFund website and platform; create and manage user accounts; authenticate users; administer organizational permissions; process customer requests; provide customer support; manage subscriptions and billing; maintain financial and operational records; deliver requested communications; investigate security events; prevent fraud, abuse, and unauthorized access; enforce agreements and policies; comply with applicable legal obligations; protect the rights, property, and safety of VeriFund, its customers, users, and others; and support legitimate internal business operations.

5. Legal bases for processing

Where applicable law requires a legal basis for processing personal information, VeriFund may process information as necessary to perform or enter into a contract, comply with legal obligations, protect legitimate interests, protect vital or legal interests, establish or defend legal claims, or based on consent where consent is required. The legal basis applicable to a particular processing activity may depend on the nature of the relationship, the information involved, and the jurisdiction in which the individual is located.

6. Cookies and similar technologies

VeriFund may use cookies, session technologies, local storage, or similar mechanisms that are necessary for website operation, authentication, security, preferences, performance, and related functionality. Where analytics, advertising, or other non-essential tracking technologies are used and applicable law requires consent or an opt-out mechanism, VeriFund will seek to provide the appropriate notice or control.

7. Disclosure of personal information

VeriFund may disclose personal information to service providers, contractors, professional advisers, payment providers, communications providers, security providers, infrastructure providers, analytics providers, and other parties that perform services on VeriFund's behalf or support the operation of the platform. Such disclosures are limited to information reasonably necessary for the applicable purpose and may be subject to contractual, confidentiality, security, or other legal protections.

VeriFund may also disclose information when required by law, regulation, subpoena, court order, governmental request, legal process, or other lawful authority; when reasonably necessary to investigate fraud, security incidents, or violations of law or contract; to protect legal rights or safety; or in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable legal requirements.

8. Sale, sharing, and targeted advertising

VeriFund does not characterize ordinary disclosures to service providers acting on its behalf as a sale of personal information. Certain privacy laws may define terms such as "sale," "share," or "targeted advertising" more broadly. To the extent VeriFund engages in activities that are subject to those definitions, applicable notices and rights will be provided as required by law.

9. Data retention

VeriFund retains personal information for as long as reasonably necessary to provide the services, maintain business and financial records, comply with contractual and legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud and abuse, and support legitimate business purposes. Retention periods may vary depending on the type of information, the applicable customer relationship, legal requirements, security considerations, and operational needs.

10. Data security

VeriFund uses administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, acquisition, disclosure, alteration, loss, misuse, or destruction. These measures may include access controls, role-based permissions, authentication safeguards, encrypted communications, separation of organizational data, logging, monitoring, integrity controls, restricted administrative access, backup procedures, and recovery measures. No system or method of electronic transmission or storage can be guaranteed to be completely secure, and VeriFund does not warrant absolute security.

11. Account and organizational data

Organizations using VeriFund may submit or maintain information relating to their personnel, operations, financial activities, compliance processes, records, and other business matters. Access to such information is subject to applicable account permissions and organizational controls. Customers are responsible for ensuring that information they submit to VeriFund is collected, used, and disclosed lawfully and that they have all rights, permissions, notices, and consents required for such information.

12. Your privacy rights

Depending on your jurisdiction and subject to applicable law, you may have rights relating to your personal information, including the right to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent. You may also have the right to appeal certain privacy decisions or to opt out of certain forms of processing where applicable. These rights are not absolute and may be subject to legal exceptions, identity verification, retention obligations, contractual requirements, or other limitations permitted by law.

13. United States state privacy rights

Residents of certain U.S. states may have additional privacy rights under applicable state law. Where such laws apply to VeriFund and the relevant individual or processing activity, VeriFund will process valid requests in accordance with applicable legal requirements. VeriFund will not discriminate against an individual for exercising a privacy right protected by applicable law.

14. International users and cross-border processing

If you access or use VeriFund from outside the United States, your information may be processed in the United States or other jurisdictions in which VeriFund or its authorized service providers operate. Where required by applicable law, VeriFund will use appropriate mechanisms intended to support lawful cross-border transfers of personal information.

15. Children's privacy

VeriFund is intended for organizational, professional, and business use and is not directed to children under 13. VeriFund does not knowingly seek to collect personal information directly from children through the public website or ordinary account-registration process. If VeriFund becomes aware that personal information has been collected from a child in circumstances requiring parental consent or other legal authorization, VeriFund may take appropriate steps to delete or restrict the information as required by law.

16. Third-party websites and services

The VeriFund website or platform may contain links to, integrate with, or permit access to third-party websites, applications, payment services, or other external services. VeriFund is not responsible for the privacy, security, content, or practices of third parties acting independently of VeriFund. Users should review the privacy policies and terms applicable to those services.

17. Security incidents and legal notifications

VeriFund maintains processes intended to identify, investigate, contain, and respond to security events. If a security incident involving personal information gives rise to a legally required notification obligation, VeriFund will provide notice to affected parties, customers, regulators, or other persons as required by applicable law and contractual obligations.

18. Changes to this Privacy Policy

VeriFund may update this Privacy Policy from time to time to reflect changes in its services, legal requirements, security practices, business operations, or data-processing activities. The effective date shown above will be updated when material revisions are published. Where required by law, VeriFund may provide additional notice of material changes.

19. Contact and privacy requests

Questions, concerns, or requests relating to this Privacy Policy or the handling of personal information may be submitted through the VeriFund contact page. VeriFund may request information reasonably necessary to verify identity, authority, or account relationship before responding to a privacy request.

This Privacy Policy is intended to describe VeriFund's privacy practices and does not create contractual rights beyond those required by applicable law or expressly provided in a separate written agreement.