Validere

Privacy Policy Overview — Validere Technologies

Effective date: December 3, 2024

Applies to: Validere’s websites, mobile/desktop applications, and products and services.

> This is a plain-language summary, not legal advice. Some rights and provisions depend on your location and whether you use Validere for an organization.

1. Data Collection & Usage

Information collected

Validere may collect:

• Account information: Name, email address, usernames/handles, contact details, birth date or identifying business number.
• Information you submit: Content and personal information provided through emails, calls, forms, support requests, and other communications.
• Usage and technical data: IP address, geographic location, browser type, pages visited, device identifiers, and other usage information.
• Cookies and analytics data: Cookies and tools such as Google Analytics may track how you use the services. Analytics providers may combine this information with data collected elsewhere under their own privacy policies.
• Feedback and engagement: Comments, questions, and interactions may be analyzed to understand user preferences and improve or tailor the services.

Some information is optional, but required information—such as name and email for an account—may be necessary to access particular features. Users are responsible for keeping submitted information accurate and current.

Purposes

Validere uses information to:

• Provide, operate, support, improve, test, and monitor its services
• Establish commercial relationships and verify identity in connection with oil-testing operations
• Process payments and provide customer service
• Develop products and features
• Remember preferences and improve user experience
• Enforce policies, protect business and customer interests, prevent fraud, and comply with law
• Create aggregated or de-identified information, which Validere may use or disclose for any purpose in its discretion

2. User Rights

Depending on location, users may have rights to:

• Access and obtain a copy of their information
• Correct or update inaccurate information
• Delete or erase information
• Restrict or object to certain processing
• Receive portable information
• Withdraw consent, subject to legal or contractual limits
• Avoid discrimination for exercising privacy rights
• Object to decisions based solely on automated processing (under EU/UK rules)
• Complain to a data protection authority (under EU/UK rules)

California residents also have rights to know what information is collected, its sources and purposes, deletion, portability, and non-discrimination. Validere states that it does not sell personal information to third parties under the CCPA.

Requests may require identity verification. Validere may charge a reasonable fee for legally invalid, repetitive, or excessive requests. Withdrawing consent or refusing information may limit access to services.

3. Third-Party Sharing

Validere says it does not sell or lease personal information to third-party marketers or provide it to third parties for their independent use, except as described in the policy.

Information may be shared with:

• Affiliates and service providers/subprocessors performing services on Validere’s instructions, including hosting, storage, data processing, professional, and administrative services
• Parties involved in a sale, merger, or amalgamation, subject to confidentiality obligations
• Authorities or other parties where legally required, including in response to warrants or valid legal orders
• Parties where necessary to protect people or property, investigate suspected breaches or fraud, collect money owed, pursue or defend legal claims, or handle insurance claims
• Other parties with the user’s consent

4. AI/ML Training

The policy does not state whether personal information, user content, feedback, or service data is used to train artificial-intelligence or machine-learning models. It permits product development, testing, analytics, and creation of aggregated/de-identified data, but does not expressly address AI training or provide a specific opt-out.

Users seeking certainty should request clarification from Validere, particularly regarding submitted content, feedback, and de-identified data.

5. Key User Obligations and Restrictions

Users must:

• Be at least 18 years old
• Provide accurate, complete, and up-to-date information
• Accept the policy to use the services; continued use after changes constitutes consent
• Manage cookies through browser settings, recognizing that disabling them may impair functionality
• Understand that use may involve international transfers, including to the United States
• If acting for an organization, comply with the organization’s agreement and applicable retention requirements

6. Liability & Disputes

This privacy policy does not contain a detailed liability disclaimer, governing-law clause, arbitration requirement, court-selection clause, or dispute-resolution process. It does state that information may be disclosed to establish, exercise, or defend legal claims and to limit Validere’s potential damages.

The policy’s security language is qualified: Validere “endeavors” to maintain appropriate safeguards, but does not promise absolute security. The separate service agreement, terms of use, and any Data Processing Agreement may contain the main liability and dispute provisions.

7. Changes to the Policy

Validere may revise the policy by posting an updated version on its website and changing the effective date. For significant changes, it says it will take additional steps to notify users. Continued use after posting means consent to the revised policy, so users should periodically review the policy.