Privacy Policy

1. Information we collect

Information you provide directly. When you contact us, request a demo, or create an account, we collect the information you provide. This may include your name, email address, company name, job title, and message.

Usage information. When you visit the VeriProof website or use our platform, we collect standard log data including IP address, browser type, pages visited, and referring URL. We use this information for security and service improvement purposes.

Platform data. When you use the VeriProof platform, we process Proofs submitted through the capture SDK. This data is processed under the terms of your customer agreement and the Data Processing Agreement applicable to your deployment. See Section 4 for more detail.

2. How we use your information

We use the information we collect to:

• Respond to inquiries and provide customer support
• Fulfill our contractual obligations under platform agreements
• Send service communications and system notifications
• Improve the security and functionality of our platform
• Comply with legal obligations we are subject to

We do not sell personal information to third parties. We do not use customer platform data for product development, analytics, or any purpose other than platform operation and legal compliance.

3. Information sharing

We share personal information only in the following circumstances:

Service providers. We use third-party vendors to operate infrastructure, communications, and business operations. These vendors process personal information only as directed by us and under data processing agreements.

Legal requirements. We will disclose information when legally required, including for valid legal process, regulatory demands, or protection of our legal rights.

Business transfers. In the event of a merger, acquisition, or sale of substantially all assets, personal information may be transferred to a successor entity, subject to the privacy commitments in this policy.

We do not share customer platform data (Proofs) with any third party except as required to operate the platform infrastructure under your customer agreement.

4. Customer platform data

Proofs submitted to the VeriProof platform are processed under the terms of your customer agreement and the associated Data Processing Agreement (DPA). Key terms:

• Evidence data is logically isolated per tenant
• RJR Labs staff cannot access tenant evidence data without a documented support escalation
• Evidence data is used only for platform operation and legal compliance, never for analytics, product development, or any secondary purpose
• Data residency region is selected by the customer at account setup

If you are a customer and have questions about your platform data, contact your account manager or email info@rjrlabs.com.

5. Data subject rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information. To make a request:

Email info@rjrlabs.com with “Privacy Request” in the subject line, a description of your request, and information sufficient to verify your identity. We will respond within 30 days.

6. Data security

We implement organizational and technical security measures designed to protect personal information against unauthorized access, disclosure, alteration, and destruction.

No method of transmission or storage is 100% secure. We encourage you to use strong passwords and to report suspected security issues to info@rjrlabs.com.

7. Cookies and tracking

The VeriProof website uses essential cookies for session management and security. We do not use advertising or cross-site tracking cookies. We use limited analytics to understand traffic patterns and improve the site. You may disable cookies in your browser settings; some site functionality may be affected.

8. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the effective date and notify customers by email where required. Continued use of our platform after the effective date constitutes acceptance of the updated policy.

9. Contact

For privacy questions, data subject requests, or concerns:

RJR Labs LLC info@rjrlabs.com