Privacy Policy

1. Introduction

This Privacy Policy describes how Sean Kopen, operating as VerdAict ("VerdAict," "we," "us," or "our"), collects, uses, discloses, and protects your personal information when you use the VerdAict platform and website (the "Service").

VerdAict is operated in Alberta, Canada, and is subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We are committed to protecting your privacy and handling your data transparently.

By using the Service, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

Account information. When you create an account, we collect your name, email address, and password (or authentication credentials if you sign in via Google SSO).

Payment information. When you subscribe to a paid plan, payment is processed by Stripe. VerdAict does not store your full credit card number, CVV, or bank account details. We receive and store a transaction reference, billing address, and the last four digits of your card for your records.

User Content. When you use the Service, you may upload creative materials, campaign briefs, messaging, ad copy, images, or other content ("User Content") for AI focus group testing. See Section 4 for how we handle User Content.

Communications. If you contact us via email or a contact form, we collect the information you provide in that communication.

2.2 Information Collected Automatically

Usage data. We collect information about how you interact with the Service, including pages visited, features used, session frequency, test types selected, and timestamps.

Device and browser data. We collect your IP address, browser type and version, operating system, device type, and referring URL.

Cookies and similar technologies. See Section 8 (Cookie Policy) for details.

3. How We Use Your Information

To provide and operate the Service: processing your User Content through AI models to generate focus group feedback, enabling post-test conversation, managing your account, and maintaining your session archive.

To process payments: managing subscriptions, billing, and credit allocations through Stripe.

To communicate with you: sending account confirmations, subscription notices, support responses, and Service-related announcements. We will not send marketing communications without your explicit opt-in consent.

To improve the Service: analyzing usage patterns, diagnosing technical issues, and improving features and performance. This analysis uses aggregated and anonymized data. We do not use your User Content or session Output to train, fine-tune, or improve AI models. See Section 4 for details.

To ensure security and prevent abuse: detecting fraud, enforcing our Terms of Service, and protecting the rights and safety of our users and the Service.

To comply with legal obligations: responding to lawful requests from authorities and meeting our obligations under applicable law.

3.1 AI Processing Disclosure

When you run a session, your User Content is transmitted to OpenAI's APIs for AI processing. OpenAI processes the content as a service provider on VerdAict's behalf and does not retain User Content for model training or any other purpose beyond delivering session output.

4. User Content and Output

4.1 No Training Use

VerdAict does not use your User Content (including uploaded creative materials, briefs, images, or text) to train, fine-tune, or otherwise improve AI models. Your content is processed solely to deliver your session results.

4.2 Retention

Content retention depends on your subscription tier:

• Free / Trial: User Content and Output are retained for up to 30 days following the session, then permanently deleted.
• Solo: User Content and Output are retained in your session archive for up to 90 days from the session date, then permanently deleted.
• Studio: User Content and Output are retained in your session archive for up to 180 days from the session date, then permanently deleted.
• Agency: User Content and Output are retained in your session archive for up to 365 days from the session date, then permanently deleted.
• Enterprise: Retention periods for Enterprise arrangements are defined in the applicable Enterprise agreement and may exceed the standard periods above.
• Account deletion: All User Content and Output are permanently deleted within 30 days of account deletion.

4.3 Confidentiality

We understand that User Content may include confidential or pre-release creative work. We treat User Content as confidential and do not share it with other users or make it publicly accessible. Disclosure is limited to what is necessary to operate the Service (e.g., transmission to AI infrastructure providers for processing) and as required by law.

5. Third-Party Service Providers

We share personal information with the following categories of service providers, who process data on our behalf and are contractually bound to use it only for the purposes we specify:

Provider	Purpose	Data Shared
OpenAI	AI processing for session generation	User Content (transmitted for processing; not retained by OpenAI for training or other purposes)
Stripe	Payment processing	Payment method details, billing address, transaction data
Cloudflare	Application and data hosting	All Service data
Resend	Transactional email delivery	Email address, name
Google Analytics (GA4)	Website and product analytics	Usage data, device/browser data, IP address (anonymized)

6. Cross-Border Data Transfers

Your personal information may be transferred to and processed in countries outside of Canada, including the United States (where OpenAI, Stripe, and Cloudflare operate infrastructure) and the European Union (where Resend operates infrastructure). By using the Service, you consent to this cross-border transfer. We rely on contractual safeguards with each of these providers to ensure your personal information is protected in accordance with Canadian privacy standards.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls limiting employee access to personal information on a need-to-know basis
• Regular review of security practices

No method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Cookie Policy

This section serves as VerdAict's cookie policy. We use cookies and similar technologies as follows:

8.1 Essential Cookies

These cookies are necessary for the Service to function and cannot be disabled. They include session authentication cookies and security tokens.

8.2 Analytics Cookies

We use Google Analytics (GA4) to understand how visitors interact with our website and Service. GA4 collects usage data including pages visited, session duration, and general geographic region. We have configured GA4 with the following privacy settings:

• IP anonymization is enabled
• We do not enable Google Signals, User-ID, or advertising features
• We do not share analytics data with Google for advertising purposes

8.3 Your Choices

Most browsers allow you to control cookies through their settings. You can refuse or delete cookies, though this may affect the functionality of the Service. For analytics specifically, you can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

9. Your Rights

Under PIPEDA and applicable Canadian privacy law, you have the right to:

Access your personal information. You may request a copy of the personal information we hold about you.

Correct your personal information. You may request correction of any inaccurate or incomplete personal information.

Withdraw consent. You may withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. Withdrawal of consent may result in our inability to provide the Service to you.

Delete your account and data. You may request deletion of your account and associated personal information by contacting us or using the account deletion feature within the Service.

To exercise any of these rights, contact us at privacy@verdaict.ai.

We will respond to access and correction requests within 30 days, as required by PIPEDA. If we need additional time, we will notify you of the reason for the extension.

9.1 Right to Complain

If you believe we have not handled your personal information appropriately, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

10. Children's Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a minor, we will take steps to delete that information promptly.

11. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Privacy Policy:

• Account information: Retained while your account is active and for 30 days after account deletion.
• Payment records: Retained for 7 years in accordance with Canadian tax record retention requirements.
• User Content and Output: Retained according to your subscription tier (see Section 4.2).
• Communications: Retained for as long as needed to resolve your inquiry and for a reasonable period thereafter.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. For material changes, we will provide at least 30 days notice via email or a prominent notice within the Service. Your continued use of the Service after the effective date of any update constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Privacy Inquiries
VerdAict (Sean Kopen, operating as VerdAict)
16735 110 St NW, Edmonton, Alberta, Canada
privacy@verdaict.ai

For general support inquiries, contact support@verdaict.ai.