Privacy Policy
Last updated: 2026-09-17
This Privacy Policy explains how [Company Legal Name] ("we", "us") collects, uses, and protects personal data when you use the Verendix platform, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Czech law.
1. Data Controller
The data controller is [Company Legal Name], registration no. [IČO], registered seat at [Registered Address]. Contact regarding data protection: [privacy@verendix.com].
2. Data We Collect
Account data (name, email, hashed password, account type); Task and review Content you submit or produce; Reviewer verification data (professional credentials, licensing body, uploaded credential documents); payment data processed by Stripe (we do not store full card numbers); and technical data (log data, IP address, device/browser information) collected automatically.
3. Legal Bases for Processing
We process personal data on the following legal bases under GDPR Art. 6: performance of the contract with you (operating your account, matching Tasks, processing payments); our legitimate interest (fraud prevention, Platform security, service improvement); your consent (optional marketing communications, where applicable); and compliance with legal obligations (tax and accounting records).
4. How We Use Your Data
We use personal data to operate and improve the Platform, match Posters with qualified Reviewers, process payments and payouts, verify Reviewer credentials, communicate with you about your account and Tasks, and comply with applicable law.
5. Sharing With Third Parties
We share data with service providers acting as processors on our behalf: Stripe (payment processing and Reviewer payouts), Neon (database hosting), and Vercel (application hosting). These providers are contractually bound to process data only as instructed and to apply appropriate security measures. We do not sell personal data.
6. International Transfers
Some processors may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
7. Data Retention
We retain account and Task data for as long as your account is active and for a reasonable period afterward to resolve disputes, enforce our Terms, and comply with legal (including tax) retention obligations. Credential documents are retained only as long as needed for verification and Platform record-keeping.
8. Your Rights Under GDPR
You have the right to access, rectify, or erase your personal data; to restrict or object to processing; to data portability; and to withdraw consent at any time where processing is based on consent. To exercise these rights, contact us at [privacy@verendix.com]. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ) or your local supervisory authority.
9. Cookies
We use essential cookies required for authentication and Platform functionality, and, where applicable, optional analytics cookies subject to your consent via our cookie banner. You can manage cookie preferences in your browser settings.
10. Security
We apply technical and organizational measures — including encryption in transit, access controls, and hosting with reputable infrastructure providers — to protect personal data against unauthorized access, loss, or misuse. No system is completely secure, and we encourage you to use a strong, unique password.
11. Children
The Platform is not directed at individuals under 18, and we do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via the Platform or by email at least 14 days before taking effect.
13. Contact
For any privacy-related question or request, contact [privacy@verendix.com].