Privacy policy

vareon.com is part of Vareon, Inc., Irvine, California, and in this policy “Vareon”, “we” and “us” mean Vareon, Inc.

This policy applies when Vareon decides how personal data is used for vareon.com, contact and sales conversations, customer account administration, billing, and support. In those situations, Vareon acts as a controller.

When Vareon processes product data for a Duplex customer, the customer agreement and data-processing terms define the parties’ roles and instructions. The customer is typically the controller and Vareon is its processor where Vareon receives that data. In customer-cloud and no-cloud placements, Vareon generally receives product data only when the customer provides access or support material.

A third party’s own processing, including by a model provider, identity provider, payment provider or a website reached through a link, is governed by that party’s privacy terms. Review those terms before using its service.

The data involved depends on how a person or customer interacts with Vareon:

• ·Contact data: name, work email, organisation, role, message, and any files or other information a person chooses to send.
• ·Account and administration data: name, email, organisation, account identifiers, role, identity-provider details, access status, and records needed to administer a customer relationship.
• ·Billing data: billing contacts, purchase and invoice details, payment status, and payment tokens or references returned by a payment provider. Vareon does not store full card numbers when a payment provider handles the transaction.
• ·Technical and security data: routine request and security records such as IP address, browser or device information, timestamps, and events needed to protect and operate the website or customer account.
• ·Preference data: a light or dark appearance choice stored in a first-party cookie, and a session value that records whether the homepage introduction has played.
• ·Support data: diagnostic information, correspondence and product material a customer chooses to provide for support. Customers should use the agreed support channel and share only the data Vareon needs.

Vareon receives personal data directly from the person, from the customer organisation that creates or manages an account, from an identity or payment provider used for that relationship, and from routine operation of the website and customer services.

Vareon uses personal data to respond to messages and requested information; assess product fit; prepare evaluations, security reviews, and quotes; create and administer customer access; provide support; process billing; protect the website and services; prevent abuse; maintain business records; and comply with law.

Depending on the context and applicable law, the legal basis is taking steps at a person’s request, performing a contract, Vareon’s legitimate interests in operating and protecting its business and communicating with customers, compliance with a legal obligation, or consent. Where Vareon relies on legitimate interests, it considers the effect on the people involved.

Where processing relies on consent, consent may be withdrawn for future processing. Processing that was lawful before the withdrawal remains lawful.

The public website sets the vareon-theme cookie only when a visitor chooses light or dark appearance. It is configured to expire after one year. Choosing the system setting removes it. The homepage also uses session storage to record, for the current browser session, that its introduction has played.

A customer console may use cookies or browser storage that are strictly necessary for sign-in, security and requested features. The public website uses no analytics or advertising trackers and sets no analytics or advertising cookies.

Vareon does not sell personal data, share it for cross-context behavioural advertising or use it for targeted advertising.

Vareon does not use website contact data or customer account data to train AI models.

Each customer’s product data is kept separate from other customers’ data. Its permitted processing is defined by the customer agreement and data-processing terms, and its deployment controls are described on Security and deployment.

Vareon may disclose personal data to service providers used for hosting and compute, identity and authentication, and billing. Those providers process data for the relevant service under their agreements with Vareon. The providers used for a customer deployment, and any required subprocessor terms, are addressed in the applicable customer documents.

Vareon may also disclose information when reasonably necessary to comply with law or legal process; protect people, rights, or services; investigate abuse; establish or defend legal proceedings; or complete a financing, acquisition, reorganisation, or sale subject to appropriate confidentiality and legal requirements.

Vareon and its service providers may process personal data in countries other than the country where it was collected. Where transfer rules apply, the relevant service terms or customer documents identify the transfer basis and safeguards required for that processing.

Vareon keeps personal data for as long as reasonably necessary for the purpose for which it was collected, including the customer relationship, security, dispute handling, and legal, tax, accounting, or recordkeeping obligations. The period depends on the data and context, so it varies by category.

When data is no longer needed, Vareon deletes or de-identifies it where reasonably practicable. Limited copies may remain in backups or records that must be kept by law until those copies are overwritten or the applicable obligation ends. The appearance cookie has the expiry described above.

Vareon uses administrative, technical, and organisational measures intended to protect personal data, including access controls and encryption in transit. Product deployments also keep each customer separate and use placement-specific controls. No transmission or storage method is completely secure, and this policy does not state that Vareon holds a certification. See Security and deployment For current product information.

Depending on applicable law, a person may have rights to access, correct, delete, restrict, object to processing, receive a portable copy, withdraw consent, or opt out of a sale, sharing, or targeted advertising. Vareon does not currently sell personal data or use it for targeted advertising.

To make a request, use the Contact page And identify the request, the email or account involved, and the relevant jurisdiction. Vareon may request information needed to confirm identity and authority. An authorised agent may submit a request where applicable law permits it.

Vareon will handle a valid request as required by applicable law. Legal exceptions may apply. Where available, a person may appeal a decision about a request or complain to the data-protection authority in the place where they live or work.

The website and Duplex are intended for business use and are not directed to children. Vareon does not knowingly collect personal data from children through the public website. If you believe a child has provided personal data, contact Vareon so the situation can be reviewed and appropriate action taken.

Vareon may update this policy as its practices or legal requirements change. The date above shows the latest revision. If a change materially affects an existing customer relationship, any additional notice required by the applicable agreement or law will be provided through the relevant channel.

For a privacy question or request, use the Contact page.