Privacy Policy

Updated: 2 July 2026 Effective: 2 July 2026

Veridion understands that you care about how information about you is used. This Privacy Policy (the "Policy") explains how we process personal information — including information relating to business people ("Business Information") and all other categories of personal information — through our online services (the "Services"), website, applications, APIs, the API Playground, the Market Research tool, and any other product or interface we operate (collectively, the "Site"). It describes how we maintain, use, and share that information, and how you can manage the way information about you is handled.

"Veridion," "we," "us," and "our" refer, for the purposes of this Policy, to Soleadify Inc., a Delaware corporation, together with its affiliates, including Dataworks Research SRL (Bucharest, Romania), which operates Veridion's European data hosting and privacy operations.

I. Introduction

This brief summary is intended to help you quickly understand who Veridion is, how you can opt out of our database, and the potential outcomes of remaining in our database.

Veridion collects publicly available information about companies — displayed on the web, on company websites, on company social media profiles, and in the press — to build structured profiles of businesses. We provide this information to our customers, who are businesses that use it for their own business-to-business activities such as procurement, supplier discovery, risk management, insurance underwriting, market intelligence, and marketing.

You can opt out of our database at any time by contacting us at privacy@veridion.com. You may also submit an access request or ask us to update your profile information. Our full contact details appear in the "Contact Us" section at the end of this Policy.

By remaining in our database, you may be contacted by our customers when they conduct their business-to-business activities. Communications you receive from our customers may relate to your profession or employment role, but we cannot guarantee that you will find them relevant or of interest.

II. How We Collect Information

A. Where does Veridion get the Business Information for its company profiles?

Veridion builds profiles of companies. Once we have collected Business Information about a company, we may combine multiple data points into a single company profile. The resulting directory of company profiles (the "Directory") is made available to users of the Site, to our customers, and to our strategic partners. Personal information that may appear in a company profile can include a name, business email address (and other email addresses, including "freemail" addresses such as Gmail, Yahoo, or Hotmail), job title and department, phone numbers (general, direct, fax, or mobile), company name, and the company's postal address. Company profiles may also include links to articles by, about, or quoting an individual, and links to an individual's public social media profiles.

Veridion obtains the data for its company profiles by scanning the web and gathering publicly available information.

B. Customer Information

Information we collect from customers. Veridion may collect the following from or about its customers and account holders: (1) personal contact information regarding users of the Services ("User Information"); (2) information uploaded to or otherwise provided to our systems by a user ("Uploaded Information"); (3) usage logs regarding use of the Site and Services, including logins and other actions taken, timestamps, IP address, API tokens used, endpoints called, query parameters, records returned, credit consumption, and other usage data ("Usage Logs"); and (4) any other information from or relating to users of our Services ("Related Information") (collectively, "Customer Information").

Certain users may be granted access to the Site through a company's license or account agreement. That company may require that one or more of its users have administrative rights to access information about every user under that company's Veridion account. Questions about other individuals' rights to access your information should be directed to your company.

How we use Customer Information. We use Customer Information for Veridion's legitimate business interests in connection with your use of the Site, including to: respond to inquiries and fulfil requests; complete transactions and administer accounts, credits, and billing; provide customer support; send administrative information; personalize your experience; understand our users generally; and test, develop, improve, and secure our Services and Site. We may use Customer Information to contact you about services, promotions, and other information about Veridion. We may also use Customer Information — including API Usage Logs — to monitor for, investigate, and prosecute potential breaches of our security, our Terms & Conditions, or our Acceptable Use Policy (for example, to detect scraping, credit abuse, sharing of trial tokens, or unauthorized redistribution of data).

Veridion will not disclose Customer Information to any third party except in connection with a legitimate use set out in this Policy, in connection with a bona fide legal dispute, in response to valid compulsory legal process, in response to a valid data subject request where required by law, or as otherwise required by law. Where we disclose Customer Information to a service provider, we will, wherever possible, obtain confidentiality commitments and ensure the recipient employs appropriate technical security measures. We employ reasonable security and backup procedures to protect Customer Information.

C. Account registration, trials, and the API Playground

Account registration. To use certain Services you may need to create an account (for example on our developer portal, on scout.veridion.com, or on explore.veridion.com). When you register we collect your name, business email address, company, job title, and the credentials needed to authenticate you.

Trial API tokens. When you create an account we may issue you a trial API token with a limited allocation of free credits. We log how that trial token is used, including the endpoints called, volume of queries, records returned, and credits consumed. We use this information to operate and support the trial, to detect abuse (such as key sharing or use of trial data in production or public-facing products, which is prohibited under our Terms & Conditions and Acceptable Use Policy), and to help you and our sales team assess fit.

The API Playground. Our Site includes an interactive API Playground where you can send test queries and see live Veridion data in the response. When you use the Playground we process the queries you submit and log associated usage data as described above. Data returned in the Playground is Veridion's proprietary data made available to you for evaluation and testing only, on the terms set out in our Terms & Conditions and Acceptable Use Policy.

The Market Research tool. Our Site includes a Market Research tool that surfaces Veridion company data in an interactive interface. When you use it we process your searches, filters, and selections, and log associated usage data. As with the Playground, data made available through the Market Research tool is Veridion's proprietary data provided for evaluation and internal analysis only, subject to our Terms & Conditions and Acceptable Use Policy.

D. Information submitted through our Site

Visitors may choose to submit their name, email address, phone number, and other information to learn more about our Services, register for an event, take part in a survey or contest, download a data sample, or apply for a role. By accessing, using, or submitting information through the Site — including by filling out forms, whether or not the form is ultimately submitted — you consent to the practices described in this Policy. If you do not agree with this Policy, please do not submit information through the Site.

E. Information provided by our customers

We receive information about our customers' end users from or on behalf of our customers. Because of the nature of our Services, this information may contain any type of data but typically includes name, contact information, and company information. Any information provided through a website, application, or service on which a customer uses our Services is subject to that customer's privacy policy and terms. When we provide Services to a customer, we generally act as a "data processor" and the customer is the "data controller," as further described in "When Veridion is a Controller" and "When Veridion is a Processor" below.

F. Purchases

Purchasers of subscription-based Services may need to provide payment information. We use that information solely to fulfil the purchase, store it in encrypted form, and will not sell, share, or reuse it without prior consent (except as described under "Disclosures to Service Providers," "Disclosures for Legal Reasons," and "Disclosures to a Buyer of the Company").

G. Automated collection

We also collect information using cookies and similar technologies, as described in our separate Cookie Policy.

III. How We Use Information

In addition to the uses described above, we may use Business Information and other personal information to:

• provide, maintain, secure, and improve the Site;
• verify, cleanse, update, and maintain Business Information and other information;
• deliver the Services, process transactions, administer credits, and send related communications and invoices;
• send technical notices, updates, security alerts, and support and administrative messages;
• respond to comments, questions, and requests, and provide support;
• create and administer accounts and authenticate users;
• monitor and analyze trends, usage, and activity, including to detect and prevent scraping, abuse of trial tokens and credits, and unauthorized use or redistribution of our data;
• detect, investigate, and prevent fraud and other illegal or prohibited activity;
• protect the rights and property of Veridion, our customers, and others;
• communicate about products, services, offers, and events;
• create aggregated, inferred, anonymized, or pseudonymized data (rendered non-personal and non-identifiable) that we and our partners may use to provide and improve services;
• comply with our contractual and legal obligations, resolve disputes, and enforce our agreements; and
• carry out any other purpose described at the time the information was collected.

IV. How We Share Information

Company profiles. We may make Business Information available to users of the Site, to our strategic partners, and to our customers.

Affiliates. We may share Business Information with our affiliates — including current and future parents, subsidiaries, and companies under common control with Veridion (such as Dataworks Research SRL) — for any purpose set out in this Policy.

Service providers. We may disclose Business Information or other collected information to service providers solely to operate the Site and provide the Services — for example, payment processors, hosting and infrastructure providers, analytics providers, and our CRM (such as HubSpot). These providers may act on our behalf only for the purposes we specify.

Legal reasons. We may disclose collected information if we believe in good faith that disclosure is necessary or desirable to: (i) comply with lawful requests, subpoenas, warrants, or orders; (ii) address a violation of law or of our agreements; (iii) protect the rights, property, or safety of Veridion, our users, or the public; (iv) exercise our legal rights or respond to a legal claim; or (v) respond to data subject requests as required by law.

Business transfers. If Veridion or substantially all of its assets are acquired, or in the event of a merger or bankruptcy, information about you may be among the transferred assets.

V. Cookies and Similar Technologies

Our Site uses cookies and similar technologies. A full description of the cookies we use, their purposes, and how you can control them is set out in our separate Cookie Policy.

VI. Your Choices

A. Changing or deleting information about you

Access. To access the information Veridion has collected about you, email privacy@veridion.com. Once we have verified your identity, we will provide a report of the information we hold.

Removal. To remove your personal data from the Site, email privacy@veridion.com. Your information will be removed from our search results as soon as reasonably possible.

B. Company information

To view, verify, or update a Veridion company profile — including company description, industry, or location — contact directory@veridion.com. As a general policy, Veridion does not remove company (as opposed to individual) information from its search engine; if company information is incorrect, please update the profile or contact us.

C. Opting out of communications

You can opt out of our newsletter and promotional communications by following the unsubscribe instructions in each message. We will confirm when you have been unsubscribed.

VII. How We Keep Information Secure

Information security matters to us. We follow generally accepted industry standards to protect information both in transit and at rest, and we host EEA-origin personal data on servers located in the European Union. However, no method of internet transmission or electronic storage is completely secure, so while we strive to use commercially acceptable means to protect information, we cannot guarantee absolute security.

VIII. Data Retention

We retain personal information for as long as is consistent with the purposes for which we collected it, including: (i) for as long as we have an ongoing relationship with the relevant individual; (ii) as long as needed to provide the Services to users, customers, or partners; (iii) as necessary to comply with our legal obligations; (iv) as necessary to resolve or protect against disputes; and (v) as necessary to enforce our agreements. Retention periods reflect the amount, nature, and sensitivity of the information and the purposes of processing. After the retention period ends, we delete the information or put measures in place to prevent its further use.

IX. Links to Other Sites

The Site contains links to sites we do not own or control. We are not responsible for the privacy practices of those sites and encourage you to read their privacy statements. This Policy applies only to information collected by our Site.

X. Social Media Features

The Site may include social media features and widgets. These may collect your IP address and the page you visited, and may set a cookie to function. Interactions with these features are governed by the privacy policy of the company providing them.

XI. Information for Users in Europe and Elsewhere Outside the U.S.

If you use our Site outside the United States, please understand that we may collect, process, and store personal information in the United States and other countries where we or our affiliates or subprocessors maintain facilities. EEA-origin personal data is hosted within the European Union, as described above.

A. Users in the EEA, the UK, and Switzerland

Veridion endeavours to comply with the General Data Protection Regulation ("GDPR"), the UK GDPR, and the Swiss Federal Act on Data Protection as to information it holds about EEA-, UK-, and Switzerland-based individuals ("data subjects"). We process personal information only where we have a lawful basis to do so.

Legal bases for processing:

• consent (for example, website visitors who submit their information);
• performance of a contract to which the data subject is party, or pre-contractual steps;
• compliance with a legal obligation to which we are subject; or
• the legitimate interests of Veridion or a third party — including our customers' and partners' interests in procurement, supplier discovery, risk, insurance, and marketing activities, and Veridion's interest in organizing and making available company profiles — given the limited impact that use of Business Information presents to an individual's private life.

International transfers. Where we transfer personal data to a third country, we rely on appropriate safeguards under Article 46 GDPR, such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, together with any supplementary measures required. (Note: this Policy no longer relies on the EU-US or Swiss-US Privacy Shield frameworks, which are no longer valid mechanisms for transfers.)

Your rights. Subject to applicable law and identity verification, EEA, UK, and Swiss data subjects have the right to: access their personal information and receive a copy; request correction or completion; request restriction of processing; request erasure; object to processing (including profiling and direct marketing); and data portability. To exercise these rights, or to lodge a complaint, contact privacy@veridion.com. You also have the right to lodge a complaint with your local supervisory authority.

When Veridion is a Controller. Veridion acts as a data controller when it collects and uses information about visitors to our Site, and when it creates and maintains company profiles and provides the Services. Our Data Protection Officer can be reached at privacy@veridion.com.

When Veridion is a Processor. When our customers use the Services, they act as the data controller and are responsible for ensuring personal information is processed lawfully — including providing notice to and, where required, obtaining consent from their end users, and handling data subject requests. In those circumstances Veridion acts as a data processor and processes information on the customer's instructions. Our obligations as a processor are defined in our agreements with customers and are not covered by this Policy. In certain circumstances Veridion may act as an independent controller in connection with providing the Services.

XII. U.S. State Privacy Rights

Depending on your state of residence, you may have rights under laws such as the California Consumer Privacy Act (as amended by the CPRA), the Virginia Consumer Data Protection Act, and similar state laws — including the rights to know, access, correct, delete, and opt out of certain processing, and the right not to be discriminated against for exercising these rights. To exercise these rights, contact us using the details in the "Contact Us" section.

XIII. Do Not Track Signals

Browsers and devices may offer "Do Not Track" functionality. Our information collection and disclosure practices, and the choices we provide, operate as described in this Policy whether or not a Do Not Track signal is received.

XIV. Children's Privacy

The Site is not directed to individuals under 16, and we do not knowingly collect personal information from them. If we learn we have collected information from someone under 16, we will take steps to delete it. Contact privacy@veridion.com with any concerns.

XV. Changes to this Policy

We may modify this Policy from time to time. If we make material changes, we will notify you here, by email, and/or by a notice on our homepage before the changes take effect. Continued use of the Site after an update constitutes acceptance of the updated Policy.

XVI. Contact Us

For questions or concerns about this Privacy Policy, or to exercise your rights, contact us at:

Veridion Soleadify Inc. — Registered agent office: 3500 South Dupont Highway, Dover, Kent County, Delaware 19901, USA Dataworks Research SRL — Sky Tower, 20th Floor, Calea Floreasca 246C, Bucharest, Romania (EU operations & privacy)

Email: privacy@veridion.com