Welcome to vrdAI, a product and service offered by Aureai Labs LLC, a Wyoming, United States–based company (“vrdAI”, “we”, “our”, or “us”). This Privacy Policy is intended to inform you—our users, customers, visitors, and collaborators (“you” or “your”)—about how we collect, use, store, and disclose your personal information when you interact with our website, software, APIs, applications, and all other digital offerings (collectively, the “Service”).

vrdAI is committed to safeguarding the privacy of its users, but we also emphasize that your use of this platform is at your sole risk and responsibility. This Privacy Policy is presented in accordance with applicable data protection laws, including but not limited to the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR) for international users, and other applicable United States federal and state laws.

By accessing or using the Service, you acknowledge and agree to the practices outlined in this Privacy Policy. If you do not agree with this Policy or any part of it, your only remedy is to discontinue use of the Service.

vrdAI is designed primarily for users located in the United States, but may be accessed by users globally. By using the Service from outside the U.S., you expressly consent to the transfer, processing, and storage of your information in the United States, which may not offer the same data protection standards as your country of residence. If you are not comfortable with these practices, you should not use the Service.

This Privacy Policy is a binding agreement. It should be read in conjunction with our Terms of Service, which collectively govern your use of the Service. In the event of any conflict between this Policy and our Terms, the provisions of the Terms of Service will prevail.

We may update this Privacy Policy periodically. The “Last Updated” date at the top reflects the most recent revision. We encourage you to review this page frequently to remain informed about how we are protecting your information.

Important Note:

While we take privacy and data security seriously, we expressly disclaim any liability for damages, direct or indirect, arising from access, use, misuse, breach, or exposure of personal data on the platform beyond what is required under applicable law.

This Privacy Policy applies to all users of the vrdAI platform, including but not limited to:

• Individual users accessing our platform for personal or professional use
• Business users or organizations utilizing our services through enterprise or API access
• Visitors to our website, whether or not they register for an account
• Contributors submitting feedback, content, or queries through any means (e.g., email, contact forms, embedded tools)

This Policy governs the collection, use, storage, disclosure, and protection of personal and non-personal information obtained through:

• Our main website and all associated domains and subdomains
• Our software platforms, including browser-based apps, APIs, and integrated services
• Communications between you and vrdAI, including emails, helpdesk queries, and customer service interactions
• Any associated third-party platforms where vrdAI operates content, including but not limited to third-party app marketplaces, plugins, or integrations

What This Policy Covers

This Privacy Policy specifically governs:

• What types of data we collect and how
• How we use, share, and retain that data
• Your rights and choices with respect to your information
• The limits of our responsibility and legal liability with regard to data

What This Policy Does Not Cover

This Policy does not apply to:

• Third-party websites, tools, platforms, or content not controlled by vrdAI, even if accessed through links on our platform
• Any third-party providers (e.g., payment processors, authentication tools, analytics platforms) that may collect or use data independently
• Offline data collection unless specifically mentioned

While we aim to engage only with service providers who maintain industry-standard security and privacy practices, we are not responsible for the actions, omissions, or privacy policies of third parties.

Jurisdictional Reach

vrdAI is operated in the United States, under the jurisdiction of the State of Wyoming, and our platform is designed to comply with U.S. privacy standards. However, due to the global nature of the internet, this Policy applies to all users worldwide to the extent allowed by applicable law.

If you are accessing our platform from a jurisdiction with stricter data protection laws (e.g., European Union, UK, Canada, etc.), you acknowledge and agree that your data will be handled in accordance with this U.S.-centric policy, and that your legal remedies may be limited to those available under U.S. law—unless otherwise mandated by the governing authority or international treaty.

Notice to International Users

By using our platform, you consent to the collection, transfer, storage, and processing of your information in and to the United States and any other country where we or our affiliates, subsidiaries, or service providers maintain facilities, even if the level of data protection in such countries is not equivalent to that of your jurisdiction.

vrdAI collects various categories of information in order to provide, improve, and secure our services, ensure legal compliance, and enable a customized user experience. We aim to collect only the data that is necessary for legitimate business and operational purposes.

The types of information we may collect fall into the following primary categories:

a. Personally Identifiable Information (PII)

This refers to any data that identifies you or could reasonably be used to identify you, such as:

• Full name
• Email address
• Phone number (if voluntarily submitted)
• Username or account identifier
• Mailing or billing address (if applicable)
• IP address (when reasonably linked to a user profile)
• Payment-related data (processed via secure third-party gateways and not stored directly by us)

b. Account and Authentication Data

When you register, log in, or connect with third-party platforms (e.g., Google, Microsoft, Apple), we may collect:

• Account credentials (email, encrypted password, API key, etc.)
• Linked account identifiers (OAuth tokens, external user IDs)
• Time stamps of access and login/logout behavior

c. User-Generated Content

Depending on how you use vrdAI, you may provide or generate content which may contain personal or sensitive information. This includes:

• Prompts, queries, documents, uploads, or files submitted by you
• Messages, responses, and output generated from AI interactions
• Comments or feedback provided through surveys or contact forms

d. Technical and Device Data

We collect certain technical data automatically when you use our platform, such as:

• Device type (desktop, mobile, tablet)
• Browser type and version
• Operating system and version
• Language and time zone
• Referrer URLs and link history

This information helps us optimize performance, troubleshoot issues, and protect against unauthorized access or abuse.

e. Usage and Interaction Data

To improve the user experience and measure product performance, we may collect:

• Clickstream data (navigation patterns, features used)
• Duration of session and frequency of access
• Engagement metrics (e.g., frequency of prompt usage, depth of feature interaction)

f. Support and Communication Logs

When you contact us (via email, chat, or helpdesk), we may store:

• The content of your messages
• Any attachments or supporting documentation
• Internal notes from our support agents for future reference
• Feedback or ratings you provide

g. Log Files and Metadata

Our servers may automatically log information such as:

• Date and time of access
• Server requests and response codes
• Network routing and load distribution data
• Error or crash reports (including error messages and diagnostic info)

h. Information from Third Parties

We may receive information from external services that you choose to link to vrdAI, such as:

• Authentication services (e.g., Google sign-in)
• Business partners, resellers, or affiliates
• Publicly available sources or legal databases (if required for compliance, fraud prevention, or verification)

Note: We do not actively seek to collect any sensitive personal information (e.g., racial or ethnic origin, religious or philosophical beliefs, biometric data, health or medical records). If such information is submitted through user-generated content, it is done at your sole discretion and risk.

vrdAI collects information through multiple channels, both directly and indirectly, depending on how you interact with our platform. These collection methods are designed to be transparent, secure, and compliant with applicable laws. All data collected is governed by this Privacy Policy and used solely for the purposes outlined herein.

We collect information in the following ways:

a. Directly From You

We collect information when you intentionally provide it to us, including but not limited to:

• Creating an account: When you register for vrdAI, we collect the personal details you provide, such as your name, email address, and password.
• Using our services: We collect data when you interact with our features, submit queries, or upload documents.
• Making a purchase or subscribing: If you engage in a paid transaction, we collect limited billing data (processed via PCI-DSS-compliant payment processors).
• Communicating with us: When you contact us via email, support forms, chat, or feedback surveys, we collect and retain the communication content.
• Submitting forms: Including contact forms, sign-up sheets, user surveys, and event registrations.

b. Automatically When You Use the Service

We automatically collect certain technical and usage-related data to ensure a secure and functional user experience:

• Browser and device details: Collected through HTTP requests, headers, and scripts to detect platform compatibility and optimize performance.
• IP addresses and location approximations: Used for security, load balancing, and limited geolocation-based customization (without precise tracking).
• Cookies and tracking technologies: Used for session management, preferences retention, analytics, and service personalization (covered in Section 14).
• Session activity: Includes timestamps, click behavior, command inputs, and interaction logs with AI modules.

All automatic collection is governed by consent frameworks where required (e.g., cookie banners in the EU/EEA) and can be limited through your browser or device settings.

c. Through Third-Party Integrations and Tools

If you choose to connect vrdAI with third-party platforms, we may receive data from:

• Single Sign-On (SSO) providers (e.g., Google, Apple, Microsoft)
• API-based integrations with platforms you authorize
• Analytics services (e.g., Google Analytics, Mixpanel) to help understand usage patterns and system health
• Payment gateways and billing platforms (e.g., Stripe, PayPal) that confirm billing success, status, or disputes—vrdAI never stores full card or banking details

Please note that the data shared by these third-party services is governed by their own privacy policies and terms. You are responsible for reviewing those third-party documents before authorizing any linkage.

d. From Public or Legal Sources

In limited cases, and where allowed by law, we may collect information from:

• Public databases or registries (e.g., government records, business lookups)
• Legal requests (e.g., subpoenas, court orders, regulatory filings)
• User-generated public content (e.g., publicly accessible reviews, testimonials, or social media mentions about our services)

e. Passive Observation and Inferred Data

vrdAI may derive or infer certain insights based on your usage behavior:

• Behavioral predictions (e.g., product interest, churn risk, feature preference)
• Session scoring or engagement heatmaps for usability improvements
• Prompt types and thematic categorization (in aggregate, not linked to your identity unless required for account personalization)

All inferred data is treated with the same level of care and protection as directly collected data, unless otherwise anonymized.

vrdAI uses the information we collect to operate effectively, maintain a high standard of service, and meet our legal and contractual obligations. All uses of your data are rooted in legitimate business needs and are handled with appropriate care and proportionality.

Below is a breakdown of the key purposes for which we process personal and non-personal information:

a. To Provide and Maintain the Service

We use your information to:

• Authenticate your account and allow you to log in securely
• Deliver core platform functionality and personalized outputs
• Provide access to APIs, tools, and user-specific services
• Maintain continuity of sessions and preferences between logins

Without this data, the platform may be partially or entirely inaccessible.

b. To Improve and Optimize Our Products

We continually analyze usage data to:

• Identify technical bugs or performance issues
• Understand feature effectiveness and user flows
• Prioritize new features based on aggregate demand
• Improve our AI outputs and interface functionality

Where possible, this analysis is conducted in anonymized or aggregated form to preserve user privacy.

c. To Communicate With You

We may use your information to send:

• Administrative communications (account status, updates, security notices)
• Transactional notifications (billing receipts, subscription confirmations)
• Responses to support tickets or inquiries
• Service announcements and feature rollouts

You may opt out of certain non-essential messages, but you cannot opt out of critical service-related communications.

d. To Personalize the User Experience

Depending on how you use the platform, we may tailor:

• Content suggestions, prompt features, or templates based on past usage
• Interface behavior and accessibility options
• Feature availability (e.g., AI model preference settings)

Personalization is generally algorithmic and not based on sensitive user profiling unless explicitly enabled.

e. For Billing, Payment, and Transactional Processing

If you purchase a subscription or use paid features, we process:

• Subscription status and renewal cycles
• Invoicing and compliance with local tax obligations
• Dispute and refund handling

All sensitive financial data is handled by compliant third-party payment processors (PCI-DSS, GDPR, or equivalent), and vrdAI does not store full card or banking details.

f. To Ensure Platform Integrity and Security

We use data to:

• Monitor for suspicious, fraudulent, or abusive activity
• Detect unauthorized account access attempts
• Enforce usage limits or terms-based restrictions
• Secure the infrastructure and prevent misuse of AI tools

This may involve real-time monitoring, flagging of anomalous behavior, or restricting access under specific risk thresholds.

g. To Comply With Legal Obligations

We may process your information to:

• Respond to subpoenas, court orders, or lawful investigations
• Fulfill obligations under tax, export control, or trade laws
• Cooperate with data protection authorities or regulatory agencies

Where legally required, we may provide notice before disclosing data unless prohibited by law or court order.

h. For Research, Benchmarking, and Development

Anonymized or aggregated data may be used:

• To train and refine AI models
• To measure system performance, stability, and fairness
• For academic, scientific, or commercial research

User-specific training is never conducted without explicit consent. Data used for research is stripped of identifiable elements to the extent feasible.

i. To Enforce Terms and Policies

vrdAI uses user information to:

• Investigate breaches of the Terms of Service
• Apply account limitations or suspensions
• Document incidents for audit or internal review

You understand and agree that such enforcement is a condition of access to the platform.

vrdAI processes your personal information in accordance with applicable legal frameworks. For most U.S. users, our right to collect and use data is governed by your consent through acceptance of our Terms of Service and this Privacy Policy. For users located in jurisdictions that require a defined legal basis for processing—such as the European Union (EU), European Economic Area (EEA), United Kingdom (UK), and others—vrdAI relies on several lawful bases as described below.

a. Consent

We process your information based on your voluntary, informed, and affirmative consent when:

• You register an account and agree to our Terms and this Policy
• You subscribe to our newsletter or marketing communications
• You upload user-generated content (e.g., prompts, files, or messages)
• You enable optional features (e.g., integrations, beta tools)

You may withdraw your consent at any time by contacting us. However, withdrawal of consent does not affect the lawfulness of prior processing and may result in loss of access to the service.

b. Contractual Necessity

We process your data as necessary to:

• Provide access to the vrdAI platform
• Maintain your account and service level
• Deliver functionalities you explicitly request
• Process payments and manage subscriptions

This is essential to fulfill the contract between you and vrdAI (e.g., by registering for an account or purchasing a subscription).

c. Legitimate Interests

vrdAI processes certain information based on our legitimate business interests, which are balanced against your data rights. These include:

• Maintaining platform security and fraud prevention
• Improving product performance and user experience
• Conducting internal audits and analytics
• Protecting our legal rights and enforcing Terms of Service

We do not use legitimate interest where your fundamental rights override our purpose, and you may object to such processing.

d. Legal Obligations

We may be required to collect or retain certain data in order to:

• Comply with legal, tax, regulatory, or compliance obligations
• Cooperate with law enforcement or respond to legal process
• Maintain proper accounting, documentation, and audit trails

These obligations may arise from laws applicable in the United States or, where relevant, in your local jurisdiction.

e. Vital Interests or Public Interest (Rare Use)

In very limited scenarios, we may process your data to:

• Prevent imminent harm to you or another individual
• Respond to an emergency requiring disclosure
• Support public health or safety investigations (as mandated by law)

Important Notice for International Users:

By using the vrdAI platform, you acknowledge that your data may be transferred to and processed in jurisdictions (including the United States) where privacy protections may not be equivalent to those in your home country. In such cases, we implement safeguards (e.g., Standard Contractual Clauses) when legally required to protect your rights.

vrdAI values your privacy and does not sell or trade your personal information to third parties for marketing purposes. However, we may disclose or share information under specific conditions that are necessary for lawful operation, platform functionality, or in accordance with contractual and legal obligations.

a. With Service Providers and Contractors

We may share limited data with trusted third-party vendors and contractors who perform essential services on our behalf. These may include:

• Cloud infrastructure providers (e.g., AWS, Azure)
• Payment processors (e.g., Stripe, PayPal)
• Authentication and identity verification providers
• Email communication services
• Customer support tools and CRM platforms
• Analytics or monitoring services

These service providers are bound by confidentiality agreements and are only permitted to use your data to perform the contracted tasks. We require them to implement industry-standard security measures.

b. For Legal and Regulatory Compliance

We may disclose personal information where required to:

• Comply with applicable laws, court orders, subpoenas, or legal investigations
• Respond to law enforcement requests or national security demands
• Fulfill government reporting obligations, including tax or regulatory filings

We reserve the right to disclose information without prior notice if such disclosure is legally compelled or necessary to protect public interests.

c. For Platform Enforcement and Protection

Disclosure may occur to:

• Investigate violations of the Terms of Service or unlawful use of the platform
• Prevent fraud, abuse, harassment, or misuse of the Service
• Enforce intellectual property rights or contractual obligations
• Protect the rights, safety, or property of vrdAI, its users, or the public

We may share relevant data with legal counsel, cybersecurity professionals, or investigative partners to assess and resolve incidents.

d. During Business Transactions

In the event of a merger, acquisition, sale of assets, bankruptcy, or restructuring of Aureai Labs LLC, user information may be included as a business asset in the transaction. If such a transaction occurs:

• We will provide notice before your personal data is transferred and becomes subject to a different privacy policy, where required by law.
• The receiving party will be expected to continue to protect your data in a manner consistent with this Policy.

e. With Your Explicit Consent

We may disclose your information to a third party:

• When you authorize an integration or connection with an external service (e.g., SSO providers, workflow apps)
• When you request us to share information (e.g., referrals, collaborations, co-branded features)
• When you participate in joint promotions, surveys, or public-facing activities

This disclosure will only occur to the extent you have clearly agreed or opted in.

f. Aggregated, Anonymized, or De-Identified Information

We may disclose data that has been:

• Aggregated (combined with data from other users)
• Anonymized (stripped of all personal identifiers)
• De-identified under applicable standards

Such data is used for research, trend analysis, benchmarking, and model training purposes and does not identify you personally. This type of data is not considered personal data under most laws.

Disclaimer of Responsibility for External Disclosure

While we take reasonable precautions to restrict access to your personal data, vrdAI shall not be held liable for unauthorized access, breach, or misuse of your data by third parties beyond our control or not bound by our contracts, unless explicitly required by law.

vrdAI relies on a limited and carefully vetted set of third-party service providers to deliver critical functionality, infrastructure, and support to our users. These third parties may, to varying extents, process personal data on our behalf or in connection with your use of the Service. This section outlines the scope and limitations of such relationships.

a. Nature of Third-Party Involvement

Third-party providers support our operations in the following areas:

• Cloud hosting and infrastructure (e.g., Amazon Web Services, Google Cloud, Microsoft Azure)
• Authentication services (e.g., Google Sign-In, Apple ID)
• Payment processing (e.g., Stripe, PayPal)
• Customer support platforms (e.g., Intercom, Zendesk, Freshdesk)
• Analytics and performance monitoring (e.g., Google Analytics, Sentry, Mixpanel)
• Email delivery services (e.g., SendGrid, Mailgun, Amazon SES)
• Error tracking, uptime, and log diagnostics

These vendors are contractually obligated to maintain the confidentiality and security of your data and are not permitted to use your information for their own purposes.

b. Data Shared With These Services

Depending on the provider’s role, the data shared may include:

• IP address and browser metadata
• Account identifiers and session tokens
• Usage events, crash logs, or performance metrics
• Email addresses (for notifications)
• Limited billing details (transaction amount, status)

We do not provide full access to user-generated content or personal communications unless such access is strictly necessary for technical maintenance or error resolution, and only under confidentiality protections.

c. Integration-Specific Disclosures

If you opt to enable third-party integrations (e.g., connecting your account to an external app, calendar, workspace, or file-sharing platform), then the data shared may be governed by the privacy terms of that integration provider. You are solely responsible for reviewing and consenting to those external privacy practices.

vrdAI does not control how third-party integrations handle your data once you authorize the connection.

d. No Endorsement or Responsibility for Third-Party Policies

Although we conduct due diligence before engaging with third-party processors, we are not liable for any acts, omissions, breaches, or policy violations committed by third parties beyond the scope of their service agreements with us. If you experience a breach originating from an integrated third-party tool, your remedies may be limited to claims under that third party’s privacy policy or applicable data protection laws.

We encourage you to review the privacy policies of any third-party tools or integrations you use with vrdAI.

e. International Data Transfers by Processors

Some of our third-party vendors may be located in jurisdictions outside your country of residence, including the United States and other countries that may not provide the same level of data protection. We require these vendors to comply with:

• Standard Contractual Clauses (SCCs)
• GDPR adequacy decisions (where applicable)
• Other mechanisms permitted under applicable data transfer regulations

Your continued use of the platform constitutes acceptance of such data transfers.

Final Disclaimer

Use of any third-party tool, integration, or plugin—whether through our platform or initiated independently—is at your own discretion and risk. vrdAI provides no guarantees regarding the privacy practices, data handling, or compliance obligations of unaffiliated third-party vendors.

vrdAI operates as a cloud-based platform primarily hosted in the United States, with supporting infrastructure potentially distributed across multiple jurisdictions through our authorized service providers. By using our Service, you understand and agree that your data will be stored, processed, and transmitted—primarily in the United States, but potentially also in other countries as required for operational continuity and legal compliance.

a. Primary Data Storage Location

All core user data, including account credentials, session activity, prompt history, and operational logs, are stored on secure cloud infrastructure operated by reputable U.S.-based providers (such as Amazon Web Services, Google Cloud, or Microsoft Azure). These facilities are maintained with industry-standard protections including:

• Physical security and controlled access
• Redundant storage and failover systems
• Routine vulnerability scanning and incident response protocols

b. International Data Transfers

If you access vrdAI from outside the United States, your information will be transferred to, and maintained on, servers located in jurisdictions where privacy protections may differ from those in your home country. These transfers are necessary for you to access and use the Service, and are carried out in accordance with relevant laws, including:

• General Data Protection Regulation (GDPR): For EU/EEA residents, we rely on lawful cross-border mechanisms such as Standard Contractual Clauses (SCCs).
• UK GDPR: For UK users, we observe parallel safeguards and data adequacy guidelines.
• Other jurisdictions: Transfers are governed by data localization or transfer laws as applicable.

We take appropriate steps to ensure that any data transferred is protected in accordance with this Privacy Policy and applicable legal standards.

c. Data Replication and Backup

To ensure reliability and disaster recovery:

• Data may be mirrored across multiple secure environments (geo-redundant storage)
• Automated backups are retained periodically to prevent data loss
• Such replicas are subject to the same access controls and encryption policies as primary databases

We do not guarantee data residency or in-country hosting for specific regions unless expressly agreed in a separate enterprise-level contract.

d. Cloud and CDN Services

In some cases, static or cached content (such as AI outputs or documentation assets) may be distributed via Content Delivery Networks (CDNs) that utilize edge servers globally. These CDNs may temporarily cache data closer to your physical location for speed optimization, but:

• Cached content is anonymized or de-identified
• It is automatically purged based on short retention cycles
• CDN providers do not have persistent access to your personal data

e. Your Consent to Transfer

By submitting personal information through the Service or by continuing to use the platform outside the United States, you explicitly consent to the transfer, processing, and storage of your data in the United States and other countries, subject to the disclosures in this Policy.

If you do not consent to these practices, your only recourse is to discontinue use of the Service.

Limitation of Liability

While vrdAI employs rigorous safeguards for international data handling, we disclaim responsibility for any regulatory violations, data localization conflicts, or access restrictions imposed by foreign jurisdictions that interfere with or restrict your access to the Service.

vrdAI retains personal and usage data only for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, regulatory, contractual, and operational requirements. Retention periods vary depending on the type of data, the context of its collection, and any applicable legal obligations.

a. Account and User Profile Data

• We retain your account information (such as your name, email address, and login credentials) for the duration of your active use of the platform and for a reasonable period thereafter.
• If you delete your account, we may retain certain data for a limited period (typically 30–90 days) to allow for account restoration, dispute resolution, or compliance with legal hold requests.
• Backup systems may retain encrypted copies of this data for an extended period (up to 180 days), after which it is securely deleted.

b. Usage and Activity Data

• Logs of platform interactions (e.g., access times, prompt activity, error reports) are retained for up to 12 months for operational analytics, fraud monitoring, and service optimization.
• Aggregated, de-identified usage data may be retained indefinitely for historical analysis, benchmarking, or system learning, provided it cannot reasonably be re-linked to individual users.

c. Payment and Billing Data

• Billing records, payment history, and transaction metadata are retained for a minimum of 7 years to comply with financial regulations, tax obligations, and audit requirements.
• Sensitive payment information such as full card numbers or banking credentials is never stored by vrdAI, and is processed by PCI-compliant third-party vendors who apply their own retention and deletion schedules.

d. Communications and Support Records

• Support tickets, email threads, and user inquiries may be retained for up to 24 months to allow for issue resolution, customer history reference, and service quality audits.
• If a legal dispute arises or an investigation is launched, communications related to that matter may be preserved until final resolution or court-mandated closure.

e. AI Interactions and Prompt History

• User-submitted inputs (prompts, queries, files) and resulting outputs may be retained temporarily to improve system response time, recover previous sessions, or analyze abuse patterns.
• These records are either anonymized or purged after a defined retention window, which may range from a few hours to 30 days unless otherwise required for support or compliance.
• If you explicitly opt out of content logging or prompt history retention (where such a feature is provided), we will respect that setting except where logs are needed for:
  • Debugging system errors
  • Investigating platform abuse
  • Complying with legal requirements

f. Retention in Case of Legal Requirements

• Required by applicable law (e.g., tax, employment, contractual obligations)
• Necessary for the establishment, exercise, or defense of legal claims
• Subject to a lawful data preservation order, audit, or investigation

In these cases, data may be archived with restricted access controls and legal oversight.

Your Right to Request Deletion

You may request deletion of your personal data by contacting us (subject to identity verification and applicable exceptions). Note that certain data may not be deleted if:

• It is necessary to complete a transaction or fulfill a service
• It is legally required to be retained
• It is needed for fraud prevention or dispute resolution

vrdAI will process deletion requests in good faith but makes no guarantee of complete or irreversible removal of data, particularly from backups or de-identified aggregate sets.

vrdAI takes the security of your personal and usage data seriously and implements a layered, risk-based approach to safeguard information against unauthorized access, disclosure, alteration, or destruction. While no system can guarantee absolute security, we follow industry best practices and reasonable administrative, technical, and organizational safeguards to minimize risks.

a. Technical Safeguards

• Encryption in Transit and at Rest: All data exchanged with the vrdAI platform is encrypted using TLS (Transport Layer Security). Sensitive data stored in our systems or third-party infrastructure is encrypted at rest using strong encryption algorithms (e.g., AES-256).
• Firewalls and Access Controls: Our infrastructure is protected by modern firewall systems, intrusion detection, and multi-level access controls that prevent unauthorized access to internal systems.
• API Security: Any access to vrdAI via APIs is governed by secure authentication tokens and rate limits to prevent abuse or overuse.
• Content Isolation: User-generated data is logically segmented within our systems to prevent cross-account access or leakage.

b. Organizational and Administrative Safeguards

• Role-Based Access Control (RBAC): Internal access to personal data is strictly limited to authorized employees or contractors who require it for their duties. All access is logged and monitored.
• Employee Training: Personnel with access to user data receive privacy and security training, including guidelines on responsible data handling, incident response, and reporting obligations.
• Vendor Vetting: Third-party service providers are contractually bound to implement strong data protection standards and are required to demonstrate compliance with security frameworks relevant to their service scope.

c. Monitoring and Incident Response

• Security Monitoring: We use automated monitoring tools to detect unusual activity, unauthorized access attempts, or potential data breaches across our systems.
• Vulnerability Management: Our systems undergo routine penetration testing, code audits, and dependency patching to address known security risks.
• Incident Response Protocol: In the event of a suspected or actual security breach, we initiate our formal incident response plan, including:
  • Internal escalation
  • Assessment of scope and impact
  • Notification to affected users (if legally required)
  • Remediation and follow-up

We comply with breach notification laws applicable in the United States and internationally where required.

d. User Responsibilities

While we maintain robust security infrastructure, you also play a critical role in protecting your own information:

• Use a strong, unique password for your vrdAI account and update it regularly
• Keep your credentials confidential and do not share your login details with others
• Notify us immediately if you believe your account has been compromised

vrdAI is not responsible for any unauthorized access or loss of data resulting from user negligence, insecure devices, third-party malware, or phishing attacks targeting individual users.

e. No Liability Clause

While we take reasonable steps to protect your data, vrdAI, its parent company Aureai Labs LLC, and its affiliates disclaim any and all liability for damages, loss, or harm resulting from cyberattacks, unauthorized third-party access, or force majeure events that affect data availability, confidentiality, or integrity—except as specifically required under applicable law. By using our platform, you acknowledge and accept these inherent risks and limitations.

vrdAI respects your rights concerning your personal information and is committed to providing you with reasonable access and control, as permitted by applicable law. This section outlines your privacy-related choices and rights, as well as our procedures for responding to them. Your specific rights may vary based on your jurisdiction (e.g., California, EU/EEA, UK), but we offer a consistent standard of care and transparency to all users globally.

a. Access and Review

You have the right to:

• Access the personal data we hold about you
• Review account information, including your email, usage logs, and profile settings
• Request clarification about how and why your information is processed

You can access most of your information through your account dashboard. For formal data access requests, contact us at [Insert Privacy Contact Email].

b. Rectification and Update

If any of your personal information is inaccurate or outdated, you have the right to request correction. You can:

• Update most account details directly within the platform
• Request manual edits for data you cannot change yourself

vrdAI is not responsible for any inaccuracies that arise from data you provide incorrectly or fail to update.

c. Deletion (“Right to be Forgotten”)

Subject to certain legal exceptions, you may request the deletion of your personal data. Upon verified request:

• We will remove your account and associated identifiers
• Backup and archival systems will be purged during their next cycle
• Anonymized data already used for analytics, research, or benchmarking may not be deleted if it can no longer be linked to you

vrdAI reserves the right to deny deletion requests where data must be retained for:

• Legal compliance
• Fraud prevention
• Platform integrity and abuse mitigation
• Unresolved disputes or billing matters

d. Data Portability

Where applicable, you have the right to request a copy of your personal data in a machine-readable format. Portability requests will include:

• Core account identifiers
• Prompt history (if applicable)
• Subscription status and payment history

vrdAI may charge a reasonable administrative fee for excessive or repetitive requests, as permitted by law.

e. Objection and Restriction of Processing

In certain jurisdictions (e.g., EU, UK), you may object to our processing of your personal data or request temporary restrictions on that processing if:

• The data is inaccurate
• The processing is unlawful
• You require the data for a legal claim

While we assess your request, we may temporarily suspend processing of the relevant data unless overridden by a legal or contractual obligation.

f. Opt-Out of Marketing and Non-Essential Communications

You may opt out of receiving marketing emails, promotional messages, or product updates by:

• Clicking the “unsubscribe” link in any such email
• Adjusting communication preferences in your account settings
• Contacting us directly

You cannot opt out of essential service-related messages (e.g., password resets, security notices, or account status updates).

g. Cookies and Tracking Preferences

You may manage your cookie and tracking preferences via:

• Browser-level cookie settings
• Platform cookie banner or preference center (where applicable)
• Third-party opt-out mechanisms for analytics (e.g., Google Analytics opt-out browser add-on)

Please note that disabling certain cookies may impair the functionality of the platform.

h. Identity Verification

To protect user security and prevent unauthorized access to data:

• All rights requests are subject to verification of your identity
• We may ask for additional details to validate your request (e.g., account credentials, confirmation email)

vrdAI will not comply with rights requests that cannot be verified in good faith or that risk the privacy of other users.

No Guarantee of Unlimited Control

While we aim to honor user rights as defined under the law, vrdAI does not guarantee full control over data that has already been anonymized, aggregated, or legally retained. By using our platform, you acknowledge that certain rights may be subject to limitations based on operational, contractual, or legal obligations.

vrdAI provides a range of tools and settings that allow you to manage how your information is collected, used, and retained. These controls are designed to give you a reasonable degree of autonomy and transparency over your experience on our platform—without compromising the security, functionality, or integrity of the Service. While we make these controls available to promote user trust, you understand and agree that responsibility for their use lies solely with you.

a. Account Dashboard

Your account dashboard includes key controls for:

• Updating your personal profile details
• Resetting or changing your password
• Managing prompt or query history (view, download, or delete where applicable)
• Enabling or disabling specific AI features or tool integrations
• Reviewing your billing, subscription, or usage data

Any edits made here are immediately reflected in our active system records, though they may take longer to propagate to backups or third-party services.

b. Email and Notification Preferences

You can manage your communication settings by:

• Unsubscribing from marketing messages
• Selecting your preferred notification channels (e.g., email, app alerts)
• Opting in or out of early-access or experimental feature announcements

Essential system messages related to security, billing, or service performance cannot be disabled.

c. Prompt History and AI Interactions

Depending on your subscription plan or jurisdiction:

• You may be given the option to enable or disable storage of past prompts and responses
• You may choose whether or not your session data is used for training or system improvement
• In some cases, you may anonymize or delete previous sessions from your activity log

Disabling or deleting prompt history may affect functionality, including autocomplete, context continuity, or personalization.

d. Cookie Preferences

Where required by law (e.g., EU/EEA), vrdAI offers a cookie preference panel or consent banner to:

• Accept or reject non-essential cookies
• Select which categories of cookies to allow (e.g., performance, analytics)
• Withdraw consent at any time

You may also use your browser’s settings to block or clear cookies. However, this may limit your ability to use certain platform features or retain login credentials between sessions.

e. API and Developer Key Management

If you use vrdAI’s developer tools or API integrations, you are responsible for:

• Managing and securing your API keys or tokens
• Reviewing audit logs for unauthorized access
• Rotating or revoking keys that are no longer in use or may be compromised

We reserve the right to suspend or deactivate any keys found to be misused, shared, or exposed in violation of our Terms.

f. Data Export Tools

Subject to platform availability and legal eligibility, we may offer features that allow you to:

• Export your data in a structured format (e.g., JSON, CSV)
• Download prompt logs, user files, or account summaries
• Access machine-readable versions of certain datasets linked to your account

Such exports may be limited in scope to protect other users’ data or platform integrity.

User Responsibility and Limitation of Liability

While vrdAI provides reasonable controls, you acknowledge that failure to use these tools or misconfiguration of your preferences is not our responsibility. We are not liable for privacy violations, data exposure, or functionality limitations resulting from:

• Your oversight or negligence
• Inaccurate or outdated settings
• Third-party interference (e.g., browser extensions, malware)

By using the platform, you accept that certain preferences may not be fully enforceable under all circumstances and that your use is conditional on understanding these limitations.

vrdAI uses cookies and similar tracking technologies to enhance your experience, optimize platform performance, analyze usage trends, and support security. This section outlines the types of cookies we use, why we use them, and how you can manage your preferences.

By using our platform, you consent to the use of these technologies unless you opt out through the mechanisms described below.

a. What Are Cookies?

Cookies are small text files placed on your device (computer, tablet, or smartphone) when you visit a website. They help identify your browser, retain preferences, enable secure logins, and analyze user interactions. Cookies do not contain personal data unless you’ve previously provided that information on the site.

vrdAI may also use other technologies that behave similarly to cookies, including:

• Local storage objects
• Web beacons or pixel tags
• Session storage
• Device fingerprinting
• Embedded scripts

These technologies are referred to collectively in this Policy as “cookies.”

b. Types of Cookies We Use

vrdAI uses the following categories of cookies:

1. Strictly Necessary Cookies
   • Required for platform functionality (e.g., login authentication, form submission)
   • Cannot be disabled without affecting usability
   • Do not require user consent under most laws
2. Performance and Analytics Cookies
   • Measure traffic patterns and feature usage (e.g., Google Analytics, Mixpanel)
   • Help us optimize the platform and diagnose technical issues
   • These are anonymized or pseudonymized where possible
3. Functional Cookies
   • Enable customization features (e.g., language preference, saved themes)
   • Enhance usability by remembering settings across sessions
4. Security Cookies
   • Support fraud detection, bot filtering, session integrity, and CSRF protection
   • May track unusual access patterns or authentication failures
5. Marketing and Retargeting Cookies (Limited Use)
   • May be used in specific campaigns or promotions if explicitly enabled
   • Track ad performance or user interest (if integrated with external platforms)
   • We do not permit third-party ad networks to collect cookie-based behavioral data without explicit user consent

c. Third-Party Cookies

Some cookies are placed by third-party services integrated with vrdAI. These include:

• Web analytics tools
• Single Sign-On (SSO) providers
• Embedded content platforms (e.g., videos, support widgets)

vrdAI does not control these cookies and is not responsible for their use. You are encouraged to review those third parties’ own privacy and cookie policies.

d. Cookie Duration

Cookies may be:

• Session-based (expire when you close your browser)
• Persistent (remain on your device until manually deleted or automatically expire)

The retention period varies depending on the cookie’s purpose. Most analytics cookies expire within 6–24 months.

e. How to Manage or Disable Cookies

You can manage your cookie preferences through several methods:

• Cookie consent banner (provided to users in jurisdictions where consent is required)
• Browser settings, which allow you to block or delete cookies by category or domain
• Third-party opt-out tools, such as:
  • Google Analytics Opt-Out Browser Add-on
  • YourAdChoices

Note: Blocking certain types of cookies may degrade or disable core platform functionality, including login persistence, content loading, and session tracking.

No-Liability Disclaimer

vrdAI makes good-faith efforts to comply with global cookie laws (e.g., GDPR, CCPA) and offers users reasonable control over their cookie preferences. However, we are not liable for tracking conducted by third-party scripts, browser plugins, or user-side misconfigurations that bypass or interfere with cookie consent logic.

Your continued use of the platform constitutes acceptance of our use of cookies unless you opt out through valid technical means.

As an AI-driven platform, vrdAI interacts with and processes user-provided content—such as prompts, queries, uploaded files, and outputs—through machine learning systems and language models. This section explains how we handle such data, what use cases apply, and what limitations are built into our framework to protect your privacy.

By using vrdAI, you acknowledge that your interactions with the platform may involve automated processing and that certain content may be used for product improvement, unless explicitly restricted or excluded.

a. What Is Considered AI-Related Data?

For the purposes of this section, AI-related data may include:

• Prompts, inputs, or questions submitted by you through our tools
• File uploads or documents you choose to process with AI
• Generated outputs, summaries, or completions from the system
• Interaction logs, timestamps, and formatting or instruction patterns

This data is treated as a form of user-generated content and may be temporarily or persistently stored based on your account settings and use of platform features.

b. Use of AI Data for Service Functionality

We process AI-related data to:

• Generate responses and outputs in real time
• Maintain session context and improve relevance
• Provide audit trails for customer service and support
• Enable “history,” “bookmark,” or “reuse prompt” functionality (if available)

This processing is essential for the core functionality of vrdAI and cannot be disabled without rendering the service unusable.

c. Use of Data for AI Model Training (Default: No)

vrdAI does not automatically use your personal prompts or uploaded content to train core AI models unless:

• You explicitly opt in via a consent mechanism or enterprise agreement
• Your data has been anonymized and aggregated to a form where it cannot reasonably identify you

Where user contributions are used for training or refinement:

• A clear notice and consent mechanism will be provided
• Data will be stripped of identifying metadata before inclusion
• You will retain the right to opt out or withdraw consent (if applicable)

d. AI Output Confidentiality

While we respect the privacy of your interactions with the AI, you should be aware of the following:

• AI outputs may be generated based on probabilistic predictions, not direct memory of prior user inputs
• Generated content is not exclusive and may resemble outputs given to other users under similar prompts
• You should avoid submitting any proprietary, sensitive, or regulated data unless necessary, and do so at your own risk
• vrdAI is not liable for similarities between outputs generated for different users or for any unintended exposure caused by user-submitted confidential content.

e. User Input as Feedback for Improvement

In some cases, user interactions may be analyzed internally (by machine or human reviewers) for:

• Performance tuning
• Error correction
• Abuse detection (e.g., harmful, prohibited, or unsafe prompts)

Such reviews are conducted under strict access controls, logged, and limited to authorized personnel only. We do not use manual review to mine personal data or track individual user behavior unless flagged by automated risk signals.

f. AI Explainability and Transparency

Where applicable, vrdAI will:

• Label AI-generated content clearly
• Disclose the non-human nature of outputs where required by law
• Provide transparency about limitations, biases, or known risks in system behavior

We make no guarantees that AI responses are factually accurate, complete, or suitable for any specific use case. You are solely responsible for how you interpret, rely on, or publish AI-generated outputs.

Important Disclaimer

AI technologies are by nature probabilistic, automated, and trained on broad datasets that may reflect historical bias or limitations. vrdAI disclaims all warranties and legal responsibility for:

• Decisions made based on AI output
• Business, legal, financial, or medical reliance on AI advice
• Ethical, reputational, or operational impact caused by generated responses

By using the platform, you acknowledge the experimental nature of AI and agree to independently validate any critical content before acting on it.

vrdAI may collect, process, and use aggregated or anonymized data derived from user interactions, platform activity, and system analytics for purposes that support legitimate business interests, product development, and operational insights. This section outlines how such data is handled and your rights and responsibilities with respect to it.

a. What Is Aggregated or Anonymized Data?

Aggregated Data refers to information that has been compiled from multiple users in a manner that no longer identifies any individual. For example, statistics showing how many users accessed a feature or the average prompt length across all sessions.

Anonymized Data is information that has been processed to remove or obscure all personal identifiers (e.g., names, IP addresses, email addresses) such that it cannot reasonably be linked back to an individual, either alone or in combination with other data.

vrdAI treats such data as non-personal information, and therefore, not subject to the same restrictions under this Privacy Policy once de-identification is complete.

b. How We Use Aggregated and Anonymized Data

vrdAI may use or share aggregated/anonymized data for the following legitimate purposes:

• Monitoring overall system performance and stability
• Conducting product usage research and adoption analysis
• Improving AI model responsiveness and accuracy
• Benchmarking user behavior trends without compromising privacy
• Preparing marketing or investor-facing reports based on overall platform usage (e.g., “20,000 prompts processed daily”)
• Informing product development roadmaps, UI improvements, or feature testing

This data may also be shared with partners, academic researchers, or external consultants under agreements that prohibit re-identification.

c. How We Anonymize Data

vrdAI uses technical and procedural methods to anonymize data, such as:

• Removal or hashing of user IDs, IP addresses, and account metadata
• Suppression of location or device-specific markers
• Data aggregation thresholds (e.g., minimum counts to prevent unique identification)
• Randomization or noise-injection for behavioral analytics

We do not consider data to be truly anonymized unless re-identification is both practically infeasible and legally restricted under applicable standards.

d. Limits on User Control

Once data is fully anonymized or aggregated:

• It is no longer considered personal data under U.S., EU, or other privacy laws
• You may not request access, deletion, or modification of that data
• We retain full rights to store, analyze, publish, or license such data for any lawful purpose

You acknowledge that participation in vrdAI may contribute to anonymized statistical insights that are not reversible or traceable to your personal identity.

e. Re-identification Prohibition

Any attempts by users, partners, or third parties to re-identify anonymized data are strictly prohibited and may lead to:

• Termination of account access
• Legal action under applicable data protection and anti-abuse laws
• Referral to authorities for misuse or breach of platform integrity

Legal Disclaimer

vrdAI makes good-faith efforts to ensure proper anonymization but disclaims liability for rare or unintentional re-identification caused by external correlation, user disclosure, or malicious reverse engineering outside of our control.

By using the platform, you agree that anonymized and aggregated data does not constitute your personal data and may be used by vrdAI without restriction.

vrdAI may use behavioral analytics and limited profiling techniques to understand how users engage with our platform, personalize experiences, detect anomalies, and improve overall functionality. This section explains how behavioral data is collected and analyzed, what profiling entails, and the safeguards in place to limit risk and maintain user autonomy.

By using the platform, you consent to reasonable behavior tracking and analysis as outlined below, unless you opt out where applicable.

a. What Is Behavioral Analytics?

Behavioral analytics refers to the collection and interpretation of user activity data in order to:

• Monitor feature adoption and usage trends
• Identify friction points in the user journey
• Determine performance metrics for tools or modules
• Segment users based on interaction patterns

Examples of data we may track include:

• Number of logins and session duration
• Common prompt structures and command types
• Feature usage frequency (e.g., API vs. dashboard tools)
• Click paths, navigation sequences, and interface dwell time

This data helps us ensure the platform is functioning as intended, inform user experience decisions, and assess overall engagement.

b. What Is Profiling?

“Profiling” under applicable data privacy laws (e.g., GDPR) refers to any form of automated processing used to evaluate personal aspects of a user. In limited cases, vrdAI may use profiling to:

• Group users based on preferences or product usage
• Recommend features, settings, or tutorials tailored to your behavior
• Prioritize user onboarding flows or interface layouts based on interaction history
• Detect high-risk behavior for account protection or fraud prevention

vrdAI does not engage in automated decision-making that produces legal or similarly significant effects on users, such as automatic denial of access or subscription, without human oversight.

c. Tools Used for Analytics

We may use both first-party tools and authorized third-party providers, such as:

• Google Analytics
• Mixpanel
• Amplitude
• Hotjar or FullStory (for UI journey analysis)
• Internal event logging tools

All such providers are bound by data processing agreements and prohibited from reusing your data for their own commercial purposes.

d. Customization Based on Behavior

Where personalization features are enabled, we may:

• Suggest prompt templates or model settings based on your past activity
• Auto-fill repetitive queries or configurations
• Prioritize modules you use frequently
• Display content or updates likely to match your use case

You may disable certain personalization features through your user settings if available, but doing so may reduce service relevance or platform ease-of-use.

e. Fraud and Abuse Detection

Behavioral profiling may also be used to:

• Identify irregular access patterns or brute-force attempts
• Detect prompt abuse (e.g., prohibited content, spamming behavior)
• Trigger captcha or secondary authentication
• Flag accounts for manual review

These measures are intended to protect platform integrity, ensure compliance with the Terms of Service, and promote safe usage across all users.

Opt-Out and Limitations

If you reside in a jurisdiction that provides the right to object to profiling (e.g., GDPR/UK GDPR), you may:

• Contact us to request limitation of behavioral profiling (subject to verification)
• Adjust in-platform settings to restrict personalization where available

Note: Opting out of profiling may prevent you from receiving relevant guidance, feature recommendations, or adaptive functionality.

Liability Waiver

vrdAI makes good-faith efforts to conduct ethical, privacy-respecting behavioral analysis. However, we expressly disclaim responsibility for decisions you make based on inferred data, predictive output, or AI-suggested recommendations. Use of the platform remains at your sole discretion and risk.

vrdAI may use your contact information and interaction data to communicate with you for essential operational reasons as well as, where permitted, for promotional or informational purposes. This section outlines the types of communications you may receive, your rights to manage them, and how we ensure your choices are respected.

By using the platform, you consent to receive essential communications as a condition of service, and marketing communications if you have opted in or where legally permitted.

a. Operational and Transactional Communications

These are mandatory communications required to maintain your account, deliver services, and comply with legal or operational obligations. Examples include:

• Account confirmation and verification emails
• Password reset or security alerts
• Subscription confirmations, billing receipts, or invoice notices
• Service availability notices, system downtime alerts, or changes to core policies (e.g., Privacy Policy or Terms of Service updates)
• Support ticket responses or live issue follow-ups

You cannot opt out of these communications while maintaining an active account, as they are deemed essential for service continuity and security.

b. Promotional and Marketing Communications

vrdAI may, from time to time, send you marketing-related messages, including:

• Product updates and feature launches
• Invitations to webinars, events, or early-access programs
• Offers, discounts, referral bonuses, or limited-time promotions
• Educational content, newsletters, or insights about AI trends

These communications are sent only when:

• You have actively opted in (e.g., via a sign-up form or registration process), or
• You are a paying user and the communication qualifies as “legitimate interest” under applicable U.S. marketing standards or similar frameworks.

All marketing emails will include a clear “unsubscribe” link at the bottom of the message.

c. Communication Preferences

You may manage your communication preferences at any time by:

• Visiting your account settings or preferences page
• Clicking the “unsubscribe” link in any non-essential email
• Contacting us at [Insert Contact Email] with a clear opt-out request

Please allow 3–5 business days for processing of opt-out requests. You may continue to receive essential system messages even after unsubscribing from marketing content.

d. Third-Party Marketing

vrdAI does not sell, lease, or rent your personal data to third-party marketers. We also do not permit third-party advertising networks to target you based on data collected through our platform.

In rare cases, we may engage in co-branded or partner campaigns. If you participate:

• You will be informed of the collaboration in advance
• You may be asked for separate consent to share your data
• You will have the opportunity to opt out or decline such communications

Your information will never be shared for advertising purposes without your clear and affirmative consent.

e. In-Platform Notices and Recommendations

You may receive in-app messages, banners, or prompts within the vrdAI platform for:

• Usage tips or product tutorials
• Feature promotions or subscription upgrade offers
• Relevant resources based on your interaction history

These are considered part of the user experience and may be personalized. You can dismiss or disable certain categories of in-app notifications via your account settings.

No Liability Clause

vrdAI endeavors to honor all opt-out requests promptly and transparently. However, we are not responsible for communications received as a result of:

• User-entered incorrect information
• Re-subscription via another form or portal
• Delays caused by third-party email systems or domain filters

We disclaim all liability for perceived “spam” or promotional messaging where you have not opted out through the officially provided methods.

From time to time, vrdAI may offer access to beta, experimental, or pre-release features and tools. These features are made available for testing, feedback, or limited evaluation purposes only and are not guaranteed to be complete, stable, or production-ready.

This section outlines what you should know before using beta tools, how your data may be handled, and what disclaimers apply to their use.

a. Nature of Beta and Experimental Features

Beta and experimental features may include:

• Early-access AI models
• New dashboard layouts or interfaces
• Unreleased APIs or tools under development
• Prompt optimizers, file converters, or alternative output styles
• Limited-use plug-ins, browser extensions, or mobile views

These features are typically flagged with labels such as “Beta,” “Preview,” “Labs,” or “Experimental.” Their availability may change at any time without notice.

b. Data Handling in Beta Environments

By using beta features, you acknowledge and agree that:

• Your data may be processed using algorithms or infrastructure that are still undergoing evaluation
• Output accuracy, consistency, and performance may vary
• Bug reports, user interactions, and system logs may be collected more aggressively for debugging and optimization purposes
• Data processed through beta tools may not be retained under the same deletion, opt-out, or audit timelines as production features
• You should not use beta features to submit sensitive, confidential, or legally regulated content unless explicitly stated otherwise.

c. Feedback and Contribution

If you choose to provide feedback or report issues while using a beta feature:

• Your input may be stored, analyzed, and used to improve the tool
• vrdAI may contact you for clarification or follow-up, where permitted
• Submission of feedback does not entitle you to compensation or recognition, unless specified in a formal beta testing agreement
• Feedback may be used anonymously, in aggregated form, or cited internally for product development.

d. Voluntary Participation and Revocation

Participation in beta features is always optional. You may:

• Enable or disable beta features from your settings or interface panel
• Withdraw from experimental programs at any time by disabling access or contacting us

vrdAI reserves the right to revoke beta access at any time and may suspend experimental features without preserving your data or settings.

e. Risk Acknowledgment and Disclaimer

Beta and experimental features are provided on an “as-is” and “as-available” basis. By using these features, you expressly agree that:

• They may be unreliable, incomplete, or contain security vulnerabilities
• Data loss, formatting issues, or performance degradation may occur
• Features may be discontinued, altered, or removed without warning
• Use is at your sole risk, and you should maintain backups of any important content

Liability Disclaimer

vrdAI, its developers, and affiliates disclaim all warranties and legal obligations related to beta feature use. We shall not be liable for any damages—direct or indirect, incidental, consequential, or special—arising from use of beta features, including but not limited to data corruption, workflow disruption, or third-party reliance.

Your continued use of beta tools constitutes informed consent and release of liability.

vrdAI welcomes suggestions, ideas, feature requests, bug reports, or any other form of user-submitted input (“Feedback” or “Submissions”) intended to help us improve our products and services. This section governs how such content is treated, your rights and responsibilities in submitting it, and how we may use your contributions.

By submitting any form of feedback or content, you agree to the terms set forth below.

a. Voluntary Submissions

All feedback or user-submitted ideas—whether sent via email, form, platform prompt, support ticket, or public discussion—are considered voluntarily provided unless subject to a separate, signed agreement.

vrdAI does not treat such submissions as confidential or proprietary unless a formal Non-Disclosure Agreement (NDA) or enterprise-level confidentiality agreement exists.

b. License to Use

By submitting feedback, you grant vrdAI and its affiliates a non-exclusive, worldwide, royalty-free, irrevocable, perpetual, and sublicensable right and license to:

• Use, reproduce, modify, adapt, publish, display, and distribute your submission
• Incorporate it into future features, documentation, training, or marketing materials
• Make derivative works or commercially exploit the submission without obligation to you

You agree that:

• You will not receive any payment, credit, or compensation
• We are under no obligation to use or respond to your submission
• All rights granted herein are without territorial or usage limitation

c. Representations and Warranties

By making a submission, you represent and warrant that:

• You are the original creator or have full legal rights to provide the material
• Your submission does not infringe on any third-party intellectual property, confidentiality agreement, or applicable law
• The content is not defamatory, illegal, or knowingly harmful
• You are not entitled to any moral rights or further approvals before use

You further agree to indemnify and hold vrdAI harmless from any claims arising from breach of these warranties.

d. Exclusions

This section does not apply to:

• User prompts or AI-generated content submitted for processing within your private account (covered separately under Sections 3 and 15)
• Confidential enterprise discussions subject to a separate services agreement
• Regulated or sensitive content submitted outside of intended use, which may be deleted or flagged for moderation

If you wish to discuss confidential ideas under non-public terms, please contact us to establish a formal agreement first.

e. Third-Party Sharing

vrdAI may share user suggestions with:

• Internal product and engineering teams
• Investors, advisors, or partners (in aggregate or anonymized form)
• External consultants or design researchers (under NDA)

Submissions used in this way are handled respectfully, but we are not obligated to notify you when or how your ideas are implemented.

Waiver of Claims

By submitting content, feedback, or ideas to vrdAI, you irrevocably waive any and all legal or equitable claims against vrdAI, its parent company, employees, or successors regarding:

• Intellectual property usage
• Attribution or credit
• Compensation or licensing
• Product design resemblance

If you do not wish to grant these rights, do not submit feedback or unsolicited content to vrdAI.

vrdAI is built with care, security, and purpose—but like all digital platforms, it carries certain risks. This section outlines the limitations of our responsibility, disclaimers of liability, and the acknowledgments you make by using our Service.

By accessing or using vrdAI, you expressly agree to the disclaimers and limitations of liability detailed below.

a. No Guarantee of Error-Free or Uninterrupted Service

While we strive to provide continuous, secure, and accurate service, we do not warrant or guarantee that:

• The platform will always be available or operate without interruption
• All content will be free of errors, inaccuracies, or misrepresentations
• Data storage will be failproof or immune to system failure
• Outputs generated by AI will be appropriate, lawful, or suitable for any specific purpose

We reserve the right to suspend, modify, or discontinue access to all or part of the Service at any time, for any reason, without liability or notice.

b. AI Limitations and User Risk

You acknowledge and accept that:

• vrdAI outputs are algorithmically generated predictions, not guaranteed facts
• The AI may produce biased, inaccurate, outdated, or offensive content under some conditions
• No part of the platform, including AI responses, constitutes legal, medical, financial, or professional advice
• You are solely responsible for reviewing and validating all results before acting on them
• Use of vrdAI is entirely at your own risk, and you assume full responsibility for any actions, decisions, or outcomes that result

c. Indirect, Incidental, or Consequential Damages

To the maximum extent permitted by law, vrdAI and Aureai Labs LLC disclaim all liability for any indirect, incidental, special, exemplary, or consequential damages, including but not limited to:

• Loss of data
• Business interruption
• System errors or corruption
• Damaged reputation
• Missed business opportunities
• Claims by third parties

This applies even if we were advised of the possibility of such damages, and regardless of the legal theory (contract, tort, negligence, warranty, or otherwise).

d. Platform Access and Account Responsibility

You are responsible for:

• Protecting your login credentials
• Monitoring activity under your account
• Using the platform in compliance with all applicable laws, contracts, and policies

We are not liable for:

• Unauthorized access caused by your negligence
• Data loss due to weak passwords, malware, or third-party compromise
• User errors in inputting or interpreting information

e. No Warranties (Express or Implied)

The vrdAI platform is provided on an “as-is” and “as-available” basis. We make no warranties of any kind, either express or implied, including:

• Implied warranties of merchantability
• Fitness for a particular purpose
• Title or non-infringement
• Accuracy or reliability of data

No information or advice obtained from us or through the platform creates any warranty not expressly stated herein.

f. Jurisdictional Exceptions

Some jurisdictions do not allow the exclusion or limitation of implied warranties or liability for certain damages. In such cases:

• This section will be enforced to the maximum extent permitted by law
• Our total liability shall not exceed the amount you paid (if any) for use of the platform in the twelve (12) months preceding the incident giving rise to the claim
• If you are a California resident, you waive California Civil Code §1542 (which says a general release does not extend to unknown claims)

Assumption of Risk and Indemnity

By using vrdAI, you acknowledge that:

• You are voluntarily engaging with an evolving AI platform
• You are solely responsible for safeguarding your data and content
• You indemnify and hold harmless vrdAI, its parent company, officers, and affiliates from any claims, losses, or disputes arising from your use of the platform

If you do not agree with these terms, you must discontinue use of the Service.

vrdAI is not designed for, directed to, or intended to be accessed or used by individuals under the age of 13 (or the age of digital consent in your jurisdiction, which may be higher in certain countries such as 16 in the European Union).

We take the privacy and safety of children seriously, and this section explains our policy regarding the collection, handling, and deletion of personal data relating to minors.

a. Minimum Age Requirement

You must be at least:

• 13 years old to use vrdAI in the United States (per the Children’s Online Privacy Protection Act, or COPPA)
• The minimum age of digital consent applicable in your country (e.g., 16 in the EEA/UK)

By accessing the Service, you represent and warrant that you meet the minimum age requirement for your jurisdiction. If you are a parent or guardian and believe that your child has accessed the platform in violation of this Policy, please contact us immediately.

b. No Knowing Collection of Children’s Data

vrdAI does not knowingly collect, solicit, or process personal data from children under the minimum age requirement. Specifically:

• We do not allow account creation using a birth date that falls below the permitted age
• We do not knowingly store, track, or analyze any information from individuals identified as children
• If we discover that a minor has created an account or submitted personal data, we will take immediate steps to delete the information and disable the account
• This includes any AI-generated content that may inadvertently reference or involve minor-specific data submitted by the user

c. Educational or Research Access Exception

In the case of supervised educational programs or institutional research approved by schools, organizations, or educational partners:

• Explicit parental or guardian consent must be obtained before any use involving minors
• Data collection must be limited to what is necessary for the authorized educational purpose
• All processing must be compliant with applicable data protection laws (e.g., COPPA, FERPA, GDPR for schools)

vrdAI does not currently offer formal education-specific programs for minors, but reserves the right to do so in the future under strict governance.

d. Parental Rights

If you are a parent or legal guardian and:

• Believe we may have collected information from your child under the age of consent
• Wish to review, delete, or restrict access to that data

You may contact us at [Insert Contact Email]. We will take commercially reasonable steps to verify your identity and remove any such data from our systems, backups, and third-party processors to the extent technically feasible.

Important Note

vrdAI is not liable for false age declarations during registration or for access granted by parents, guardians, or educational institutions without proper consent. You are responsible for monitoring and controlling your child’s digital activity.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA), collectively referred to as “CCPA” herein. This section supplements the rest of the Privacy Policy and applies only to California residents using the vrdAI platform.

vrdAI respects your right to privacy and data transparency. Below are your rights and how we support them.

a. Categories of Personal Information Collected

Over the past 12 months, we may have collected the following categories of information (as defined by CCPA):

• Identifiers (e.g., name, email address, user ID)
• Internet or other electronic activity (e.g., browsing behavior, prompt history, login metadata)
• Commercial information (e.g., subscription status, billing history)
• Device information (e.g., IP address, operating system, browser)
• Inference data (e.g., usage trends, feature preferences—if applicable)
• Geolocation (approximate, not precise, derived from IP address)

We do not collect:

• Social Security numbers
• Driver’s license or passport information
• Biometric or medical data
• Financial account or credit card numbers (processed only via third-party gateways)

b. Use of Personal Information

We collect and use personal information for business purposes including:

• Account registration and authentication
• Platform operations and AI functionality
• Customer service and support
• Usage analytics and optimization
• Security, fraud detection, and legal compliance

We do not use sensitive personal information for automated decision-making or profiling that produces significant effects without your knowledge or consent.

c. No Sale of Personal Information

vrdAI does not and will not sell your personal information (as defined under the CCPA), including any data you provide during use of our AI tools or platform services.

We also do not engage in:

• Cross-context behavioral advertising
• Third-party advertising networks
• Monetization of data through external brokers

If this policy changes, you will be provided with clear notice and an opportunity to opt out.

d. Your CCPA Rights

As a California resident, you have the following rights:

• Right to Know: Request to know the categories and specific pieces of personal information we collect, use, and disclose.
• Right to Delete: Request deletion of personal information we hold about you, subject to exceptions (e.g., legal compliance, fraud prevention).
• Right to Correct: Request correction of inaccurate personal information maintained by us.
• Right to Opt-Out of Sale or Sharing: Not applicable at this time, as we do not sell or share personal data under CCPA definitions.
• Right to Limit Use of Sensitive Information: Not applicable, as we do not process sensitive personal data in ways that trigger this provision.

e. How to Exercise Your Rights

To exercise any of the rights described above:

• Email us at [Insert Contact Email]
• Submit a request through [Insert Online Request Form URL, if available]

To protect your information, we will verify your identity before processing requests. Verification may require matching personal information you provide with data already in our system. If we cannot verify your identity, we may deny the request in accordance with CCPA regulations.

You may also designate an authorized agent to make requests on your behalf. If you do so, we will require written proof of authorization and may contact you directly for confirmation.

f. Non-Discrimination Policy

vrdAI will not discriminate against you for exercising any of your CCPA rights. This means:

• We will not deny you services
• We will not charge different prices or rates
• We will not offer different levels of quality or functionality
• We will not suggest that you may receive such differential treatment for exercising your rights

Limitations and Exceptions

Some CCPA rights are subject to legal exceptions or retention obligations (e.g., tax compliance, anti-fraud). We reserve the right to retain personal data in accordance with these exceptions.

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, your personal data is protected under the General Data Protection Regulation (GDPR) and related national legislation. This section supplements the rest of the Privacy Policy and explains your rights under GDPR, as well as how vrdAI complies with those obligations.

a. Who Is the Data Controller?

For the purposes of GDPR, the data controller is:

• Aureai Labs LLC
• 30N Gould Street, Sheridan, Wyoming- 82801
• Email: info@vrdai.xyz
• Jurisdiction: State of Wyoming, United States

As the data controller, vrdAI determines the purposes and means of processing personal data provided by you or collected during your use of the platform.

b. Lawful Basis for Processing

We process personal data under one or more of the following legal bases:

• Performance of a contract: To provide the platform and services you request.
• Consent: When you voluntarily provide data or opt into marketing communications.
• Legitimate interest: To improve platform performance, prevent fraud, and ensure usability (balanced against your rights).
• Legal obligation: To comply with applicable laws (e.g., tax, regulatory, or law enforcement requests).
• Vital interest or public interest (in rare cases): To prevent serious harm or address health/public safety concerns.

c. Your GDPR Rights

As a data subject under GDPR, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request that we correct inaccuracies in your data.
• Right to Erasure (“Right to Be Forgotten”): Request deletion of your data, subject to legal or contractual retention exceptions.
• Right to Restrict Processing: Request a temporary suspension of data processing under specific conditions.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format.
• Right to Object: Object to data processing based on legitimate interest or direct marketing.
• Right to Withdraw Consent: Revoke consent at any time for data processed on that basis, without affecting prior processing.

To exercise these rights, contact us at: [Insert Contact Email]. We will respond within the timeframe required by GDPR (typically 30 days).

d. International Data Transfers

Your data may be transferred to and processed in the United States or other non-EEA countries that may not offer the same level of data protection as your jurisdiction. Where such transfers occur, we ensure adequate safeguards through:

• Standard Contractual Clauses (SCCs) approved by the European Commission or UK ICO
• Other lawful mechanisms under GDPR Articles 46–49

You acknowledge and agree to this transfer by continuing to use the platform.

e. Data Protection Authority Contact

If you believe your data rights have been violated, you have the right to lodge a complaint with your local Supervisory Authority or Data Protection Authority (DPA). A list of EU Supervisory Authorities is available at:

• https://edpb.europa.eu/about-edpb/board/members_en
• For UK residents: https://ico.org.uk/

We encourage you to contact us first to attempt resolution before escalating a complaint.

Limitation of Rights

In some cases, your GDPR rights may be limited or deferred due to:

• National security or law enforcement requirements
• Conflicts with intellectual property or platform integrity
• Inability to verify your identity with reasonable effort

vrdAI reserves the right to retain necessary data under Article 6(1)(c) and 6(1)(f) of the GDPR where applicable.

While vrdAI is primarily operated under the laws of the United States (State of Wyoming), we recognize that users from various jurisdictions may access the platform. This section outlines additional rights or responsibilities that may apply under specific regional or national privacy frameworks, beyond CCPA (California) and GDPR (EEA/UK), which have been addressed separately.

By accessing the platform from any jurisdiction outside the United States, you acknowledge and agree that your data will be processed in accordance with this Privacy Policy and stored in the United States.

a. Canada (PIPEDA)

For users in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) may apply:

• You may request access to and correction of your personal information at any time.
• Data is processed based on consent or contractual necessity.
• We do not use your information for automated decision-making without meaningful human involvement.
• Cross-border data transfers to the U.S. are protected by reasonable contractual and technical safeguards.

To exercise your Canadian privacy rights, please contact us at [Insert Contact Email].

b. Australia (Privacy Act 1988)

vrdAI does not maintain servers in Australia but serves users under the Australian Privacy Principles (APPs) to the extent they are applicable:

• You may request access to or correction of your personal data.
• We do not use direct marketing unless you have provided express or inferred consent.
• Cross-border transfers occur only to countries with comparable privacy obligations (e.g., the U.S., under this Policy).
• We will respond to any complaint under the APPs in a timely and structured manner.

Australian users may contact the Office of the Australian Information Commissioner (OAIC) for unresolved complaints.

c. Brazil (LGPD)

Users in Brazil are protected under the Lei Geral de Proteção de Dados Pessoais (LGPD):

• You have rights similar to those under GDPR, including access, correction, deletion, and objection.
• Your data is processed based on consent, contract, or legitimate interest.
• Transfers to the United States are conducted with standard contractual and technical safeguards.
• Our designated Data Protection Officer (DPO) for Brazilian users can be reached via [Insert Contact Email].

d. India (DPDP Act, 2023)

vrdAI anticipates compliance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) once fully in force:

• We will honor user requests for access, correction, withdrawal of consent, and grievance redressal.
• Cross-border transfers to the U.S. will occur under appropriate safeguards as per Indian law.
• All reasonable efforts are made to ensure data is not retained longer than necessary.
• We are not responsible for local data localization laws that may restrict access from within India unless required by court or government order.

e. Other Countries

If you are accessing the platform from any jurisdiction with privacy laws not explicitly listed here (e.g., Japan, Singapore, South Africa, UAE):

• vrdAI will apply a good-faith standard of care aligned with the core principles of transparency, user choice, and accountability.
• Your data will still be processed under U.S. legal jurisdiction.
• You may have local recourse rights through your national data protection authorities.

Please note that we do not offer region-specific contract terms or localized data residency unless included in a negotiated enterprise agreement.

Universal Limitation of Rights and Remedies

vrdAI provides privacy protections consistently and transparently to all users, regardless of location. However, your ability to enforce rights or pursue legal remedies may be limited by jurisdictional law, data transfer exemptions, or enforceability constraints under U.S. jurisdiction.

We recommend that all users consult a local privacy professional if they have concerns about how their rights apply to this cross-border context.

vrdAI reserves the right to modify, update, or revise this Privacy Policy at any time, in response to evolving legal requirements, business needs, technological changes, or service enhancements. This section explains how such changes will be communicated and how they affect your continued use of the platform.

a. Notification of Changes

When we update the Privacy Policy:

• The “Last Updated” date at the top of this document will be revised.
• Significant or material changes may be communicated via:
• Email to registered users
• In-platform banners or pop-up notifications
• Notices posted on our official website

We encourage you to check this page regularly to stay informed about our current privacy practices.

b. Material vs. Non-Material Changes

Material changes are those that impact your rights, obligations, or how we handle your data (e.g., new categories of data collected, updated third-party sharing policies, or changes to opt-out procedures).

Non-material changes may include editorial revisions, clarification of language, or updated contact information.

Material changes will be communicated with at least 7 days’ prior notice, where feasible and required by law. Non-material changes may be implemented without additional notice beyond updating the public version of the Policy.

c. Your Continued Use as Consent

By continuing to use vrdAI after any changes to this Privacy Policy become effective, you:

• Acknowledge that you have reviewed the updated Policy
• Agree to be bound by the modified terms
• Reaffirm your consent to the collection, use, and disclosure of personal information as outlined

If you do not agree to the updated Policy, your sole remedy is to stop using the platform and, where applicable, delete your account.

d. Archiving of Prior Versions

Upon request, we may provide archived versions of previous Privacy Policies for your review. However, only the current, published version is legally binding for ongoing use.

No Retroactive Liability

Changes to this Privacy Policy will apply prospectively only, and vrdAI expressly disclaims any liability for actions taken under a previous version of the Policy that were lawful and compliant at that time.

This Privacy Policy—along with all matters related to your access to and use of the vrdAI platform—is governed by the laws of the United States of America and the State of Wyoming, without regard to its conflict of laws principles.

By using the Service, you agree that:

a. Governing Law

All questions concerning the construction, validity, enforcement, and interpretation of this Privacy Policy (and any related agreements or disputes) shall be governed by and construed in accordance with:

• The laws of the State of Wyoming, and
• Any applicable federal laws of the United States

vrdAI makes no representation that the platform is appropriate or lawful in jurisdictions outside the U.S. You are solely responsible for complying with all local laws in your region.

b. Jurisdiction and Venue

You agree that any dispute, claim, or controversy arising out of or relating to this Privacy Policy, your use of the platform, or your relationship with vrdAI shall be:

• Exclusively resolved in the state or federal courts located in Sheridan County, Wyoming
• Subject to the personal and exclusive jurisdiction of those courts

You expressly waive any objection to venue, including claims of forum non conveniens, and agree not to initiate legal action in any jurisdiction other than Wyoming.

c. International Enforcement Limitations

Users residing outside the United States agree:

• To submit to the jurisdiction of U.S. courts for enforcement or defense of this Privacy Policy
• That enforcement of foreign laws or judgments may be limited by U.S. constitutional or statutory principles
• That vrdAI shall not be liable for failure to comply with foreign legal processes not recognized under U.S. law or not served through proper channels

d. Language of Interpretation

This Privacy Policy is written in English and shall be interpreted exclusively in English. Translations may be provided for convenience only, and the English version shall prevail in the event of any conflict or ambiguity.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact us through the following official channel:

• Aureai Labs LLC
• 30N Gould Street, Sheridan, Wyoming- 82801
• Email: info@vrdai.xyz

We respond to all verified inquiries in accordance with applicable data protection laws. If your concern is unresolved, you may escalate it to the appropriate supervisory authority as outlined in Section 24 or 25.