Investing, simplified. Privacy, respected.
This policy explains how Verdct collects, uses, shares, protects and retains personal information when you use Verdct.org, the Verdct mobile application and related services.
Verdct ("Verdct," "we," "us," or "our") is an Alberta-incorporated company that provides Verdct.org, a mobile application and related investment-information services (collectively, the "Services"). This Privacy Policy applies when you access or use a Verdct Service that links to it.
This policy should be read together with Verdct's Terms of Use, Financial and Investment Disclaimer, AI Disclosure and any notice presented when a specific feature collects or uses information.
Third-party websites, app stores, news sources, market-data providers, authentication providers and other services linked from Verdct have their own privacy practices. This policy does not govern those third parties.
We design our privacy practices around accountability, transparency, meaningful consent, limited collection, appropriate safeguards, accuracy, access and responsible retention.
Portfolio and investment information can reveal sensitive details about a person's finances. We treat that information as sensitive and do not use it for unrelated behavioural advertising.
Verdct does not sell personal information for money. We require service providers to process personal information only for authorized purposes, subject to appropriate contractual and security requirements.
When you create or manage an account, we may collect your name, email address, account identifier, authentication information, province or country, language, preferences and similar profile details.
We may collect information that you choose to enter, upload, import or otherwise provide, including securities, quantities, account labels, cost basis, allocations, watchlists, transactions, dividends, cash balances and performance information.
Verdct may use this information to display your portfolio, calculate metrics, personalize alerts, explain changes and generate educational or AI-assisted insights. Calculations and outputs depend on the accuracy, timeliness and completeness of the information available to Verdct.
We may receive your subscription plan, purchase status, renewal status, receipt or transaction identifier and related entitlement information from Apple or another authorized payment provider. Payment-card details are generally processed by the applicable app store or payment provider rather than Verdct.
When you use the Services, we may automatically receive an IP address, device type, operating system, browser, app version, language, time zone, push-notification token, security events, log data, crash reports, diagnostics, screens viewed, feature interactions, searches and notification engagement.
We collect information contained in support requests, feedback, survey responses, privacy requests and other communications with Verdct.
We may receive information from app stores, authentication providers, market-data providers, analytics or crash-reporting providers, notification providers and other services used to operate Verdct. We receive only the information made available under the relevant integration, agreement and your settings or authorization.
We collect information directly from you, automatically through the Services, and from third parties that support Verdct or that you choose to connect. Where a feature involves a material or unexpected use, we may provide additional notice and request consent where required.
We use personal information to create and maintain accounts; display and organize portfolio information; calculate portfolio metrics; provide market news and educational content; generate daily scores, explanations and alerts; remember preferences; and deliver requested functionality.
We use account, device, authentication and activity information to secure accounts, detect suspicious activity, prevent fraud or abuse, troubleshoot errors, maintain availability and enforce our Terms of Use.
We use contact and account information to answer questions, provide service and security notices, deliver requested notifications, explain changes, and send marketing communications where permitted. You may unsubscribe from marketing messages, but we may continue to send transactional, legal and security communications.
We may analyze usage, diagnostics and feedback to understand feature performance, improve usability, develop new functionality, test changes and maintain quality. Where practical, we use aggregated or de-identified information for these purposes.
We may use personal information to comply with law, respond to valid legal process, protect rights and safety, investigate disputes, maintain records, complete audits, and support a financing, merger, acquisition, reorganization or sale of all or part of the business.
Verdct may use artificial intelligence and automated systems to summarize market news, explain portfolio changes, classify information, identify patterns, generate plain-language observations and support certain user-service functions.
Depending on the feature, inputs may include portfolio information, user preferences, prompts, relevant market information and limited contextual information needed to produce the requested output.
Verdct does not use AI outputs to execute trades, transfer money or change investments. Human review is not guaranteed for every output. Users should verify important information using primary sources and consult qualified professionals where appropriate.
Verdct may retain limited prompts, outputs, feedback and diagnostic information to deliver the feature, investigate errors, improve quality, prevent misuse and support users, subject to access controls and retention practices. We do not authorize third-party AI providers to use personal portfolio information for unrelated advertising.
Verdct may allow users to enter holdings manually, upload or import information or, where offered, authorize a connection through a third-party financial-data provider. The exact information available depends on the feature, provider and your authorization.
Unless Verdct expressly introduces a separately disclosed regulated transaction feature, Verdct does not place trades, route orders, hold or custody assets, withdraw money, transfer funds or change investments. A third-party connection is also governed by that provider's terms and privacy notice.
You may revoke a connection through the available account settings or through the relevant provider. Revocation stops future collection through that connection but does not automatically delete information already received and lawfully retained by Verdct.
Verdct may use cookies, local storage, software development kits and similar technologies for authentication, security, preferences, analytics, crash reporting, performance and feature operation.
Some technologies are necessary for the Services to function. Where required, we will seek consent before using non-essential technologies. Browser, device and operating-system settings may allow you to limit certain technologies, although doing so can affect functionality.
We may share information with carefully selected providers that host or support the Services, authenticate users, process subscription entitlements, deliver notifications, provide analytics or crash reporting, supply market data, support AI-assisted features, provide customer support, or assist with security, accounting and legal compliance.
Service providers are permitted to process information only for authorized purposes and are expected to use appropriate confidentiality and security safeguards.
We may disclose information where we reasonably believe disclosure is required by law or valid legal process; necessary to detect, investigate or prevent fraud, abuse or security incidents; or appropriate to protect Verdct, users or the public.
Information may be disclosed in connection with due diligence, financing, merger, acquisition, reorganization, sale of assets or a similar transaction. We will use appropriate safeguards and provide notice where required by law.
We may share information when you direct us to do so, activate an integration or otherwise provide valid consent.
Verdct and its service providers may process or store information in Canada, the United States or other jurisdictions. Information processed outside your province or country may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement or national-security authorities under local law.
We assess providers and use contractual, technical and organizational safeguards appropriate to the sensitivity of the information and the service provided.
We retain personal information only as long as reasonably necessary for the purposes described in this policy, including service delivery, security, fraud prevention, dispute resolution, accounting, legal compliance and enforcement.
Retention periods vary by data type. Account and portfolio information is generally retained while an account remains active and for a limited period after deletion to complete the deletion process, protect the Services and satisfy legal obligations. Security logs, support records, subscription records and consent records may be retained for different periods.
When information is no longer required, we delete it, de-identify it or allow it to be overwritten through established backup cycles. Residual copies may remain temporarily in protected backups.
Users may initiate account deletion through the account or privacy settings available in the App, or contact Verdct. Deleting the App from a device does not delete a Verdct account. We may retain limited information where required by law or reasonably necessary for fraud prevention, security, accounting or dispute purposes.
Verdct uses administrative, technical and organizational safeguards designed to protect personal information against loss, theft and unauthorized access, use, disclosure, copying, modification, disposal or destruction.
Safeguards are selected based on the sensitivity and amount of information, the purposes for which it is used and the format in which it is stored. Measures may include encrypted communications, access controls, authentication protections, logging, monitoring, secure development practices, vendor review, backup procedures and incident-response processes.
No online service can guarantee absolute security. You are responsible for protecting your device and credentials, using a strong and unique password, and promptly reporting suspected unauthorized access.
We investigate suspected privacy and security incidents and take reasonable steps to contain, assess and remediate them. Where required by applicable law, we will notify affected individuals and privacy regulators of qualifying breaches.
Depending on applicable law and the circumstances, you may have the right to:
We may need to verify your identity before completing a request. We may refuse or limit a request where permitted or required by law and will explain the reason where appropriate.
You can manage push notifications through device settings and available in-app controls. You can unsubscribe from marketing emails using the link in the message.
Verdct is intended for adults and is not directed to children. You must be at least 16 years old, or the age of majority in your jurisdiction if higher, to create an account. If we learn that personal information was collected from a child contrary to this policy, we will take appropriate steps to delete it.
Verdct may display or link to news, market information, app stores, authentication services and other third-party content. Verdct does not control third-party privacy practices, and you should review the applicable privacy notice before providing information to a third party.
We may update this Privacy Policy when our Services, practices or legal obligations change. We will post the updated policy on Verdct.org with a revised effective date and provide additional notice or obtain consent where required for material changes.
Questions, access or correction requests, account-deletion requests, consent withdrawals and privacy complaints may be submitted to the person responsible for Verdct's privacy program:
We will review and respond to privacy inquiries within the time required by applicable law. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta or, where applicable, the Office of the Privacy Commissioner of Canada.
Verdct is incorporated in Alberta, Canada. Verdct's privacy program is designed with reference to Alberta's Personal Information Protection Act (PIPA), which governs provincially regulated private-sector organizations in Alberta, and the federal Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies, including certain interprovincial and international commercial activities.
Other Canadian provincial privacy laws may apply depending on the location of a user and the nature of the activity. Nothing in this policy limits rights that cannot lawfully be limited.