Privacy policy

vareon.com is part of Vareon, Inc., Irvine, California, and in this policy “Vareon”, “we” and “us” mean Vareon, Inc.

This policy applies when Vareon decides how personal data is used for vareon.com, contact and sales conversations, customer account administration, billing, and support. In those situations, Vareon acts as a controller.

When Vareon processes product data for a Duplex customer, the customer agreement and data-processing terms define the parties’ roles and instructions. The customer is typically the controller and Vareon is its processor where Vareon receives that data. Where the customer runs the software on its own systems, Vareon generally receives product data only when the customer provides access or support material.

A third party’s own processing, including by a model provider, identity provider, payment provider or a website reached through a link, is governed by that party’s privacy terms. Review those terms before using its service.

The data involved depends on how a person or customer interacts with Vareon:

• ·Contact data: name, work email, organisation, role, message, and any files or other information a person chooses to send.
• ·Account and administration data: name, email, organisation, account identifiers, role, identity-provider details, access status, and records needed to administer a customer relationship.
• ·Billing data: billing contacts, purchase and invoice details, payment status, and payment tokens or references returned by a payment provider. Vareon does not store full card numbers when a payment provider handles the transaction.
• ·Technical and security data: routine request and security records such as IP address, browser or device information, timestamps, and events needed to protect and operate the website or customer account.
• ·Preference data: the cookie choice a visitor made, and a light or dark appearance choice, each stored in a first-party cookie.
• ·Support data: diagnostic information, correspondence and product material a customer chooses to provide for support. Customers should use the agreed support channel and share only the data Vareon needs.

Vareon receives personal data directly from the person, from the customer organisation that creates or manages an account, from an identity or payment provider used for that relationship, and from routine operation of the website and customer services.

Vareon uses personal data to respond to messages and requested information; assess product fit; prepare evaluations, security reviews, and quotes; create and administer customer access; provide support; process billing; protect the website and services; prevent abuse; maintain business records; and comply with law.

Depending on the context and applicable law, the legal basis is taking steps at a person’s request, performing a contract, Vareon’s legitimate interests in operating and protecting its business and communicating with customers, compliance with a legal obligation, or consent. Where Vareon relies on legitimate interests, it considers the effect on the people involved.

Where processing relies on consent, consent may be withdrawn for future processing. Processing that was lawful before the withdrawal remains lawful.

vareon.com uses no analytics, advertising or social-media trackers. It loads no third-party scripts, sets no third-party cookies and does not fingerprint browsers. It sets two first-party cookies:

• ·vareon-consent, strictly necessary: whether you accepted or denied, the version of the question you answered, and when. It saves the site from asking again on every page. It expires after six months, and the site then asks again.
• ·vareon-theme, a preference: the light or dark appearance you chose, set only when you choose one. With your consent it lasts one year; without it, it is deleted when you close the browser. Choosing the system setting removes it.

Nothing that is not strictly necessary is stored until you accept, and denying is as easy as accepting. If your browser sends a Global Privacy Control or Do Not Track signal, the site treats it as a refusal and does not ask.

The consent cookie relies on the exemption for strictly necessary storage and on Vareon’s legitimate interest in respecting your choice. Keeping your appearance for a year relies on your consent.

Before Vareon uses any other cookie or similar technology that is not strictly necessary, it will describe it here and ask for consent first.

A customer console may use cookies or browser storage that are strictly necessary for sign-in, security and requested features.

Your choice applies to this browser on this device. You can change it here at any time, as easily as you made it. Accepting lets the site keep your appearance for a year. Denying withdraws that consent, and the appearance cookie then ends with the browser session.

Clearing this site’s cookies in your browser also clears your choice, and the site will ask again.

Vareon does not sell personal data, share it for cross-context behavioural advertising or use it for targeted advertising.

Vareon does not use website contact data or customer account data to train AI models.

Each customer’s product data is kept separate from other customers’ data. Its permitted processing is defined by the customer agreement and data-processing terms, and its deployment controls are described on Security and deployment.

Vareon may disclose personal data to service providers used for hosting and compute, identity and authentication, and billing. Those providers process data for the relevant service under their agreements with Vareon. The providers used for a customer deployment, and any required subprocessor terms, are addressed in the applicable customer documents.

Vareon may also disclose information when reasonably necessary to comply with law or legal process; protect people, rights, or services; investigate abuse; establish or defend legal proceedings; or complete a financing, acquisition, reorganisation, or sale subject to appropriate confidentiality and legal requirements.

Vareon and its service providers may process personal data in countries other than the country where it was collected. Where transfer rules apply, the relevant service terms or customer documents identify the transfer basis and safeguards required for that processing.

Vareon keeps personal data for as long as reasonably necessary for the purpose for which it was collected, including the customer relationship, security, dispute handling, and legal, tax, accounting, or recordkeeping obligations. The period depends on the data and context, so it varies by category.

When data is no longer needed, Vareon deletes or de-identifies it where reasonably practicable. Limited copies may remain in backups or records that must be kept by law until those copies are overwritten or the applicable obligation ends. Each cookie expires as described above.

Vareon uses administrative, technical, and organisational measures intended to protect personal data, including access controls and encryption in transit. Product deployments also keep each customer separate and use placement-specific controls. No transmission or storage method is completely secure, and this policy does not state that Vareon holds a certification. See Security and deployment For current product information.

Depending on applicable law, a person may have rights to access, correct, delete, restrict, object to processing, receive a portable copy, withdraw consent, or opt out of a sale, sharing, or targeted advertising. Vareon does not currently sell personal data or use it for targeted advertising.

To make a request, use the Contact page And identify the request, the email or account involved, and the relevant jurisdiction. Vareon may request information needed to confirm identity and authority. An authorised agent may submit a request where applicable law permits it.

Vareon will handle a valid request as required by applicable law. Legal exceptions may apply. Where available, a person may appeal a decision about a request or complain to the data-protection authority in the place where they live or work.

The website and Duplex are intended for business use and are not directed to children. Vareon does not knowingly collect personal data from children through the public website. If you believe a child has provided personal data, contact Vareon so the situation can be reviewed and appropriate action taken.

Vareon may update this policy as its practices or legal requirements change. The date above shows the latest revision. If a change materially affects an existing customer relationship, any additional notice required by the applicable agreement or law will be provided through the relevant channel.

For a privacy question or request, use the Contact page.