Privacy Policy

1. Introduction

Verde360 ("we," "us," or "our") operates the Verde360 environmental compliance platform and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our platform, or interact with us in any way.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, phone number, company name, and job title when you register or contact us.
• Contact form submissions: name, email address, and message content submitted through our contact form.
• Documents and files: environmental compliance documents, permits, licenses, and related files you upload to our platform.
• Payment information: billing address and payment details processed by our third-party payment processor.

2.2 Information Collected Automatically

• Usage data: pages viewed, features used, time spent, and interactions within the platform.
• Device and browser information: IP address, browser type, operating system, device identifiers, and language preferences.
• Cookies and tracking technologies: we use cookies, web beacons, and similar technologies to maintain sessions, remember preferences, and analyze usage patterns.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our platform and services.
• Send alerts, notifications, and reminders related to your environmental compliance obligations.
• Facilitate communication between you and our environmental compliance consultants.
• Process transactions and send related billing and account information.
• Respond to your inquiries, comments, and support requests.
• Analyze usage trends and improve the functionality and user experience of our services.
• Comply with legal obligations and enforce our terms of service.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: with trusted third-party vendors who assist us in operating our platform, processing payments, sending communications, and analyzing data, subject to confidentiality agreements.
• Environmental consultants: with consultants assigned to your account for the purpose of providing compliance advisory services.
• Legal requirements: when required by law, regulation, legal process, or governmental request.
• Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, in which case your information may be transferred as part of the transaction.
• With your consent: when you have given us explicit permission to share your information for a specific purpose.

5. Data Security

We implement industry-standard administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest.
• Regular security assessments and penetration testing.
• Role-based access controls and multi-factor authentication.
• Secure data backup and disaster recovery procedures.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When your information is no longer needed, we will securely delete or anonymize it.

7. Your Rights Under Federal Law

Under applicable U.S. federal laws, you have the right to:

• Access the personal information we hold about you and request a copy of such information.
• Request correction of inaccurate or incomplete personal information.
• Opt out of receiving marketing communications at any time by using the unsubscribe link in our emails or contacting us directly.
• File a complaint with the Federal Trade Commission (FTC) if you believe your privacy rights have been violated.

8. Your Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) grants you additional rights regarding your personal information:

• Right to know: you have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which the information was collected, the business purpose for collecting or selling the information, and the categories of third parties with whom we share personal information.
• Right to delete: you have the right to request the deletion of your personal information, subject to certain exceptions provided by law.
• Right to correct: you have the right to request the correction of inaccurate personal information.
• Right to opt out of sale or sharing: you have the right to opt out of the sale or sharing of your personal information. Verde360 does not sell personal information.
• Right to limit use of sensitive personal information: you may direct us to limit the use of sensitive personal information to purposes necessary to provide the services.
• Right to non-discrimination: we will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to verifiable consumer requests within 45 days.

9. Your Rights Under the Texas Data Privacy and Security Act (TDPSA)

If you are a Texas resident, the Texas Data Privacy and Security Act (effective July 1, 2024) provides you with the following rights:

• Right to access: you have the right to confirm whether we are processing your personal data and to access such data.
• Right to correction: you have the right to correct inaccuracies in your personal data, taking into account the nature and purposes of the processing.
• Right to deletion: you have the right to delete personal data that you have provided to us or that we have obtained about you.
• Right to data portability: you have the right to obtain a copy of your personal data in a portable and readily usable format, to the extent technically feasible.
• Right to opt out: you have the right to opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
• Right to appeal: if we decline to take action on your request, you have the right to appeal our decision. We will inform you of any action taken or not taken in response to your appeal within 60 days.

To exercise these rights, please contact us using the information provided below. We will respond to your request within 45 days. If we are unable to comply, we will explain the basis for our refusal. You may also lodge a complaint with the Texas Attorney General at www.texasattorneygeneral.gov.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete such information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your personal information, please contact us at:

• Email: privacy@verde360.com
• Address: Verde360, Inc. — [Your business address]

For California residents, you may also contact the California Attorney General at oag.ca.gov/privacy.