VERDIX
Legal

Privacy Policy

Last updated: 23 June 2026

1. Who we are

This Privacy Policy describes how Insaights B.V. ("Insaights", "we", "our", "us") processes personal data in connection with the verdix.app website and the VERDIX AI governance platform.

Controller:
Insaights B.V.
Amsterdam, the Netherlands
Registered with the Dutch Chamber of Commerce (KvK)
Contact: privacy@insaights.co

2. What data we collect

2.1 Website visitors (verdix.app)

When you visit verdix.app, we may collect:

  • IP address (anonymised after 24 hours)
  • Browser type and version
  • Pages visited and time spent
  • Referring URL
  • Cookie preferences

We do not use third-party advertising trackers on verdix.app.

2.2 Demo and contact requests

When you submit a demo request or contact form, we collect:

  • Full name
  • Business email address
  • Company name
  • Message content

2.3 Platform users (verdix.insaights.co)

The VERDIX client platform at verdix.insaights.co processes additional categories of data under a separate Data Processing Agreement. Please refer to your DPA for details.

3. Legal basis for processing

We process personal data on the following legal bases under the GDPR:

  • Legitimate interests (Article 6(1)(f)): Website analytics, security monitoring, and responding to business enquiries.
  • Consent (Article 6(1)(a)): Analytics cookies, where consent has been collected via our cookie banner.
  • Contract performance (Article 6(1)(b)): Processing necessary to provide the VERDIX platform to contracted customers.
  • Legal obligation (Article 6(1)(c)): Where required by applicable law.

4. How we use your data

We use the data we collect to:

  • Respond to demo requests and enquiries
  • Improve the performance and content of verdix.app
  • Monitor for security threats and abuse
  • Fulfil contractual obligations to platform customers
  • Comply with applicable legal and regulatory obligations

We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal or similarly significant effects.

5. Data storage and transfers

All personal data processed in connection with verdix.app is stored on infrastructure located within the European Economic Area (EEA). We do not transfer personal data to third countries without appropriate safeguards in place.

VERDIX is incorporated in the Netherlands. EU law — including the GDPR — applies to all data processing operations.

6. Data retention

We retain personal data for as long as necessary for the purpose for which it was collected:

  • Website analytics data: 13 months (anonymised after 24 hours)
  • Demo and contact request data: 24 months from last interaction
  • Platform customer data: as specified in the applicable DPA

7. Your rights

Under the GDPR, you have the following rights with respect to your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate personal data.
  • Erasure: Request deletion of your personal data, subject to legal retention requirements.
  • Restriction: Request that we restrict processing of your personal data.
  • Portability: Receive your personal data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdrawal of consent: Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, contact us at privacy@insaights.co. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

8. Cookies

verdix.app uses a small number of technically necessary cookies required for the site to function. Analytics cookies are used only with your consent, collected via the cookie banner on first visit.

You can withdraw cookie consent at any time by clearing your browser cookies or adjusting your browser settings.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encryption in transit (TLS), access controls, and regular security reviews.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced on this page with an updated "last updated" date. We recommend reviewing this policy periodically.

11. Contact

Questions about this Privacy Policy or our data practices:
privacy@insaights.co

Insaights B.V.
Amsterdam, the Netherlands