Verent Privacy Policy

Last Updated: April 22, 2025

1. Introduction

Max Gatenby LLC (“Verent,” “we,” “us,” or “our”), located at 239 Spring Street, Red Bank, NJ 07701, USA, operates verent.io, a platform for renters to create verified identity profiles and share them with landlords. This Privacy Policy explains how we collect, use, store, and protect your personal information, complying with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), New Jersey privacy laws, and other applicable regulations. Questions? Contact us at info@verent.io.

2. Scope

This Policy applies to all users (renters, landlords) of the Service (website, mobile apps, Tally forms, SmartShare links) and covers personal information collected now and in the future (e.g., blockchain-based verification).

3. Personal Information We Collect

We collect the following categories of personal information:

• Identifiers: Name, email address, phone number, account credentials (via Tally or future interfaces).

• Financial Data: Bank account details, income, rent payment history (via Plaid or manual uploads).

• Government ID: Driver’s license or ID number (for manual uploads, if applicable).

• Commercial Data: Subscription details, payment history.

• Internet Activity: IP address, browser type, device information, website interactions (via Firebase analytics).

• Sensitive Data: Financial information (protected per GDPR/CCPA).

• Future Data: Blockchain-based identifiers or international data, disclosed at collection.

4. Sources of Personal Information

• Directly from You: Tally forms, account creation, manual uploads (e.g., bank statements, IDs).

• Third Parties: Plaid (bank data), Firebase (analytics), future providers (e.g., Finicity, Ripple).

• Automatically: Cookies, IP logs via Firebase for security and analytics.

5. Purposes for Collecting Personal Information

We use personal information to:

• Create and verify renter profiles (identity, income, rent history).

• Share profiles with landlords via SmartShare links.

• Process payments (e.g., $15/mo Pro plan).

• Improve the Service (e.g., analytics, fraud detection).

• Comply with legal obligations (e.g., GDPR, CCPA, New Jersey laws).

• Future purposes: Blockchain verification, enterprise analytics, international compliance, disclosed at collection.

6. How We Share Personal Information

• Landlords: Renters’ verified profiles (name, income, rent history) are shared with landlords you authorize via SmartShare links.

• Service Providers: We share data with:

  • Plaid (verification), Firebase (storage), Tally (forms), [Payment Processor, e.g., Stripe].

  • Future providers (e.g., Finicity, Ripple) under strict contracts per CCPA/GDPR.

• Legal Obligations: We may disclose data to comply with laws, court orders, or fraud prevention, including New Jersey Consumer Fraud Act requirements.

• No Selling: Verent does not sell personal information for monetary or other consideration, per CCPA.

7. Data Storage and Security

• Storage: Data is stored in Firebase (AES-256 encryption, U.S. servers) and Tally (SOC2-compliant).

• Security Measures: Norton AntiVirus Plus, macOS firewall, TLS 1.3, admin 2FA, regular audits.

• Future Storage: Blockchain (e.g., XRP Ripple) or international servers, disclosed at expansion.

• Retention: Data is retained only as needed for the Service (e.g., active subscriptions) or legal requirements. Deleted data is erased within 30 days, except for legal backups.

8. Your Rights Under GDPR (EU Residents)

If you’re in the EU, you have the following rights under GDPR:

• Access: Request a copy of your data.

• Rectification: Correct inaccurate data.

• Erasure: Request data deletion (subject to legal exceptions).

• Restriction: Limit data processing.

• Portability: Receive data in a machine-readable format (e.g., CSV).

• Object: Object to processing for marketing or profiling.

• Automated Decisions: Not be subject to solely automated decisions (Verent does not use these).

• Exercise Rights: Contact Max Gatenby, DPO, at info@verent.io. We respond within 30 days.

• Complaints: Contact your local data protection authority (e.g., ICO in UK).

9. Your Rights Under CCPA/CPRA (California Residents)

If you’re in California, you have the following rights under CCPA/CPRA:

• Know: Access categories and specific pieces of personal information collected in the past 12 months.

• Delete: Request deletion of personal information (subject to exemptions, e.g., legal obligations).

• Opt-Out: Opt out of data selling (not applicable, as Verent does not sell data).

• Non-Discrimination: Equal service and pricing regardless of exercising rights.

• Authorized Agent: Designate an agent to submit requests (proof required).

• Exercise Rights: Use our web form at verent.io/ccpa-request, email info@verent.io, or call [Toll-Free Number, insert if available]. We verify identity using existing data (e.g., email, Plaid data) and respond within 45 days.

• Do Not Sell Link: Not applicable, but available at verent.io/do-not-sell for transparency.

10. International Data Transfers

• Current: Data is processed in the U.S. (Firebase, Plaid). EU/UK data is protected via Standard Contractual Clauses (SCCs) per GDPR.

• Future: International expansion (e.g., Canada, Asia) will use SCCs or local compliance frameworks, disclosed at transfer.

11. Cookies and Tracking

• Cookies: We use essential cookies (Firebase) for security and analytics. No marketing cookies are used.

• Consent: EU/UK users consent via Tally checkbox; California users can opt out via verent.io/cookie-settings.

• Future: Blockchain or analytics tools may introduce new trackers, with prior consent.

12. Children’s Privacy

Verent does not knowingly collect data from children under 16. If detected, we delete such data immediately, per COPPA and GDPR.

13. Updates to This Policy

We update this Policy annually or when practices change (e.g., blockchain integration, new providers). Updates are posted at verent.io/privacy, with email notice to info@verent.io subscribers. Continued use after updates constitutes consent.

14. Contact Us

For questions or to exercise rights:

• Email: info@verent.io

• Mail: Max Gatenby LLC, 239 Spring Street, Red Bank, NJ 07701, USA

• DPO: Max Gatenby, info@verent.io

• Complaints: Contact your local authority (e.g., California AG at oag.ca.gov, EU DPA, New Jersey Division of Consumer Affairs at njconsumeraffairs.gov).

15. Additional Information

• Third-Party Links: The Service may link to third-party sites (e.g., Plaid). Their privacy policies apply.

• Accessibility: Request an oral version of this Policy at info@verent.io for accessibility needs.

• Languages: Available in English; additional languages (e.g., Spanish) for international expansion, per CCPA.

• New Jersey Residents: Per New Jersey law, you may contact the Division of Consumer Affairs for privacy concerns.