Who This Policy Covers: This Privacy Policy applies to verdoco.com and all VerdoCo compliance documentation products, operated by Nexosprop Logistics Corp. By using this website or purchasing any VerdoCo product, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. Please read it carefully — VerdoCo has data practices that are specific to our forensic document personalization system and that differ from standard e-commerce platforms.
Who We Are
VerdoCo is a compliance documentation platform operated by Nexosprop Logistics Corp ("VerdoCo," "we," "our," or "us"). Our principal place of business is in the United States. This Privacy Policy governs the collection, use, retention, and disclosure of personal information through verdoco.com and all associated products and services.
For privacy-related inquiries, including rights requests, contact us at:
hello@verdoco.com · Subject Line: Privacy Inquiry
Information We Collect
2.1 — Purchase and Transaction Data
When you purchase a VerdoCo product, we collect the following information at checkout:
- Full legal name and professional title
- Organization legal name
- Email address
- Purchase date and time
- System-generated transaction ID
- Order history and purchase records
2.2 — Forensic Personalization Data (Critical Disclosure)
VerdoCo operates a forensic document personalization system as a core product and license enforcement feature. When you complete a purchase, we generate a unique canary reference code assigned to your transaction. The following information is permanently embedded into every page of every document you purchase:
- Your full legal name
- Your organization name
- Your email address
- Your transaction ID
- Your purchase date
- Your unique canary reference code
- A VerdoCo license key specific to your transaction
This embedded data appears on the cover page and in the running footer of every interior page of every delivered document. It is locked into documents at the moment of generation and cannot be removed or altered. By completing a purchase, you expressly acknowledge and consent to this permanent embedding of your personal information.
2.3 — Contact and CRM Data
If you submit a contact form, general inquiry, or request to be contacted, we collect:
- First and last name
- Organization name
- Email address
- Phone number (if voluntarily provided)
- Inquiry type and message content
- Date and time of submission
2.4 — Website and Technical Data
When you visit verdoco.com, we automatically collect:
- Browser type and version
- Device type and operating system
- IP address
- Pages visited, time spent, and navigation path
- Referral source and search terms
- Cookie identifiers and session data
2.5 — Data We Do Not Collect
VerdoCo does not collect: Social Security numbers, government-issued identification numbers, financial account numbers, biometric identifiers, health or medical information, or any special categories of sensitive personal data.
How We Use Your Information
3.1 — Fulfillment and Document Delivery
We use purchase and transaction data to generate your personalized compliance documentation, inject your identifying information into purchased documents per our forensic identification system, deliver documents via secure download links, maintain your order history, and respond to re-download requests within the permitted download window.
3.2 — License Enforcement
Transaction identity data, canary reference codes, and associated purchase records are retained indefinitely for the purpose of enforcing our End-User License Agreement — including investigating suspected unauthorized distribution of licensed documents and pursuing legal remedies for EULA violations. This retention is a stated condition of purchase and cannot be waived by a deletion request.
3.3 — Marketing Communications (VerdoCo Only)
If you have provided contact information through our website, we may send you marketing communications about VerdoCo products, new regulatory series launches, document updates, and relevant compliance regulatory developments.
We will only use your contact information to market VerdoCo products. We do not use your contact information to market third-party products, services, or organizations. We do not sell, rent, or share your contact information with third parties for their marketing purposes.
You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at hello@verdoco.com.
3.4 — Customer Support and Account Management
We use contact and transaction data to respond to support inquiries, resolve technical issues, process download access requests, and manage your account.
3.5 — Legal Compliance and Rights Protection
We may use and retain personal information to comply with applicable laws and regulations, respond to valid legal process (subpoenas, court orders, government requests), enforce our EULA and Terms of Service, protect VerdoCo's intellectual property rights, and prevent fraud or unauthorized access.
3.6 — Website Analytics and Improvement
We use technical and analytics data to understand how visitors use verdoco.com, identify areas for improvement, and optimize website performance and content.
Forensic Identification System — Full Disclosure
This section describes a data practice unique to VerdoCo that you must understand before purchasing. VerdoCo's forensic personalization system is not a standard e-commerce feature. Please read this section completely before completing any purchase.
VerdoCo operates a forensic document personalization system as a core product feature and license enforcement mechanism. This system works as follows:
- At the moment your order is confirmed, our system generates a personalized version of every document in your purchase
- Your personal information — including your name, organization, email address, transaction ID, purchase date, and a unique canary reference code — is permanently written into the cover page and the running page footer of every document
- The documents are then locked — the personalization data cannot be edited, removed, or altered
- A record of your transaction and canary code is retained by VerdoCo indefinitely for enforcement purposes
Purpose of the system: VerdoCo compliance documents are licensed to a single legal entity only. The forensic identification system enables VerdoCo to identify the source of any unauthorized distribution — if a copy of a VerdoCo document appears outside the licensed organization, VerdoCo can trace it to the originating transaction with certainty.
Enforcement: Unauthorized distribution of VerdoCo documents is subject to liquidated damages of $25,000 per document per unauthorized instance under the End-User License Agreement. The forensic identification data serves as the evidentiary basis for any such enforcement action.
Your consent: By completing a purchase on verdoco.com, you expressly acknowledge that you have read and understand this forensic identification system, and you consent to: (1) the permanent embedding of your personal information into all purchased documents; (2) VerdoCo's indefinite retention of your transaction identity data for license enforcement; and (3) VerdoCo's right to use your embedded identification data in connection with any enforcement action arising from unauthorized distribution of your licensed documents.
Deletion requests: Because transaction identity data serves an ongoing license enforcement function, requests to delete this data cannot be honored in full. We can delete contact and CRM data associated with your account upon request, but we retain the minimum transaction identity record necessary for enforcement purposes for the life of the license.
Information Sharing and Disclosure
5.1 — We Do Not Sell Your Data
VerdoCo does not sell, rent, trade, or otherwise transfer your personal information to third parties for their marketing purposes. We do not engage in data brokerage. We do not share personal information with advertisers.
5.2 — Service Providers
We share personal information with service providers who assist us in operating verdoco.com and delivering our products. These providers are contractually prohibited from using your data for any purpose other than providing services to VerdoCo. Current categories of service providers include:
- E-commerce platform provider — checkout processing and order management
- PCI-compliant payment processor — payment processing (VerdoCo does not receive, store, or process payment card numbers, CVV codes, or banking information)
- Email service providers — transactional email delivery (order confirmations, download links) and marketing communications
- Cloud hosting and storage providers — secure file storage and document delivery infrastructure
- Analytics providers — website traffic and usage analytics
5.3 — Legal Requirements
We may disclose personal information when required to do so by law, court order, subpoena, or other valid legal process, or when we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of VerdoCo, our customers, or others.
5.4 — Business Transfers
In the event of a merger, acquisition, corporate reorganization, or sale of substantially all of VerdoCo's assets, personal information may be transferred as part of that transaction. We will notify affected users of any material change in ownership or use of their personal information and provide an opportunity to opt out of any materially different data practices.
5.5 — License Enforcement
In connection with enforcement of our EULA, we may disclose transaction identity data, canary reference codes, and related purchase records to our legal counsel and, if necessary, to courts, arbitrators, or other dispute resolution bodies.
Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, subject to the following schedules:
| Data Category | Retention Period | Basis |
|---|---|---|
| Purchase and transaction identity data | Indefinite | License enforcement — EULA condition of purchase |
| Forensic canary codes and document records | Indefinite | License enforcement — cannot be deleted |
| CRM and contact form data | Until deletion request is honored or 3 years of inactivity | Marketing and support — deletable upon request |
| Download access logs | 90 days | Technical operations and fraud prevention |
| Website analytics data | 26 months | Website improvement and traffic analysis |
| Support communications | 3 years | Customer service and dispute resolution |
| Legal and compliance records | 7 years or as required by law | Regulatory compliance and legal obligations |
Your Privacy Rights
7.1 — Rights Available to All Users
Regardless of your location, you have the right to:
- Access the personal information we hold about you in our systems
- Correct inaccurate personal information in our CRM and account records (note: information already embedded in delivered documents cannot be corrected post-delivery)
- Opt out of marketing communications at any time without affecting your ability to receive transactional communications
- Request deletion of CRM and contact data (subject to our stated retention obligations for transaction identity and license enforcement data)
7.2 — California Residents — California Privacy Rights Act (CPRA)
California residents have the following additional rights under the CPRA and California Civil Code § 1798.100 et seq.:
- Right to Know: Request disclosure of the categories and specific pieces of personal information collected, the purposes for collection, and the categories of third parties with whom it is shared
- Right to Delete: Request deletion of personal information (subject to our license enforcement retention obligations stated in Section 4 and Section 6)
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is required, but you may confirm this by contacting us.
- Right to Limit Sensitive Personal Information: We do not use sensitive personal information for purposes beyond those permitted by the CPRA
- Right to Non-Discrimination: We will not discriminate against you for exercising your California privacy rights
- Right to Data Portability: Receive your personal information in a portable, machine-readable format
To exercise your California rights, contact us at hello@verdoco.com with the subject line: "California Privacy Rights Request." We will respond within 45 days. If we require additional time (up to 90 days total), we will notify you of the extension and the reason.
7.3 — Colorado Residents — Colorado Privacy Act (CPA)
Under C.R.S. § 6-1-1301 et seq., Colorado residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling. Contact us at hello@verdoco.com with the subject line: "Colorado Privacy Rights Request."
7.4 — Virginia Residents — Virginia Consumer Data Protection Act (VCDPA)
Under Va. Code § 59.1-571 et seq., Virginia residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of the processing of personal data for targeted advertising or the sale of personal data. Contact us at hello@verdoco.com with the subject line: "Virginia Privacy Rights Request."
7.5 — Texas Residents — Texas Data Privacy and Security Act (TDPSA)
Under Tex. Bus. & Com. Code § 541 et seq., Texas residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling. Contact us at hello@verdoco.com with the subject line: "Texas Privacy Rights Request."
7.6 — Appeals Process
If we decline to take action on a privacy rights request, we will notify you of the reason within 45 days. You may appeal our decision by contacting us at hello@verdoco.com with the subject line "Privacy Rights Appeal." If your appeal is denied, we will provide information about how to contact the relevant state authority to submit a complaint.
Marketing Communications & CAN-SPAM Compliance
All commercial email sent by VerdoCo complies with the CAN-SPAM Act (15 U.S.C. § 7701 et seq.). Every marketing email we send will:
- Clearly identify VerdoCo and Nexosprop Logistics Corp as the sender
- Use honest, non-deceptive subject lines that accurately reflect the email's content
- Include our physical mailing address
- Include a clear, conspicuous, and functional opt-out mechanism
- Be identified as an advertisement where required
To unsubscribe from VerdoCo marketing emails, click the "Unsubscribe" link in any marketing email or email us at hello@verdoco.com with the subject line "Unsubscribe." We will process your opt-out request within 10 business days. Opting out of marketing emails will not affect transactional emails related to your purchases or account.
Cookies and Tracking Technologies
verdoco.com uses cookies and similar tracking technologies for the following purposes:
- Essential cookies: Required for core website functionality including session management, shopping cart, and checkout processing. These cannot be disabled without breaking core site functions.
- Analytics cookies: Used to collect anonymous data about how visitors use verdoco.com to help us improve the website. This may include tools such as Google Analytics.
- Preference cookies: Used to remember your settings and preferences across visits.
- Platform cookies: Set by our e-commerce platform as part of our checkout infrastructure for fraud prevention, session management, and platform functionality.
You may control or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of verdoco.com, including the ability to complete a purchase.
Data Security
We implement reasonable and appropriate administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, acquisition, alteration, disclosure, or destruction. These include:
- HTTPS encryption for all data transmitted between your browser and verdoco.com
- PCI-compliant payment processing through our third-party payment processor — VerdoCo does not store payment card data
- Access controls limiting personal information access to authorized personnel on a need-to-know basis
- Time-limited, authenticated download links for document delivery
- Forensic document locking preventing alteration of delivered files
Despite these measures, no data transmission over the internet or electronic storage system is guaranteed to be 100% secure. We cannot warrant the absolute security of any information you transmit to us. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
Children's Privacy
verdoco.com is a business-to-business compliance documentation platform not directed at children under the age of 18. We do not knowingly collect, use, or disclose personal information from individuals under 18 years of age. If we become aware that we have inadvertently collected personal information from a person under 18, we will take prompt steps to delete that information from our systems. If you believe we have collected information from a minor, please contact us immediately at hello@verdoco.com.
Third-Party Links
verdoco.com contains links to third-party websites, including official U.S. government statutory sources (hhs.gov, ftc.gov, nist.gov, osha.gov, sec.gov, ada.gov, and others) referenced in our regulatory content. This Privacy Policy applies only to verdoco.com and VerdoCo products. We are not responsible for the privacy practices of any third-party website and encourage you to review their respective privacy policies before providing any personal information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or business operations. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Send an email notification to registered account holders with an active purchase history
- Display a prominent notice on verdoco.com for a reasonable period after the change takes effect
Your continued use of verdoco.com after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Privacy Policy, you must stop using verdoco.com and contact us regarding any active licenses.
Contact & Privacy Rights Requests
For all privacy-related inquiries, rights requests, unsubscribe requests, or questions about this Policy, contact us through any of the following:
VerdoCo Privacy Office
A Product Line of Nexosprop Logistics Corp
Email: hello@verdoco.com
Website: verdoco.com/pages/contact
For California requests, use subject line: "California Privacy Rights Request"
For Colorado requests, use subject line: "Colorado Privacy Rights Request"
For Virginia requests, use subject line: "Virginia Privacy Rights Request"
For Texas requests, use subject line: "Texas Privacy Rights Request"
For unsubscribe requests, use subject line: "Unsubscribe"
We will acknowledge all privacy rights requests within 10 business days and provide a substantive response within 45 days of receipt. If we require additional time, we will notify you in writing of the extension period.