Verdra · Privacy

Privacy Notice

Verdra is research-led and pre-commercial. This notice covers what the public website collects today and what an engagement-stage Record SDK deployment will collect, with the latter governed by a separate Data Processing Agreement at engagement.

Effective 2026-05-30 Version 0.1

Verdra is research-led and pre-commercial. The Verdra Record reference implementation is delivered per engagement. Specific data-handling terms for an engagement are negotiated in a Data Processing Agreement and may differ from what is described here.

1. Who we are

Verdra is a software company headquartered in Montreal, Quebec, Canada, building dispute-ready evidence-capture infrastructure for AI-agent commerce. Contact: hello@verdra.co.

2. Information collected from this website

This website is a static demonstration. We do not run analytics scripts, ad pixels, or session-replay tools on it. Standard web-server access logs (IP, user agent, request path, timestamp) are retained by our hosting provider, Vercel, under their privacy practices. We do not link these logs to identifiers.

If you contact us by email, we keep your message and reply for as long as the conversation is operationally relevant, and then we delete it.

3. Information collected by the Record SDK

The Verdra Record SDK runs inside the customer's environment and writes Evidence Packages to storage the customer controls. Verdra does not receive copies of Evidence Package contents in normal operation.

Verdra may receive operational telemetry (SDK version, error counts, feature flags) from a customer-deployed SDK if telemetry is enabled. Telemetry is opt-in, scoped to engineering operations, and never includes Evidence Package contents.

4. Personal data and GDPR / Quebec Law 25

Evidence Packages may contain personal data of natural persons identifiable from agent-mediated transactions. The customer (the principal deploying the SDK) is the data controller for that personal data; Verdra is a processor only when the customer specifically authorizes Verdra to handle a package (for example, when scoping a dispute proceeding). Detailed processing terms are negotiated in a Data Processing Agreement at engagement.

5. Your rights

If you are a natural person and want to know what Verdra holds about you, write to hello@verdra.co. We will respond within 30 days. Quebec residents have rights under Law 25; EU/UK residents have rights under GDPR / UK GDPR; California residents have rights under CCPA / CPRA.

6. Changes

We will update this notice as Verdra evolves. The version line above tracks revisions. Material changes will be communicated to anyone with an active reference-implementation engagement.