// legal
This Privacy Policy explains what information Verlecta collects through UltraDb, how we use it, and the choices you have.
We collect the information you and your team provide directly, and information generated automatically as you use the Service:
We do not use your Test Data to train AI models, and our AI provider's API terms do not permit it to train its models on the data we send. Beyond providing and securing the Service, we do not use your information for any other purpose without your separate consent.
UltraDb is hosted on infrastructure operated by Hetzner Online GmbH, located in the United States. Your Test Data and account information are stored on servers in the United States; we do not currently offer region-specific data residency. If you use the Service from outside the United States - for example from Canada - your information is transferred to and processed in the United States, which may not provide the same level of data protection as the law of your home jurisdiction.
Verlecta does not sell your personal information or your Test Data to anyone, and we do not share it with data brokers. We do not run third-party advertising trackers, ad-network pixels, or cross-site tracking cookies on the Service - the marketing site and the application are both free of ad-tech.
When card verification is enabled, we share the account owner's email address and the account's company name with Stripe, our payment processor, to create the verification record; card details are entered directly with Stripe and are never sent to or stored on our servers.
The only third parties that process your information are the service providers the Service runs on: Hetzner Online GmbH (hosting), Stripe (card verification, when enabled), and Anthropic (AI-assisted features, only when you use one). Each receives only the information needed for its role and may not use it for its own purposes.
Your Test Data is treated as confidential. It is visible only to the members of your own account, scoped by their role, and to the customers you choose to share a sealed report with through a share link. Verlecta personnel access Test Data only as needed to operate, support, secure, or troubleshoot the Service, or as required by law.
We use industry-standard safeguards: your data is encrypted in transit, passwords are stored only as salted hashes (never in plain text), access within an account is scoped by role, and every sign-in attempt is logged for security review. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If a security incident involving your personal information creates a real risk of harm to you, we will promptly notify affected account owners and any regulator we are required to notify.
You can export your Test Data in JSON, CSV, Markdown, spreadsheet, Word, or PDF formats at the result or job scope using the export feature built into the Service; for a full account-wide export, contact us through our contact page and we will provide one. Either way, you are never locked in.
To request deletion of your account or your Test Data, contact us through our contact page. We will confirm your identity as the account owner and complete the deletion within a reasonable time, except where we are required to retain certain records by law. Residual copies may persist in routine backups for a limited period before those backups are aged out.
Wherever you are located, you can ask us to access, correct, export, or delete the personal information we hold about you through our contact page, and we will honor the request as described in this policy. If you are in Quebec, the Act respecting the protection of personal information in the private sector (as amended by Law 25) gives you rights of access and rectification and the right to be informed that your information is stored outside Quebec; this policy, including Section 3, is intended to provide that notice.
Verlecta is a United States company. We do not claim that the Service is offered in compliance with the EU General Data Protection Regulation or that we meet the registration or certification requirements of any non-US privacy regime; if your organization needs specific compliance guarantees, contact us before storing regulated data in the Service. We do not sell personal information or use it for targeted advertising in any jurisdiction.
The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from anyone under 16; if you believe a child has provided us personal information, contact us and we will delete it.
UltraDb does not use tracking cookies. The application stores a small number of values in your browser's local storage: an authentication token that keeps you signed in, your account and user identifiers, and preferences such as language, theme, and the release notes you have already seen. When you use offline field capture, your queued Test Data is stored on your device (in the browser's IndexedDB) until it syncs to your account. None of this is used for tracking, and none of it is sold or shared with anyone.
We may update this Privacy Policy as the Service evolves. We will post the updated policy at this address and update the "Last updated" date above; for material changes, we will make reasonable efforts to notify account owners in advance.
This Privacy Policy is drafted in English. Spanish and French translations are provided for your convenience; in the event of any conflict or ambiguity between the English text and a translation, the English text governs.
Questions about this policy, or requests to export or delete your data, can be sent through our contact page. Contact us →