Legal
Privacy Policy
This policy describes how VertexY handles personal information across our website, product, APIs, support workflows, and business operations.
Overview
VertexY provides fraud detection, risk scoring, graph intelligence, and related security services for business customers. This Privacy Policy explains how VertexY, Inc. collects, uses, discloses, and protects personal information when organizations evaluate, buy, deploy, and use the VertexY platform.
This policy applies to information collected through our public website, product interfaces, APIs, customer support channels, marketing communications, and other business operations. It does not override separate contractual commitments we make to customers in subscription agreements, data processing addenda, or security exhibits.
Information We Collect
We collect account and business information such as names, work email addresses, job titles, company names, billing contacts, and administrative login details when customers register for VertexY or interact with our team.
We also process service data that customers send to VertexY through APIs, dashboards, webhooks, support requests, and integrations. Depending on the customer implementation, this may include device, network, transaction, risk, behavioral, and identity-related signals needed to detect fraud or investigate suspicious activity.
We collect usage, diagnostic, and security telemetry such as login events, feature usage, request metadata, browser details, IP addresses, audit events, and operational logs to secure the platform, monitor performance, prevent abuse, and improve the service.
How We Use Information
We use personal information to provide and maintain the VertexY platform, authenticate users, process transactions, verify accounts, deliver support, operate billing, enforce plan limits, investigate misuse, and communicate product or account updates.
We may use information to improve fraud models, strengthen platform security, develop product features, create aggregate reporting, and analyze service reliability. Where we use customer service data for these purposes, we do so in line with our contractual obligations and applicable law.
Data Retention
We retain personal information for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business operations. Retention periods vary based on the nature of the information, the customer relationship, and legal or operational requirements.
Customer administrators may request deletion or return of certain customer data according to the applicable contract, support process, and technical limitations of the service. Backup copies and security logs may remain for a limited period until they are safely overwritten or expire under our retention schedules.
Security and International Transfers
We use administrative, technical, and physical safeguards designed to protect personal information, including role-based access controls, encryption in transit, audit logging, security monitoring, and environment-specific access restrictions. No system is perfectly secure, and we cannot guarantee absolute security.
VertexY and our service providers may process information in countries other than the country where it was originally collected. When we transfer personal information across borders, we use appropriate safeguards required by applicable law.
Privacy Rights and Contact
Depending on your location and relationship to VertexY, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to request a copy of certain information in a portable format. We will evaluate requests in accordance with applicable law and our role as controller or processor.
To submit a privacy request or ask a question about this policy, email support@getvertexy.com. If you are using VertexY through an organization, we may direct certain requests to your employer or account administrator because they control the customer relationship and the data submitted to the service.