Privacy Policy
Last updated: 2026 • Veridex / Costmatic, Inc.
This privacy policy sets out why and how Costmatic, Inc. (“Costmatic”, “Veridex”, “We”, “Us”, or “Our”) collects, uses, discloses, and protects personal information of users, partners, and website visitors accessing our services and evidence-first decision platform, and provides information on your rights regarding these activities. In such processing activities, We act as the data controller with respect to your personal information.
We are committed to ensuring that your personal information is protected. When you provide information by which you can be identified, it will only be used in accordance with this Privacy Policy and applicable data protection regulations, including the EU General Data Protection Regulation (GDPR).
Defender-Side Privacy Principles
Veridex is designed around least-privilege, bounded scope, and auditability. Pilot evaluations are scoped to non-sensitive finding metadata and read-only allowlisted telemetry. We do not sell personal data, nor do we train public foundation models on customer findings.
1. Information We Collect
- Personal Information: We collect contact details you voluntarily submit, including your name, work email address, company or organization name, and workflow pilot request details.
- Workflow & Telemetry Data: During pilot evaluations or service interactions, we may collect technical metadata related to finding scopes, calibration bands, and platform integration logs.
- Device & Usage Information: When you visit our website, we may automatically collect standard device information such as IP address, browser type, operating system, and referral headers.
- Analytics Storage (Opt-In): Subject to your cookie consent, anonymous analytics data may be gathered via Google Analytics to help us improve site navigation and content engagement.
2. Use of Information
We use collected information for legitimate business purposes:
- To evaluate, configure, and communicate regarding Veridex pilot programs.
- To fulfill contractual commitments, technical consultations, and support requests.
- To maintain platform security, prevent abuse, and optimize infrastructure performance.
- To communicate relevant platform updates or technical notices.
3. Data Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share information only under the following bounded conditions:
- Service Providers: Trusted third-party infrastructure and tooling providers (such as hosting, email delivery, and form handling) who operate under strict confidentiality agreements.
- Legal Obligations: When required by applicable law, regulation, subpoena, or governmental request.
- Rights Protection: To enforce our terms, protect the rights, property, or safety of Costmatic, our customers, or the public.
4. Data Security
We implement robust administrative, technical, and physical safeguards to protect personal information from unauthorized access, alteration, disclosure, or destruction. Access to personal information is restricted to authorized personnel with a legitimate business need.
5. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy, satisfy pilot evaluation requirements, resolve disputes, or comply with legal and audit obligations. Users may request deletion of their personal information at any time, subject to legal retention requirements.
6. Your Privacy Rights (GDPR & Global Rights)
Depending on your jurisdiction, you have certain rights regarding your personal data, including:
- The right to access and receive a copy of your personal data.
- The right to rectify inaccurate or incomplete personal information.
- The right to request erasure (“right to be forgotten”).
- The right to restrict or object to the processing of your data.
- The right to data portability.
- The right to withdraw consent at any time without affecting prior lawful processing.
7. Children's Privacy
Our services are intended strictly for enterprise and professional users aged 18 and older. We do not knowingly collect personal information from minors.
8. Changes to this Policy
We reserve the right to update or revise this Privacy Policy at any time. Any changes will be posted to this page with an updated revision date.
9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: