Privacy Policy

Effective Date: December 1, 2025

Introduction

Vidaria, Inc. ("Vidaria," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Vidaria platform and related services (collectively, the "Services").

Information We Collect

Information You Provide

  • Account Information: Name, email address, phone number, and job title when you create an account or are added by your organization.
  • Profile Information: Profile photos and other optional information you choose to provide.
  • Communications: Information you provide when contacting us for support or other inquiries.

Information Collected Automatically

  • Location Data: GPS coordinates collected during active work shifts for security personnel tracking and accountability purposes.
  • Device Information: Device type, operating system, unique device identifiers, and mobile network information.
  • Usage Data: Information about how you interact with our Services, including access times, pages viewed, and features used.
  • Activity Data: Tag scans, tour completions, shift reports, and other work-related activities logged through the platform.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Services
  • Enable real-time location tracking and monitoring for security operations
  • Generate reports and analytics for your organization
  • Communicate with you about services, updates, and support
  • Ensure the safety and security of personnel
  • Comply with legal obligations and enforce our terms

Data Sharing and Disclosure

We may share your information with:

  • Your Organization: Your employer or the organization that has enrolled you in the Services has access to your work-related data, including location data during shifts.
  • Service Providers: Third-party vendors who assist in operating our Services (e.g., cloud hosting, analytics).
  • Legal Requirements: When required by law, legal process, or to protect our rights and safety.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties.

Data Security

We host the Vidaria platform on Microsoft Azure, which is independently certified under ISO 27001, SOC 1/2/3, HIPAA, and FedRAMP. We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256 via Azure-managed keys)
  • Secure authentication using session cookies for the web portal and signed bearer tokens for mobile devices
  • Role-based access controls and strict per-tenant data isolation, ensuring customer data is never accessible across organizations
  • Continuous application monitoring, audit logging, and security telemetry via Azure Application Insights
  • Regular security assessments, dependency scanning, and patching

Compliance & Standards

The Vidaria platform is designed in alignment with the principles of ISO/IEC 27001 and the AICPA SOC 2 Trust Services Criteria (Security, Availability, Confidentiality, and Privacy). Formal certification under both frameworks is on our roadmap. Our underlying cloud infrastructure (Microsoft Azure) is already certified under ISO 27001, SOC 1/2/3, HIPAA, and FedRAMP, and we inherit the physical, environmental, and platform-level controls those certifications cover.

Customers with specific compliance, audit, or due-diligence requirements may request additional information by contacting privacy@vidaria.io.

Data Retention

We retain your information for as long as your account is active or as needed to provide Services. Work-related data (location history, reports, activity logs) is retained according to your organization's data retention policies and applicable legal requirements.

Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information (subject to legal and contractual requirements)
  • Object to or restrict certain processing activities
  • Data portability where applicable

To exercise these rights, please contact your organization's administrator or reach out to us at privacy@vidaria.io.

Location Tracking Disclosure

Important: The Vidaria platform collects precise location data from mobile devices during active work shifts. This tracking is a core feature of the service designed to enhance security operations, ensure personnel safety, and maintain accountability. Location tracking is only active during shifts and is controlled by your organization.

Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the effective date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Vidaria, Inc.
Email: privacy@vidaria.io