Effective date: September 28, 2026
Last updated: September 28, 2026
Veskyra LLC ("Veskyra," "we," "us," or "our") provides applications and services including Reskyr, Ryskra, Kyrvec, ValKred, KorLea, and Presvyr, any other product or service we offer that links to this policy (including products released after its effective date), and our shared account and authentication services. This Privacy Policy explains how we handle personal information in connection with those services and our websites (together, the "Services"). Our current customer offering is limited to the United States.
We collect information needed to deliver, support, secure, and administer the Services people choose to use. We do not sell personal information or customer content. We do not use it for targeted advertising or allow advertisers to use it for their own purposes. We disclose information only for the purposes described below, including operating the Services through service providers and supporting the organizations with which you choose to interact.
1. Who is responsible for your information
For our websites, direct personal accounts, account administration, billing, support, and our own security operations, Veskyra determines the relevant purposes of processing.
When an employer, fire department, business, training provider, or other subscribing organization uses the Services to manage its records, that organization generally determines why and how those records are used, and we process them on its behalf. Its instructions, notices, and applicable law govern that processing, together with our Data Handling and Processing Agreement, where applicable. An organization may have retention duties that continue after an individual leaves or closes an account.
A person can have both a personal account and an organization-related role. The controls and responsibilities for each depend on the particular record and purpose; sponsoring an account does not, by itself, make every personal record visible to the sponsor. Product-specific rules appear in Section 5.
This policy does not govern an organization's independent use of information after it receives it, third-party websites, or services you connect separately. Their own notices apply to those activities.
2. Information we process and where it comes from
We receive information from you, authorized users and organizations, the providers whose training you access, integrations you authorize, and the technical operation of the Services. Depending on the product and features used, it may include:
| Category | Examples and source |
|---|---|
| Account and contact information | Names, email addresses, phone numbers, organization affiliations, account preferences, and information supplied during registration or support. |
| Authentication and security information | Login and session records, authentication credentials or public-key records appropriate to the login method, identity-provider identifiers, security events, IP addresses, and device/browser signals. |
| Subscription and transaction information | Plan, billing contact, billing address, invoices, payment status, purchase history, and transaction identifiers. Payment services process payment credentials as needed to complete a transaction; the information available to Veskyra depends on the payment method. |
| Customer content | Reports, narratives, attachments, photographs, imported documents, business records, regulatory information, metrics, and other content submitted in the course of using a product. |
| Credentials and learning records | Licenses, certifications, issuing bodies, expiration and renewal dates, continuing education progress, enrollments, assessment responses, scores, attempts, completion records, and use of training content. |
| Range operations and participation | Memberships, bookings, guest visits, household/dependent relationships, emergency contacts, signed waivers and signing evidence, attendance/check-in and access events, training/qualification records, range purchases or rentals, and performance information where the relevant feature is enabled. ID-derived details and images may be involved in supported verification workflows; see the Kyrvec section below. |
| Service and support information | Features used, request times, errors, diagnostic and audit events, support correspondence, and related operational information needed to deliver and troubleshoot the Services. |
| Optional AI inputs and outputs | The text, files, images, instructions, and relevant task context submitted through an AI action you choose, and the resulting suggestions or extracted information. |
Submitted records may contain information about people who do not hold accounts, such as employees, patients, incident subjects, witnesses, property occupants, or customers. They may contain sensitive information, including injury or health details, precise locations, identification numbers, or confidential business information. We process such information only in connection with the relevant service and applicable instructions; we do not require it for unrelated purposes. Only submit information you are authorized to provide and that is appropriate for the feature.
We do not buy personal data from data brokers or collect unrelated information to build advertising profiles. Declining information required for a feature may prevent that feature from working; optional information and features are identified as such.
3. Why we use information
We use information to create and authenticate accounts; provide purchased features; store and retrieve records; deliver training and record progress; carry out authorized imports, exports, and integrations; process subscriptions and transactions; communicate about the Services; respond to support and rights requests; and maintain security and reliability.
Communications. We send service and transactional messages, such as account security notices, receipts, service changes, and responses to your requests, and reminders you choose to receive. We may also send account holders and business contacts information about Veskyra products, features, events, and offers. You can unsubscribe from marketing email at any time using the link in each message or by contacting us; essential account, security, contractual, and transaction notices may still be sent. We do not send marketing to people whose information appears only in a customer's records unless they have their own account or relationship with us. We do not offer customers a way to send promotional campaigns through the platform, and we do not give personal information or contact lists to anyone else for their own marketing. An organization may communicate independently through its own systems under its own notice and legal responsibilities, but may not repurpose information received through our Services in breach of applicable privacy choices, law, or contractual restrictions.
Text message alerts. Where an optional SMS alert add-on is offered (currently in Reskyr), we process the mobile number you enroll, your opt-in and opt-out records, and message delivery status to send the alerts you chose. Texts are sent through a messaging service provider acting on our behalf. You can reply STOP to stop texts at any time. We do not share mobile phone numbers or SMS opt-in information with third parties or affiliates for their marketing or promotional purposes.
We also use information as reasonably necessary to prevent fraud and misuse, investigate incidents, resolve disputes, maintain required business records, and comply with law. Operational analysis is limited to operating and improving the relevant Services. It does not authorize unrelated commercial use of customer reports, private documents, or identifiable training records.
We may use information that has been aggregated or deidentified to operate, secure, and improve the Services and to develop new functionality. We maintain deidentified information in that form and do not attempt to reidentify it except where law permits testing the effectiveness of deidentification.
Where applicable law requires consent or another specific authorization, we obtain it before the relevant processing. Organizations are responsible for the lawful basis of processing they direct. An employer's subscription, an AI button, or general acceptance of terms is not a substitute for permissions or safeguards required for employee or sensitive information.
4. Service providers and other permitted disclosures
Providers operating the Services. We use providers for hosting, storage, databases, network delivery, security, authentication, payment processing, communications, and support where used. They receive information needed for their assigned functions. Providers processing on our behalf are subject to contractual confidentiality, security, purpose, and data-protection restrictions. Some providers process limited information under their own legal responsibilities, such as payment compliance or the bot-security activities described in Section 7.
Organizations and authorized recipients. Information may be available to authorized members or administrators of the organization whose workspace holds the record, to the relevant employer or training provider as explained in Section 5, and to people or services you direct us to share with. We do not give one subscribing organization access to another organization's private records merely because both are customers.
Legal and safety requirements. We may disclose information when legally required, to respond to valid legal process, or when reasonably necessary and legally permitted to protect rights, investigate fraud or security threats, or prevent serious harm. We assess requests and limit disclosures to what is appropriate. We notify the relevant customer where permitted and appropriate.
Business transitions. If a merger, acquisition, financing due diligence, reorganization, or transfer of the relevant business requires access to information, we limit it to what is necessary, subject to appropriate confidentiality and data-protection safeguards. A successor must respect applicable privacy commitments; a transaction does not authorize selling customer data as a separate asset for advertising. We provide legally required notice of a change in responsibility or use.
At your direction. We may disclose information for a purpose you specifically request or authorize. We do not treat acceptance of this policy as unlimited permission to disclose information.
5. Product-specific information and sharing
Kyrvec: range operators, members, guests, and agencies
Kyrvec helps range operators administer memberships, bookings, check-in, waivers, training, safety records, permitted non-firearm purchases, and facility access. The range determines the purposes and lawful uses of its operational records, and Veskyra processes them on its behalf under the applicable agreement. Authorized range personnel can access records appropriate to their duties. A member account provides access to that relationship; it does not make the underlying range records private from the operator. The range is responsible for its own notices, permissions, disclosures, and independent use of records.
Depending on enabled features and the operator's lawful requirements, operational records may include contact details, emergency contacts, household or dependent relationships, waiver documents and signatures, and signing timestamps. Some subscribing businesses operate in regulated industries and may request personal information to verify identity, age, eligibility, or compliance with a requirement applicable to their services. The subscriber is responsible for identifying that requirement, explaining its collection, and having a lawful basis for it. Requirements vary by business, activity, and jurisdiction; we do not represent that every range must conduct a background check or collect a Social Security number.
Veskyra processes subscriber-directed verification information only within the supported service and applicable instructions. We limit collection, access, and retention to the relevant purpose, use reasonable safeguards appropriate to its sensitivity, and design verification workflows to avoid retaining unnecessary source material. Material used solely to complete an identity check is discarded when that check is complete, rather than kept as a copy in the member account or waiver archive. Any minimal identifying details, verification result, or signing evidence retained to administer the service must have a separate disclosed purpose and follow the applicable retention schedule. Legally required preservation is handled as described in Section 8.
Kyrvec is shooting-range operations software, and using it for firearm sales is expressly prohibited. Identity verification described here is for supported range operations, such as membership, age verification, facility access, and waivers. It is not firearm-purchaser verification or background-check processing for a firearm sale. An operator's separate firearm-sales activities must remain outside Kyrvec, and this policy does not authorize importing firearm-sale records or summaries.
Check-in and connected access-control features may record credential identifiers, arrival/departure or entry attempts, times, and the relevant facility, gate, or bay. These records can reveal attendance and physical presence. This description concerns facility events; it does not assert that Kyrvec continuously tracks a person's device location. Any separately introduced location or biometric feature requires its own appropriate disclosure and legal assessment.
Agency-sponsored accounts. Where an agency arranges range access or training for its personnel, authorized agency representatives can access details of those personnel's visits under the agency-sponsored arrangement. We explain that visibility in the applicable account notice. If a member also has a personal account, we keep it separate: we do not link it to the agency account or disclose its existence, visits, or other activity to the agency through its sponsored access. Agency sponsorship does not authorize access to a member's separate personal relationship with the range. This boundary concerns agency access; the range operator's authorized access to its own operational records remains as described above. Agency reporting is distinct from visibility to other range members or the public.
Public leaderboard participation is off by default. A member must expressly request inclusion before the selected name/alias format and results are displayed. Members can withdraw that choice for future displays; changing to a materially different identity-display format requires a renewed choice. Public display is separate from authorized staff's access to the operational performance record.
Operator-selected payment, access-control, scoring, or other integrations may exchange information needed for the selected function. The operator must identify the relevant recipient and purpose before enabling a use that affects participants. Only integrations actually enabled for the service apply; an adapter's presence in the code does not mean a provider currently receives information. Range communications through Kyrvec are limited to service/transactional messages and opt-in reminders as described in Section 3. A range's independently maintained mailing list and off-platform messages are governed by its own responsibilities, without overriding restrictions applicable to information obtained through Kyrvec.
Kyrvec logins are for adults only. A minor may be represented in a dependent or participant record managed by a range or authorized adult, including a guardian-signed waiver, but does not have an independent login. A member's account deletion request does not automatically erase an operator-controlled waiver, incident, or transaction record that the operator has a lawful reason to retain.
The range processes payments through its own payment-provider account and is responsible for its sales and related customer relationship. Relevant transaction information may be recorded in Kyrvec to administer the service. The payment provider's applicable notice governs its processing; Veskyra does not become the seller or control the range's independent use of customer information merely by providing software. Kyrvec has no AI features.
Presvyr: zero-knowledge vaults
Presvyr encrypts your vault contents on your device before they are synced, and we do not hold the keys to decrypt them. Our servers store encrypted records and files plus the limited information needed to run your account and sync: your email address, key-derivation settings, public encryption keys, record and file identifiers, sizes, revision numbers, timestamps, deletion markers, which people you share a vault with, and your emergency-access (ICE) settings such as trustees, timers, and check-in times. We cannot read the contents of your inventory, documents, plans, or other vault items, and we cannot provide them to anyone, including in response to legal process; at most we can provide the encrypted data and the account information listed here. Presvyr works offline on your device, and sync is optional. Presvyr has no AI features.
ValKred: three different account relationships
Personal accounts. A personal account is not automatically shared with an employer. Sharing requires the applicable account relationship or an action you authorize.
Employer-paid plans. When an employer pays for your plan, the plan includes access for that employer to the credential and professional-development information disclosed for the plan, such as certifications held, continuing education progress, and renewal information. That employer access is a required part of the plan and has no in-product opt-out while you participate. It does not authorize access to unrelated information or eliminate rights under applicable law. If you do not want that access, contact us about available personal-account alternatives before enrolling; we do not promise that an employer must fund an alternative.
Employer-sponsored discounts. When you pay for your account using an employer-sponsored discount, the disclosed credential and professional-development sharing may be enabled by default, subject to applicable law, but you can opt out. After opt-out, the employer sees only that your account exists, not your certifications, continuing education progress, or renewal details through that sharing feature. You keep the discount after opting out.
The settings page prominently identifies the current information shared and whether the sharing can be turned off. Where law requires affirmative consent, we obtain it before the relevant sharing regardless of the default setting.
Changing an available sharing choice stops future disclosures covered by the choice. It cannot retrieve copies already lawfully received or eliminate an employer's independent legal recordkeeping duties. Access to a separate record the employer lawfully maintains in its organizational workspace is distinct from access through your personal-vault sharing settings.
KorLea: learning records and training-provider analytics
Training on KorLea is supplied and owned by the subscribing training provider. When you enroll in or purchase that provider's content, the provider may receive information associated with you and that content, including enrollment, progress, completion, attempts, scores, assessment responses, and usage information relevant to delivering and evaluating the training. Access is limited to that provider's content and relationship with you, not your unrelated activity with other providers.
Some records are needed to provide access, assess your work, document completion, issue evidence of training, or meet applicable recordkeeping duties. Providers also receive deidentified aggregate metrics to improve their materials, including identifying questions that students frequently answer incorrectly. Optional identifiable analysis for improving course content is subject to the choice described below. We apply safeguards so that aggregate statistics provided for improvement do not identify individual learners.
Your analytics choice. You can opt out of optional identifiable usage and question-level analysis for improving training materials through your privacy/sharing settings. Opting out does not prevent access to purchased training or sharing of the records reasonably needed to deliver and assess it, certify completion, or meet applicable recordkeeping duties. It does not opt you out of the disclosed employer-paid reporting below. Providers may still receive statistics that are appropriately deidentified and aggregated so they do not identify you. We use safeguards against identification through small groups or detailed drill-downs.
Your settings identify the recipients, information shared, and which purposes you can turn off. The choice applies prospectively; it does not undo prior lawful processing, but available rights concerning previously shared information remain intact. Where law requires affirmative consent, the relevant optional processing does not begin until that consent is given.
Employer-paid training. KorLea may also offer training paid for by an employer. When that option is offered and you participate, your course progress, completion, and competency mastery for the covered training are shared with the identified employer. Individual answer details are not shared with the employer through this reporting. This reporting is a required part of that arrangement and does not have an in-product opt-out. It does not provide access to unrelated personal purchases or other providers' records. The profile notice names the receiving employer and identifies the relevant cohort where applicable. Provider access and employer access are separate. The restriction on employer access to individual answers does not describe the training provider's separately disclosed access under this section.
Providers must use information received through KorLea for authorized training, administration, and disclosed improvement purposes, not unrelated marketing or resale. Their own privacy notices explain their independent obligations and how to contact them about records they retain.
6. Optional AI features
AI assistance is optional and initiated by a user action identified as an AI action. It may help with onboarding, selected data imports, narrative editing, document extraction, or image recognition. For example, a user may ask for edits to an injury or fire-incident report, import a certification image, or extract a training provider's test material from a PDF.
Submitting content to a normal storage or reporting feature does not itself authorize AI processing. An AI request processes the selected material and the task context described by the feature. A user-initiated import may involve processing the whole selected file or batch, not just the visible preview.
We do not use customer AI inputs or outputs to train or fine-tune models. We do not authorize our AI service providers to use them for their own model training. Models run within the hosted infrastructure used to provide the Services, and the infrastructure provider processes requests only on our behalf to perform them.
The AI Data Use Policy explains task processing, retention, user review, and the difference between temporary AI processing and records saved in your account. Optional content assistance is separate from automatically operating authentication, anti-abuse, and security controls.
7. Cookies, local storage, and login security
We use cookies or similar storage where needed for sign-in, session protection, security, and preferences such as your selected display theme. We do not use customer information for cross-context behavioral advertising. Where optional tracking technologies require consent, we obtain it before enabling them.
Our login security uses Cloudflare Turnstile to distinguish people from automated abuse. It processes technical signals such as IP address, browser information, and the relevant website. Its provider acts on our behalf for service protection and also processes signals under its own responsibility to improve bot detection. See the Turnstile Privacy Addendum. That security processing is separate from the optional content AI described above.
Some of our websites and applications use privacy-focused performance analytics, such as Cloudflare Web Analytics, which measures page loads and performance without advertising cookies or cross-site tracking. Website resources loaded from external providers, such as fonts, may cause your browser to disclose an IP address and request information to that provider.
8. Retention, export, and account deletion
We keep personal information only for the period needed for the relevant service, permitted business purposes, customer instructions, and applicable legal requirements. The period depends on the record, the account relationship, sensitivity, and applicable recordkeeping duties.
You can request an export or deletion through the account tools where available or by emailing privacy@veskyra.com. We verify identity and authority using proportionate information. An export covers information you are entitled to receive; it does not give you other people's private records or a training provider's proprietary test bank.
ValKred offers a continuing free account limited to two credentials, with restricted features and no fixed trial expiration. Kyrvec and KorLea consumer accounts provide companion access to subscribing ranges and training providers; they are not, solely by virtue of that access, paid Veskyra consumer subscriptions. Reskyr and Ryskra are organizational services. We apply retention according to the actual account and record relationship.
Closing an individual login does not necessarily delete an organization's incident reports, employment records, or training records. For records controlled by an organization, we route the request to that organization or assist it as appropriate. We explain any applicable exception or inability to fulfill a request.
Following a verified deletion request we are authorized to fulfill, or the end of the applicable export/cure period, we delete or deidentify affected data from active systems within 30 days. Residual backup copies expire within 90 days after active-system deletion. Backup data remains protected, is not used for ordinary business activity, and, if restored for recovery, remains subject to the deletion request. A shorter legal deadline controls where applicable.
Operational and security records. We retain operational, diagnostic, security, and support records only for as long as reasonably necessary to operate and troubleshoot the Services, detect and investigate misuse or incidents, resolve support matters, and meet applicable legal obligations. Where a fixed retention period cannot reasonably be specified, we determine it from the record's purpose and sensitivity, the period needed to detect and investigate relevant events, whether an incident or support matter remains open, and applicable legal, contractual, or preservation requirements. We periodically review continued need and delete or appropriately deidentify records when they are no longer necessary. We limit retained information to what the purpose requires; these criteria do not authorize indefinite retention of customer content under a general security label.
Tax/accounting records, legal holds, dispute records, and evidence that a request was handled are retained for the applicable obligation or continuing documented purpose, with restricted access and use. These limited exceptions do not replace a specifically agreed deletion period or authorize retention contrary to applicable law. Temporary AI content is addressed in the AI Data Use Policy; verification-only identity material follows the Kyrvec discard rule.
The window begins when the paid entitlement ends, or when an unpaid renewal causes the subscription to lapse. Turning off renewal while a paid term remains does not start the window early. An account converted to a continuing free plan follows that plan's disclosed retention rules instead.
| Plan type | What happens after paid access ends |
|---|---|
| Consumer subscription that is not renewed | We preserve eligible personal subscription records for 90 days to allow reactivation, followed by a further 90-day final export period. Paid functionality may be unavailable. After day 180, the active-system deletion period described above begins unless the account is reactivated or another lawful retention basis applies. |
| Organizational subscription | Ordinary product access ends at effective cancellation, expiration, or suspension for nonpayment. For the following 90 days, an authorized organization representative can request a raw export and discuss reactivation. After day 90, the active-system deletion period begins, subject to applicable holds or an agreed retention arrangement. |
We give notice of the applicable deadline and impending deletion. A verified, authorized deletion request can trigger earlier deletion; the windows are not minimum retention periods overriding privacy rights. A course completion record may be retained under the training provider's lawful instructions even when the learner's course access ends or companion login is closed. KorLea course-access periods are set and disclosed by the training provider, including any defined lifetime offer. Expiration of access to course material does not by itself determine the retention of completion, certificate, or assessment records. Those records follow the provider's disclosed lawful purposes and retention instructions, the applicable organizational agreement, and individual rights. A provider's lifetime-access promise does not itself require Veskyra to host data after that provider's subscription ends.
ValKred free-account inactivity. After 24 consecutive months without account activity, we may close and delete a free account after giving at least 30 days' advance warning. The warning identifies the scheduled deletion date and how to keep the account or export records. Signing in and using the account before the deadline prevents deletion for inactivity. The active-system and backup deletion periods above apply after the deadline, subject to applicable exceptions. This does not automatically delete a shared login for other products or separately controlled organizational records.
ValKred downgrade to the free plan. The free plan allows up to two credentials. When downgrading an account with more than two credentials, you choose the two to keep. A confirmed downgrade deletes the other credentials; information also needed by a retained credential remains with it. Before confirmation, we identify the records that will remain and those that will be deleted, explain the effect on associated information and files, provide prominent warnings and an opportunity to export, and require account-password re-entry and explicit acceptance of the deletion. This requirement also applies when you normally sign in with a passkey; your account still has a password. The confirmation states the effective date. The approved active-system and backup deletion schedule applies; residual backups do not guarantee recovery. Merely stopping payment or canceling renewal is not that confirmation: the paid-subscription reactivation/export window applies unless a separate downgrade or deletion is authorized.
Organizations must preserve records they are legally required to retain, including by obtaining and verifying exports before the deadline. Contract cancellation does not authorize unlawful destruction of public, employment, incident, or training records. Where law or a binding hold requires Veskyra to retain a copy, we retain it with restricted access for that purpose. An organizational customer must identify relevant preservation requirements; any necessary longer hosting or archive service must be separately agreed. We do not promise permanent archival storage as part of a canceled subscription.
9. Security
We use reasonable technical and organizational safeguards appropriate to the nature of the information and the risks of processing. These include access restrictions, protection of data in transit and at rest, organizational separation, and procedures for handling security incidents. No system or transmission method can guarantee absolute security. We provide incident notices required by applicable law and contracts, including North Carolina's breach-notification requirements where applicable and any other jurisdiction's requirements that govern the incident. Our notice duties depend on our role and the affected information.
10. Your choices and privacy rights
Depending on applicable law and our role, you may have rights to know about or access information, obtain a portable copy, correct inaccuracies, request deletion, restrict or object to processing, withdraw consent, or opt out of certain uses of sensitive information or profiling. Withdrawing consent does not invalidate processing that lawfully occurred before withdrawal.
Send requests to privacy@veskyra.com, identifying the product and request without including unnecessary sensitive records. Authorized agents may act where permitted; we may need evidence of authority. We respond within applicable legal deadlines and explain lawful extensions or exceptions. Where an appeal right applies, reply requesting a privacy appeal. If we deny an appeal, we will explain the reasons and, where applicable law requires, how to contact your state attorney general. We do not discriminate against you for exercising your rights.
We do not sell personal information or share it for cross-context behavioral advertising. Where applicable, we honor legally recognized universal opt-out signals for processing to which those signals apply. These signals do not automatically change your employer-sharing choice, delete records, or opt you into or out of AI features.
For organizational records, contact the relevant organization as well; we assist it in responding. If you do not know which organization is responsible, we can help identify the appropriate contact.
Disclosures for U.S. state privacy laws. Where a state privacy law requires these disclosures: in the past 12 months we have collected the categories of personal information listed in Section 2 from the sources described there, for the business and commercial purposes in Section 3, and disclosed them for those purposes to the categories of recipients in Sections 4 and 5. We have not sold personal information or shared it for cross-context behavioral advertising, and we do not knowingly sell or share the personal information of consumers under 16. We use sensitive personal information, such as account login credentials, identification numbers, or health information contained in records, only to provide the Services, maintain security and integrity, and for other purposes permitted without an opt-out, and not to infer characteristics about you. We keep each category for the periods and criteria described in Section 8.
11. Children, sensitive data, and international processing
The Services are intended for adults and authorized organizational use. Self-service account holders must be at least 18. Any permitted program involving younger participants requires a separately approved arrangement with appropriate notices and permissions. We do not knowingly collect personal information directly from children under 13. If we learn that we have, we delete it as required by law. Contact us if you believe a child has submitted information to us. Records about minors entered by an authorized organization are distinct from a child's direct account and remain subject to applicable privacy protections.
Reskyr is intended for non-transporting fire and rescue departments. Ryskra is intended for non-healthcare businesses managing workplace safety and incident records. Reports can nevertheless contain sensitive personal or injury information. The intended customer category does not, by itself, determine whether a particular record or organization is subject to HIPAA or another law. The standard offering does not accept HIPAA-regulated processing that requires a BAA. Any future exception requires express written approval, an executed BAA, and a supported configuration. Consult the Terms.
Veskyra currently offers subscriptions to U.S. customers only. That is a customer-market restriction, not a guarantee of U.S.-only processing. Service providers may process information in other countries depending on the service and configuration. We do not promise a particular residency location unless expressly agreed and technically supported. Any legally required transfer safeguards must still be in place; incidental information about a person outside the U.S. is assessed under applicable law. Expansion to other customer markets requires updated notices and appropriate agreements before launch.
12. Changes and contact
We post the current policy with its effective date and provide notice of material changes appropriate to their significance and as required by law. We obtain new consent where required before using information for a materially different purpose. A revised policy does not retroactively authorize an incompatible use of information previously collected.
Veskyra LLC
Legal service address: 4030 Wake Forest Rd Ste 349, Raleigh, NC 27609, United States
Legal notices: legal@veskyra.com
Privacy: privacy@veskyra.com
Security incidents and vulnerabilities: security@veskyra.com
General inquiries: hello@veskyra.com