Privacy notice

1. Who we are

VERIDIVE Agentic Intelligence Co. (“veridive”, “we”), an applied AI company, is the data controller (in Turkish law, the veri sorumlusu) for the personal data described in this notice.

• Data controller: VERIDIVE Agentic Intelligence Co.
• Registered address: 8 The Green, STE D, Dover, Kent County, Delaware 19901, United States
• Registration: a corporation registered in the State of Delaware, United States (Delaware Division of Corporations)
• Email: hello@veridive.com

This notice follows Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and Turkish Law No. 6698 on the Protection of Personal Data (6698 sayılı Kişisel Verilerin Korunması Kanunu, “KVKK”), wherever each applies. Its Turkish version is also our information notice (aydınlatma metni) under Article 10 of the KVKK.

2. What this notice covers

It covers the personal data we process as a controller when you visit veridive.com, email us, apply for a job, ask to be told when the newsletter starts or subscribe to it (once available), or write to us as a former user of our answer engine.

It does not cover:

• Data we process for clients. When we build AI systems with a client’s data, we are a processor (veri işleyen) acting on the client’s instructions under a separate contract or data processing agreement. Questions about that data go to the client, as its controller.
• Other websites. We link to sites such as LinkedIn and X but embed nothing from them. Their own privacy notices apply when you visit them.

3. What we collect and how

Visiting the site

veridive.com is a static website. Its fonts, scripts (including three.js, which draws the background animation) and images come from our own domain, so reading a page sends no request to any third party. There are no embedded videos, maps, social media widgets or ads. Field notes may offer links that ask an AI assistant, such as ChatGPT, Claude or Perplexity, to summarize the note. These are ordinary links to third-party services: one opens only when you click it, the service then receives the note’s address, and our page makes no request to it.

Our hosting provider, Cloudflare, Inc. (Cloudflare Pages), logs each request: your IP address, your user agent (the browser and operating system your browser reports), the URL requested, and the date and time. Because the site may preload a page when you point at, tap or focus its link, the logs can include pages you didn’t open. The logs are used only to deliver the site and keep it secure, never for analytics, advertising or profiling.

Three preferences are kept in your browser’s local storage (section 10). They never leave your device.

Emailing us

All contact runs through email to hello@veridive.com. The contact page’s brief builder prepares a message in your browser and neither sends nor stores it; the message reaches us only if you email it.

From your email we receive your email address and name, your message and any attachments, and standard technical details such as the time it was sent. Our email provider, Google LLC (Google Workspace), hosts our mailbox.

Applying for a job

Write to hello@veridive.com with ‘Careers’ in the subject. We process what you send, usually your CV, contact details, work history and links to your work, and what we record during the process, such as interview notes, work samples and our assessment. If we pay you for a work sample, we also process the details needed to pay you.

Please leave out your photo, ID number and date of birth, and special categories of data such as health, religious or political information.

The newsletter

There is no sign-up form yet. To be told when the newsletter starts, email hello@veridive.com; we handle that email like any other message (see “Emailing us” above). When the newsletter starts:

• Double opt-in: you are subscribed only after you confirm by email.
• What we keep: your email address and a record of your consent.
• Unsubscribing: use the link in any email, or write to hello@veridive.com.
• Provider: Brevo sends it for us.

Before we measure how our emails are read, such as opens or clicks, we will update this notice and ask for consent where the law requires it.

Former users of the answer engine

veridive’s old answer engine, with its apps, tools and plans, is no longer offered. If you had an account, write to hello@veridive.com from the account’s email address about the account, a subscription, or a copy or deletion of your data. Please don’t send passwords or card details. To identify you and answer, we may look up what we still hold about your account. We answer each request individually.

4. Why we use it: purposes and legal bases

The tables use these legal bases:

• GDPR Article 6(1): (a) consent · (b) contract, or steps you ask for before one · (c) legal obligation · (f) legitimate interests.
• KVKK Article 5: (1) explicit consent (açık rıza) · (2)(c) contract · (2)(ç) legal obligation · (2)(e) establishing, exercising or protecting a right · (2)(f) legitimate interest (meşru menfaat).

We rely on legitimate interests only where they are not overridden by your interests, rights and freedoms. Under the GDPR, (c) covers only obligations under EU or member state law; for obligations under other law, such as Turkish law, we rely on (f).

Visiting the site

Emailing us

The contract basis applies where your message concerns a contract with you; legitimate interests, where you write for an organization.

Applying for a job

The newsletter, once active

Former users of the answer engine

We ask for consent separately from this notice, and you can withdraw it at any time. Giving us personal data is voluntary, but without it we may not be able to answer you or consider your application.

We don’t sell or rent personal data, we don’t use it for advertising, and we don’t profile visitors.

5. Who receives it

• Hosting: Cloudflare, Inc. (Cloudflare Pages), which serves the site and keeps its logs.
• Email: Google LLC (Google Workspace), which hosts our mailbox.
• Newsletter: Brevo, once the newsletter starts.
• Professional advisers: such as lawyers, accountants and auditors, under a duty of confidentiality.
• Authorities and courts: where the law requires it, or to establish, exercise or defend legal claims.

Our providers are processors (veri işleyen): they act only on our instructions, under written terms that require them to protect the data.

6. International transfers

Our service providers may process personal data outside your country, including outside Türkiye and the European Economic Area (EEA).

Under the GDPR. We transfer data outside the EEA only on a basis that Chapter V allows: an adequacy decision of the European Commission (Article 45); appropriate safeguards, such as the Commission’s standard contractual clauses (Article 46); or, in limited cases, a derogation for a specific situation (Article 49).

Under the KVKK. Article 9, as amended in 2024, allows a transfer abroad when a processing condition is met and the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) has made an adequacy decision for the destination. Otherwise it needs an appropriate safeguard, such as a standard contract notified to the Personal Data Protection Authority, binding corporate rules approved by the Board or a written undertaking the Board has authorized, and you must be able to exercise your rights and seek effective remedies there. Without either, only incidental transfers in the cases the law lists are allowed, such as with your explicit consent after you are told of the risks.

Ask us which basis applies to a transfer of your data, or for a copy of the safeguards where appropriate.

7. How long we keep it

If an engagement or a job follows, the retention rules for that relationship apply. We may keep data longer where the law requires it, or to establish, exercise or defend legal claims. When a retention period ends, we delete, destroy or anonymize the data.

8. Security

• A static site: no database, no user accounts and no sign-up form yet; the only form, the contact page’s brief builder, prepares a message in your browser and sends nothing to a server.
• Encrypted, self-contained pages: the site is served over HTTPS, and a content security policy lets browsers load files only from our own domain.
• Limited access: only people who need the data can access it, and we work only with providers that commit to protecting it.
• Email: standard email is not end-to-end encrypted, so please don’t send confidential information before we have agreed how to exchange it.
• Incidents: we handle personal data breaches as the GDPR and the KVKK require, notifying the authorities and the people affected where required.

9. Your rights

Under the GDPR

Where the GDPR applies, you have the right to:

• access your personal data and get a copy (Article 15);
• have it corrected (Article 16), erased (Article 17) or its processing restricted (Article 18), in the cases the law provides;
• receive data you gave us in a machine-readable format, where processing is automated and based on consent or a contract (Article 20);
• object to processing based on legitimate interests, and to direct marketing at any time (Article 21); and
• not be subject to a decision based solely on automated processing with legal or similarly significant effects (Article 22). We make no such decisions.

We pass corrections, erasures and restrictions on to the recipients of your data unless that is impossible or disproportionate (Article 19). You can withdraw consent at any time, without affecting earlier processing.

We answer within one month; for complex or numerous requests we may take two more months, and we tell you so within the first. Answers are free unless a request is manifestly unfounded or excessive, and we may ask you to confirm your identity. You can also complain to a data protection supervisory authority, in particular in the EU or EEA country where you live or work or where the alleged infringement took place (Article 77).

Under the KVKK

As a data subject (ilgili kişi), Article 11 of the KVKK gives you the right to apply to us to:

• learn whether your personal data is processed and, if it is, request information about it;
• learn the purpose of the processing and whether your data is used for it;
• know the third parties in Türkiye or abroad to whom it is transferred;
• have incomplete or inaccurate data corrected;
• have it deleted or destroyed under the conditions in Article 7 of the KVKK;
• have those corrections, deletions and destruction notified to the recipients;
• object to an outcome against you that results from analysis of your data exclusively by automated systems; and
• claim compensation for damage caused by unlawful processing.

How to apply. Under the Communiqué on the Procedures and Principles of Application to the Data Controller (Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ), you can apply:

• in writing, signed, to 8 The Green, STE D, Dover, Kent County, Delaware 19901, United States;
• by email signed with a secure electronic or mobile signature; or
• by email to hello@veridive.com from an address you gave us before and that is registered in our systems, such as the one on your old answer-engine account.

Your application must include your name and surname, your signature on a written application, your Turkish ID number or, for foreign nationals, your nationality and passport or ID number, your address for notifications, any email, phone or fax contact, and your request.

We answer within 30 days, free of charge; if answering involves an additional cost, we may charge only the fee the Communiqué allows, refunded if our error caused the application. If we reject your application, you find our answer insufficient or we miss the deadline, you can complain to the Personal Data Protection Board within 30 days of learning our answer, and in any case within 60 days of applying.

If you live elsewhere

Your local law may give you similar rights; we handle every request under the law that applies.

10. Cookies and similar technologies

We set no cookies and use no analytics, tracking pixels or fingerprinting. Our pages load nothing from third parties, so no one else can set cookies through them.

The site keeps three functional preferences in your browser’s local storage. Each remembers a choice you made; none holds personal details or is ever sent to us or anyone else.

You can clear them at any time in your browser settings, usually under the site data for veridive.com; the site then behaves as on your first visit.

11. Children

We offer no services to children and do not knowingly collect personal data from them. If you believe a child has sent us personal data, write to hello@veridive.com and we will delete it.

12. Changes to this notice

We update this notice when our practices or the law change, for example when the newsletter starts or a provider changes. The effective date at the top shows the current version. Where we can, we tell you directly about significant changes, and always before using personal data for a new purpose.

13. Contact us

• Email: hello@veridive.com, ideally with “Privacy” in the subject.
• Post: VERIDIVE Agentic Intelligence Co., 8 The Green, STE D, Dover, Kent County, Delaware 19901, United States