Legal

Privacy Policy

Last updated: August 2026 · Verde Compute LLC · Delaware, United States

1. Overview

Verde Compute LLC ("Verde Compute," "we," "us," or "our") operates verdecompute.com and provides enterprise AI infrastructure services. This Privacy Policy describes how we collect, use, and protect information in connection with our website and services.

By accessing our website or submitting an inquiry, you acknowledge the practices described in this policy.

2. Information We Collect

Website visitors: We collect standard web server logs (IP address, browser type, pages visited, timestamps) for security and operational purposes. We do not use third-party tracking pixels or behavioral advertising.

Enterprise inquiry submissions: When you submit an engagement inquiry, we collect:

• Organization name and corporate website
• Business email address
• Country / jurisdiction
• Intended use case and deployment timeline
• Qualification confirmations

Client engagements: Information collected in the context of active client engagements is governed by the applicable Master Service Agreement, not this policy.

3. How We Use Information

• Evaluating and responding to enterprise inquiries
• OFAC sanctions screening and export control compliance (legally required)
• Communicating with prospective and active clients
• Operating and improving our website
• Fulfilling legal and regulatory obligations

4. Information Sharing

We do not sell, rent, or share personal information with third parties for commercial purposes.

We may share information with:

• Legal counsel and advisors — under confidentiality obligation, for engagement structuring
• OFAC screening services — legally required for US export compliance
• Regulatory authorities — where required by applicable law

5. Data Retention

Inquiry data from engagements that do not proceed is retained for 24 months for legal compliance and OFAC recordkeeping, then securely deleted.

Active client data is governed by the applicable Master Service Agreement. Upon engagement conclusion, all client workload data is erased per NIST SP 800-88 guidelines, and a certificate of destruction is issued.

6. Security

We implement technical and organizational measures appropriate to the sensitivity of the information we process. All inquiry submissions are transmitted over TLS. Internal access to inquiry data is restricted to authorized personnel on a need-to-know basis.

In the event of a confirmed security incident affecting personal data, we will notify affected parties within 72 hours of discovery, consistent with GDPR, CCPA, and NY SHIELD Act requirements.

7. Cookies

This website uses essential cookies only — strictly necessary for website operation and security. We do not use analytics cookies, advertising cookies, or third-party tracking. No consent is required for essential cookies under applicable law.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete personal information we hold about you. To exercise these rights, contact [email protected]. We will respond within 30 days.

Residents of the European Economic Area may also have rights under GDPR including data portability and the right to object to processing. California residents may have rights under CCPA including the right to know, delete, and opt-out of sale. See Section 9 below for regional detail.

9. State & Region-Based Data Rights

European Economic Area (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) or equivalent legislation:

• Right of Access — request a copy of personal data we hold about you
• Right to Rectification — request correction of inaccurate personal data
• Right to Erasure — request deletion of your personal data (“right to be forgotten”)
• Right to Restriction — request that we limit processing of your data
• Right to Data Portability — receive your data in a structured, machine-readable format
• Right to Object — object to processing based on legitimate interests

Our lawful basis for processing inquiry data is legitimate interest (evaluating enterprise engagements) and legal obligation (OFAC/EAR compliance). We do not process personal data for marketing or profiling purposes.

California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the following rights:

• Right to Know — request disclosure of what personal information we collect, use, and share
• Right to Delete — request deletion of personal information we have collected
• Right to Opt-Out — we do not sell or share personal information for advertising; no opt-out required
• Right to Non-Discrimination — exercising your rights will not affect the quality of services you receive
• Right to Correct — request correction of inaccurate personal information

We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising.

Other Jurisdictions

Residents of other jurisdictions with applicable data protection laws (including Canada PIPEDA, Brazil LGPD, Australia Privacy Act) may contact us at [email protected] to exercise applicable rights. We will respond within 30 days and apply the most protective applicable standard.

10. Children

Our website and services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be noted by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact

For privacy-related inquiries, data requests, or to report a concern:

• Email: [email protected]
• Legal: [email protected]
• Verde Compute LLC · Delaware, United States