Effective Date: June 1, 2025
WELCOME TO VALITANA.COM (THIS “SITE”). IF YOU CONTINUE TO ACCESS, BROWSE AND/OR USE THIS SITE, YOU ARE AGREEING TO COMPLY WITH AND BE BOUND BY THE FOLLOWING PRIVACY POLICY, WHICH EXPLAIN THE DATA PROCESSES OF VALITANA LLC (THE “COMPANY”) RELATING TO THE SITE AND ITS APPLICATIONS. YOU ACKNOWLEDGE THAT YOU HAVE CAREFULLY READ AND AGREE TO BE BOUND BY THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU MAY NOT ACCESS OR OTHERWISE VIEW OR USE THIS SITE OR THE SERVICES.
The terms Valitana, Valitana LLC, Company or “us” or “we” refers to the owner of this Site, having an office at 300 First Stamford Place, Suite 240, Stamford, CT 06902. The term “you” or “subscriber” refers to the user or viewer of our Site.
You agree to comply with and be bound by the following Privacy Policy herein, which explains the data processes of Valitana relating to the Site as well as its applications. This Privacy Policy is under regular review to ensure it is up to date and accurate. You acknowledge that you have carefully read and agree to be bound by this Privacy Policy.
Valitana may collect limited personal information about Site visitors, as well as service subscribers and account users to support Valitana’s service offerings and functionality, to improve the subscriber and user experience and Valitana’s products and services, or for other legitimate business interests. This may include basic business contact information, User ID and passwords, as well as IP addresses or device identifiers, among other similar information. Valitana will also collect information about your use of the Site, including searches that you run, any data that you upload, and the functions of Valitana’s services that you utilize (including your history of such use), among other similar information.
Subscriber data will be collected, stored and processed securely. Where subscriber’s data is transferred internationally, Valitana will ensure the appropriate precautions are taken to protect this data. Valitana will only use subscriber personal data for the purposes for which it was collected, unless Valitana reasonably considers that it is needed for another reason that is also compatible with the original purpose. Please email Valitana at compliance@valitana.com if there are questions. If there is a need to use your personal data for a purpose unrelated to the purpose for which the data was collected, Valitana will notify you and will explain the legal grounds for processing.
Valitana will only retain personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. When determining the appropriate retention period for personal data, Valitana considers the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of the data, the purposes for which we process the data, and whether we can achieve those purposes through other means. Once the retention period has expired, we will securely dispose of or anonymize personal data in accordance with our internal data retention and destruction policies.
Valitana may be legally obliged to disclose subscriber’s personal information without its knowledge to the extent that Valitana is required to do so: (a) by law; (b) in connection with any ongoing or prospective legal proceedings; and (c) in order to establish, exercise or defend Valitana legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).
Valitana will only use subscriber personal data for the purposes for which required to be collected it and only where there is a lawful basis for such processing, for example:
Valitana may share aggregate or de-identified information about the Site or services usage with third party business partners, including affiliated companies. However, Valitana does not share personal information or otherwise specific user information with third parties for those third parties’ own purposes.
However, Valitana may share personal information, as well as technical information about our Site or the services usage, with our third party service providers, or as needed to protect the rights, properties or legitimate interests of Valitana, including as necessary in Valitana’s sole discretion to comply with legal or contractual requirements, or legal process. Valitana may also share certain personal information or other user information as necessary for a merger, acquisition, or other corporate reorganization. The sub processors that also have access to log-in information and corporate email addresses are:
Valitana may use cookies on the Site to support operational functionalities, including to remember a user ID to make your log-in or other services experience more efficient. Valitana may also use cookies or other tracking technologies to gather information and conduct analytics about the use of our Sites and services. Valitana does not track Site visitors over time and over third party websites, nor do we authorize third parties to do the same on our Site. We do not respond to browser Do-Not-Track settings. You may disable cookies through your browser settings, but please remember that certain features of the Site may not work as intended.
Valitana takes reasonable steps to secure the Site and services, however no information security can be guaranteed. Each subscriber will be provided a user name to access their Site services, and will be prompted to set a password upon first logging in. You are obligated to keep your password secure and not share it with any unauthorized user. If you have any indication that your account has been accessed or used without authorization or otherwise in excess of the rights and permissions granted to you in the Master Services Agreement, you agree to immediately change your password and notify Valitana at compliance@valitana.com.
The Site and services are hosted in the United States, and your use of the Site and services is governed by United States law and, for subscribers, the Master Services Agreement. If you are using the Site or services from outside the United States, please be aware that your information may be transferred to, stored and processed in the United States and other countries where our servers are located and our databases operate. The data protection and other laws of the United States and other countries might not be as comprehensive or protective of certain rights as those in your country. Under United States law, your information may be subject to access requests from government authorities. By using this Site and services, you consent to your information being transferred to our facilities and to the facilities of those third parties with whom we may share personal information as described in this Privacy Policy.
Valitana is committed to protecting the security, confidentiality, and privacy of its information resources including EU and EEA personal data in accordance with the requirements set forth in the General Data Protection Regulation (EU) 2016/679 ("GDPR"). Valitana complies with the GDPR as it relates to use and sharing of subscriber’s personal data. Under certain circumstances, subscriber has rights related to its personal data. These include the right to:
Subscriber will not have to pay a fee to access personal data (or to exercise any other rights). However, Valitana may charge a reasonable fee if subscriber’s request is clearly unfounded, repetitive, or excessive. Alternatively, Valitana may refuse to comply with your request in these circumstances. Valitana may need to request specific information from subscriber in order to confirm subscriber’s identity. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. Valitana may also request additional information in relation to subscriber’s request to speed up response time. Valitana aims to respond to all legitimate requests within one month. Occasionally it may take longer than a month if subscriber’s request is particularly complex or if there are several requests.
As the Data Controller, Valitana is legally responsible for the handling of the information provided by the subscriber. Valitana is committed to complying with the GDPR in all aspects of the use and sharing of personal data of the subscriber. Under certain circumstances, the subscriber has rights under data protection laws in relation to your personal data, as explained in the Rights of the Data Subject section.
Where Valitana acts as a processor while providing services and support for the provision of its services, it follows the strict guidelines arranged in the agreement between the Controller and the Processor and acts as a processor per the definition and our obligations as defined under GDPR legislation.
If you are a resident of California you are granted specific rights regarding access to your personal information, as per the California Consumer Privacy Act (“CCPA”), California Privacy Rights Act (“CPRA”) together as “CCPA/CPRA”, and other California privacy laws.
In the past twelve (12) months, and, as permitted by the CPRA, since January 1, 2022, Valitana has collected the following categories of personal information:
Valitana will use and retain the collected personal information as needed to provide the Services or for:
Valitana may also collect other personal information outside of these categories through instances where the subscriber interacts with Valitana in person, online, or by phone or mail in the context of:
Learn about how Valitana uses your personal information in the section “Purpose and Lawful Basis for Processing“.
Valitana collects and shares personal information through:
For more information on how we use cookies and tracking technologies, please refer to the section titled "Cookies, Tracking Technologies and Your Choices."
Valitana may disclose your personal information with its service providers pursuant to a written contract between us and each service provider. Learn more about how Valitana discloses personal information in the section “Sharing of Personal Information“
Valitana may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be “selling” of your personal information.
Valitana has not sold or shared any personal information to third parties for business or commercial purposes in the preceding twelve (12) months. Valitana has disclosed the following categories of personal information to third parties for a business or commercial purpose in the preceding twelve (12) months:
You have the right to request that Valitana disclose the following kinds of information to you about our collection, disclosure, sale, sharing, and use of your Personal Information:
You have the right to request correction of inaccurate Personal Information maintained about you. Valitana will honor the request, but might not be able to fulfill your request if it is impossible to do so or would involve disproportionate effort, or in case of a good-faith, reasonable, and documented belief that a request to correct is fraudulent or abusive.
You have the right to request to delete any of your personal information collected from you and retained, subject to certain exceptions. Once a verifiable consumer request is received and confirmed, Valitana will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
Valitana may deny your deletion request if retaining the information is necessary for Valitana or its service providers to:
You have the right to opt-out of the sale and/or sharing of your Personal Information. Valitana does not sell your personal information for monetary consideration. However, Valitana does use cookies for targeted advertising purposes. The collection of data through certain cookies for our targeting advertising purposes may be considered a “sale” and is considered “sharing” under the CPRA. We do not knowingly sell/share the Personal Information.
You have the right to submit a request through the use of an authorized agent. If you choose to do so, it may be required that you (i) provide the authorized agent written permission to act on your behalf, and (ii) verify their identity directly with Valitana. The request from an authorized agent that does not submit proof of authorization may be denied.
Valitana will not discriminate against you for exercising any of your CPRA rights. Valitana will not (i) deny you Products or Services, (ii) charge you different prices or rates for Products or Services, including through granting discounts or other benefits, or imposing penalties, (iii) provide you a different level or quality of Products or Services, and (iv) suggest that you may receive a different price or rate for Products or Services or a different level or quality of Products or Services.
Valitana does not knowingly sell or share the Personal Information (PI) of California residents under the age of sixteen (16). If you believe that Valitana may have unknowingly sold or shared the PI of a California resident under 16 years of age without the appropriate affirmative opt-in authorization, please report it by emailing compliance@valitana.com.
Upon receiving a request, Valitana will need to verify the requestor’s identity to confirm they are the individual about whom information is maintained in the system. This verification process may involve requesting specific information to match with details previously provided or using a previously established communication method (e.g., phone or email) to reach the requestor. Additional verification methods may also be used as necessary.
Valitana will only use personal information provided in the request to verify the individual’s identity or authority to make the request. Whenever possible, Valitana will avoid requesting further information solely for verification purposes. However, if identity verification cannot be achieved based on the information already on file, additional details may be requested for identity confirmation, security, or fraud-prevention purposes. Any such additional information will be deleted as soon as the verification process is complete.
Valitana will confirm receipt of a verifiable consumer request within ten (10) business days of receiving it. Valitana will endeavor to respond to such a request within forty-five (45) calendar days from the date of receipt. If additional time is needed, Valitana will notify the requestor of the extension, provide an explanation for the delay in writing, and ensure a response no later than ninety (90) calendar days from receiving the request.
Exercising access to data, data correction, data portability, and data deletion rights
To exercise the rights of access, data correction, data portability, and deletion as described above, individuals should submit a verifiable consumer request to Valitana by either:
You can reach our Data Protection Officer/Legal/Controller at compliance@valitana.com, and our EU/UK Representative at contact@gdprlocal.com
Schedule a demo to see how Valitana can help your team. Or contact us by email at sales@valitana.com.
