Privacy Policy

Last updated: 28 September 2026

This Privacy Policy explains how VARDR LTD ("Vardr", "we", "us" or "our") collects and uses personal data when you visit our website, create or use a Vardr account, or otherwise interact with our services.

1. Who we are

VARDR LTD is the controller of personal data processed in connection with Vardr.

VARDR LTD
Company No. 17007796
Registered in England and Wales
Registered office: 20 Arlington Road, Eastbourne, England, BN21 1DJ

For privacy enquiries or to exercise your data protection rights, contact support@vardr.ai.

2. Information we process

Depending on how you interact with Vardr, we may process:

• your email address and account credentials;
• profile information you choose to provide, such as your name, organisation, role and team;
• notification preferences, including an alternative alert email address if you provide one;
• subscription and billing identifiers associated with your account;
• Sources, Topics, alert rules and other settings you create within Vardr;
• technical, security and operational information necessary to operate, troubleshoot and protect the service;
• communications you send to us; and
• information obtained from publicly accessible sources where necessary to identify and evaluate public signals.

Public-source information may include public account or channel identifiers, usernames or handles, author names, content identifiers, URLs, timestamps, titles and other publicly available information associated with a signal.

Some of this information is not obtained directly from the individual it relates to. It may come from publicly accessible platforms, feeds and news sources, including sources such as YouTube, Reddit, Mastodon, Bluesky and publicly available news feeds.

Vardr monitors public signals associated with customer-selected Sources and Topics. Vardr is not designed as a people-profiling service. Personal data may nevertheless appear incidentally within public-source evidence.

3. How we use information

We use personal data where necessary to:

• create, authenticate and administer Vardr accounts;
• provide customer-requested Vardr services;
• identify and evaluate qualifying public signals;
• understand the historical rhythm and silence associated with Sources and Topics;
• distinguish unique signals from repeated observations of the same material;
• generate and deliver alerts;
• manage subscriptions and billing;
• provide password resets and other service communications;
• maintain the security, reliability and integrity of Vardr;
• diagnose technical problems;
• comply with applicable legal and regulatory obligations; and
• maintain and improve Vardr's silence-detection capability.

4. Our lawful bases

We rely on different lawful bases depending on why personal data is being processed.

Contract

We process account, subscription, preference and service information where necessary to provide Vardr and perform our contract with you, or to take steps at your request before entering into a contract.

Legal obligation

We may process or retain information where necessary to comply with applicable legal obligations, including accounting, tax and regulatory requirements.

Legitimate interests

We rely on legitimate interests for certain processing necessary to operate, secure, maintain and improve Vardr, and to maintain and evaluate the public-signal evidence necessary for Vardr's silence-detection capability.

Our legitimate interests include maintaining the security and integrity of the service, diagnosing operational problems, identifying and distinguishing public signals, maintaining appropriate historical signal evidence and providing and improving Vardr's silence-detection functionality.

When relying on legitimate interests, we consider whether the processing is necessary and proportionate and balance our interests against the rights and interests of affected individuals.

5. Public-source information

Vardr observes publicly available signals associated with Sources and Topics selected by customers.

A Topic represents a subject or concept that a customer asks Vardr to observe. Vardr may search supported public sources for qualifying signals relating to that Topic.

A Source represents a particular public source that a customer asks Vardr to observe for expected activity.

Public-source information is used to determine whether qualifying signals have occurred, distinguish unique signals from repeated observations of the same material, understand historical signal patterns and identify unusual silence.

Vardr does not intentionally seek private information through this process and does not use public-source evidence to advertise to or directly contact individuals whose public material may form part of a signal.

We seek to minimise personal information retained within public-source evidence to what is reasonably necessary for these purposes.

6. Billing and Stripe

We use Stripe to provide payment and subscription-management services.

Stripe may process payment, billing and related information in accordance with its own privacy practices. Vardr stores identifiers and subscription information necessary to associate your Vardr account with your Stripe subscription and administer the service.

Vardr does not store your full payment card details.

7. Email communications

We use an email delivery provider to send service communications, including password-reset messages, welcome or subscription communications and Vardr alerts.

Information necessary to deliver these messages, including the recipient email address and relevant message content, is processed by the provider for delivery purposes.

8. Service providers and recipients

We use service providers where necessary to operate Vardr. Our principal providers currently include:

• Google Cloud, for hosting, databases, infrastructure and operational logging;
• Stripe, for payment and subscription processing; and
• SendGrid, for transactional and alert email delivery.

We disclose personal data to service providers where reasonably necessary for them to provide services to us, or where disclosure is required or permitted by law.

Vardr also interacts with supported public platforms and feeds to retrieve publicly accessible signal information. Those platforms are sources of public information and are not necessarily processors acting on Vardr's behalf.

9. International data transfers

Some service providers may process personal data outside the United Kingdom.

Where UK data protection law treats this as a restricted international transfer, we use an applicable lawful transfer mechanism or appropriate safeguard as required.

You may contact support@vardr.ai if you would like further information about the safeguards applicable to relevant international transfers.

10. Data retention

Customer-owned operational account data is scheduled for deletion 30 days after account closure, subject to limited information that we may need or be permitted to retain for legal, security, fraud-prevention, audit or system-integrity purposes.

Certain minimal operational records may therefore be retained separately from a customer account where necessary for those purposes.

Vardr also maintains shared intelligence derived from public-source signals. Public-source signal information may be retained while it remains reasonably necessary to provide, maintain and improve Vardr's silence-detection capability.

We may delete or de-identify personal information when it is no longer reasonably necessary for the purpose for which it is held.

Where first-party website telemetry is enabled, it is subject to separate technical retention controls.

Backup copies and information held by service providers may remain for limited periods according to applicable backup, security and provider-retention processes.

11. Security

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No internet-based service can guarantee absolute security.

12. Automated processing

Vardr automatically observes available signals, evaluates qualifying evidence, assesses silence relative to relevant historical behaviour and may generate alerts.

This automated processing supports the monitoring service requested by the customer.

Vardr is not designed to make solely automated decisions about individuals that produce legal or similarly significant effects.

13. Your data protection rights

Depending on the circumstances and the lawful basis on which we process your information, you may have rights including:

• access to personal data we hold about you;
• correction of inaccurate or incomplete personal data;
• deletion of your personal data in certain circumstances;
• restriction of processing in certain circumstances;
• objection to processing based on legitimate interests; and
• data portability where the legal requirements for that right apply.

These rights are not absolute and exemptions may apply.

To exercise a data protection right, contact support@vardr.ai.

Your right to object

Where we process your personal data on the basis of legitimate interests, you have the right to object to that processing. If you object, we will consider your particular circumstances and whether we have compelling legitimate grounds to continue the processing or another lawful reason to do so.

14. Complaints

If you are concerned about how we have handled your personal data, please contact us at support@vardr.ai so that we can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Information about making a complaint is available from the ICO at ico.org.uk.

15. Changes to this policy

We may update this Privacy Policy as Vardr develops or where our processing or legal obligations change.

When we make changes, we will update the "Last updated" date on this page.