Velocity Labs, Inc

United States

When you request that we do so, we take measures to delete your Personal Information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When we process Personal Information for our own purposes, we determine the retention period taking into account various criteria, such as the type of services provided to you, the nature and length of our relationship with you, possible re-enrollment with our Site, the impact on our Site we provide to you if we delete some information from or about you, and mandatory retention periods provided by law and the statute of limitations.

If you would like to request deletion of your Personal Information, please email us at privacy@numeric.io.

Numeric maintains reasonable technical, organizational, and physical security measures to protect the security and confidentiality of Sensitive & Confidential Data from unauthorized access or unlawful disclosure. The security for Sensitive & Confidential Data is managed in accordance with the Numeric Information Security Policy. Critical security controls include, but are not limited to, the following: Encryption in transit: Sensitive & Confidential Data transfers should be sent via a secure transfer system, such as TLS or SFTP. Encryption at rest: All Velocity servers, workstations, and laptops must use disk encryption. Outbound files: Use of a secure file transfer platform to transfer files outside of the Velocity network is recommended where possible. Inbound files: During transfer, verify that all files sent into the Velocity network are free of corruption and that the file originated from a known source. Database: Encrypt company application databases that are externally accessible via web traffic and provide a level of identification security using an application-specific protocol, such as HTTPS. Sensitive Data in Velocity databases must additionally be encrypted client-side before being inserted into the database. Data segregation: Sensitive Data remains in the secure cloud environments. Production and test environments: Sanitize all production data before use in non-production environments, as applicable. Incident management: Maintain a process for identifying, managing, and resolving privacy incidents, in accordance with the Velocity Incident Response Policy.

United States

Cloud hosted with a managed DB

DigitalOcean

no

no

Per our SOC2 audit, our procedure for handling requests for data deletion is to delete any data upon requests within 30 days of a written request, to the extent possible.

no

2024-07-19

yes

WorkOS

yes

yes

security@numeric.io

no

yes

no

no

no