Privacy Policy

Valid, Inc. Privacy Policy

Last Updated: December 19, 2025

Thank you for visiting https://www.validtx.com (the “Site”), operated by Valid, Inc. (“Valid,” “we,” “us,” or “our”).

We take privacy seriously. Whether you’re browsing, contacting us, partnering with us, or applying for a job, this Privacy Policy explains how we collect, use, and share information about you.

By using the Site, you acknowledge that you understand and agree to the practices described in this Privacy Policy.

If you need this Privacy Policy in an alternative format due to a disability, please contact us at Contact@validtx.com

Quick summary (plain English)

  • What we collect: contact info you provide, basic device/usage data, and (if you apply for a role) professional/employment information.  We do not process sensitive information.
  • How we use it: to run and improve the Site, respond to you, evaluate job applicants, and keep things secure and lawful.
  • How we share it: with service providers (hosting, security, hiring tools), analytics partners, business partners/affiliates, and when required for legal reasons or business transactions.
  • Ads / selling data: we do not “sell” personal data as that term is defined under California law (and we don’t knowingly sell minors’ data).
  • Your choices: you can manage cookies in your browser; you can also request access/deletion and other rights (details below).
  • International: the Site is hosted in the U.S.; if you’re outside the U.S., your data may be transferred and processed there.

Table of contents

  1. What this Privacy Policy covers
  2. Personal data we collect
  3. Where the data comes from
  4. Why we collect and use personal data
  5. How we share personal data
  6. Cookies and similar tracking tools (and opt-outs)
  7. Data security and retention
  8. Children’s privacy
  9. U.S. privacy rights (including California and other states)
  10. EEA/UK (GDPR) disclosures and rights
  11. Changes to this policy
  12. Contact us

1) What this Privacy Policy covers

This Privacy Policy describes how we handle Personal Data we collect through the Site. It does not cover the privacy practices of companies we don’t own or control, or people we don’t manage.

“Personal Data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) with a particular individual. This includes “personal information” or “personally identifiable information” under applicable privacy laws.

2) Personal data we collect

A. Categories of Personal Data

Depending on how you interact with the Site, we may collect:

Profile or Contact Data

  • First and last name
  • Email address
  • Phone number

Device / IP Data

  • IP address
  • Device ID
  • Domain server
  • Device type / operating system / browser used to access the Site

Web Analytics / Usage Data

  • Page interactions
  • Referring page/source that brought you to the Site
  • Non-identifiable request IDs
  • Interaction statistics between your device/browser and the Site

Professional or Employment-Related Data (primarily if you apply for a job)

  • Resume/CV
  • Job title
  • Job history
  • Performance evaluations

Geolocation Data

  • Approximate location derived from IP address (and/or location-enabled browser settings)

Other information you choose to provide

  • Information you include in emails, forms, surveys, or other free-text fields

We do not process sensitive personal information (e.g. genetic, health or biometric data) through the Site 

‍

B. Categories of third parties we may share these categories with

  • Service Providers
  • Analytics Partners
  • Business Partners
  • Parties you authorize / access / authenticate

3) Sources of Personal Data

We collect Personal Data from:

A. You

  • When you provide it directly (e.g., contacting us, submitting a form, responding to surveys/questionnaires, emailing us)
  • Automatically when you use the Site (e.g., through cookies and similar technologies)
  • If you use a location-enabled browser, we may receive location information

B. Third parties

  • Vendors (e.g., analytics providers that help us understand Site usage; vendors that provide customer support tools)
  • Hiring-related partners (e.g., if you apply for a job, we may work with partners that perform background checks and we may receive publicly available information like criminal history and education verification)

4) Why we collect and use Personal Data (business purposes)

We use Personal Data for the following commercial/business purposes:

A. Provide, personalize, and improve the Site

  • Provide the products, services, or information you request
  • Fulfill the reason you provided the information
  • Provide support and assistance
  • Improve the Site (testing, research, internal analytics, product development)
  • Personalize content and communications based on your preferences
  • Help with fraud prevention, security, and debugging
  • Evaluate and process job applications (if you apply)
  • Carry out other purposes disclosed at collection or as permitted by applicable law (including privacy laws such as the California Consumer Privacy Act)

B. Communicate with you

  • Respond to your messages and requests
  • Contact you when necessary or requested
  • Send updates and communications consistent with your preferences (where applicable)

C. Legal, safety, and enforcement

  • Comply with laws, regulations, court orders, and legal processes
  • Prevent, detect, or investigate security incidents and illegal/prohibited activity
  • Protect the rights, property, and safety of you, Valid, and others
  • Enforce agreements and respond to claims about rights violations
  • Resolve disputes

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated, or incompatible purposes without providing you notice.

5) How we share Personal Data

We disclose Personal Data to the categories below. Depending on which state laws apply to you, some disclosures may be considered a “sale” or similar regulated sharing. See the state-specific sections below.

A. Service Providers

These entities perform services for us or on our behalf, such as:

  • Hosting, technology, and communications providers
  • Security and fraud prevention consultants
  • Hiring tools and background/reference screening providers (for job applicants)

B. Analytics Partners

These providers help us understand traffic and usage, such as:

  • Providers that track how users found the Site
  • Providers that track how users interact with the Site

C. Business Partners

These parties partner with us in offering services or operating our business, including:

  • Businesses you have a relationship with (including our affiliates, where applicable)

D. Parties you authorize, access, or authenticate

  • Third parties you choose to access through the Site (if applicable)
  • Other users (if a feature allows you to interact with others)

E. Legal obligations and enforcement

We may share Personal Data as needed in connection with legal compliance, enforcement, and safety purposes described above.

F. Business transfers

If we are involved in a merger, acquisition, bankruptcy, or similar transaction, your Personal Data may be transferred as part of that transaction (in whole or in part). If that happens, we will make reasonable efforts to notify you before your information becomes subject to a different privacy policy.

G. Aggregated / de-identified data

We may create aggregated, de-identified, or anonymized data by removing information that makes it personally identifiable. We may use and share that data for lawful business purposes (e.g., analyzing, improving, and promoting the Site) in a way that does not identify you.

6) Cookies and similar tracking tools (and opt-outs)

A. Cookies and similar technologies

We use cookies and similar technologies (e.g., pixel tags, web beacons, clear GIFs, JavaScript) (collectively, “Cookies”) so our servers can recognize your browser, understand when and how you visit the Site, analyze trends, and improve the Site.

We may also supplement information we collect with information received from third parties, including those that place their own cookies on your device.

Do Not Track: Because we use Cookies, the Site does not currently respond to browser “Do Not Track” signals.

B. Types of cookies we use

  • Essential cookies: required for features you request (e.g., access to secure areas, as applicable). Disabling them may break functionality.
  • Performance / analytical cookies: help us understand Site usage (e.g., visitor counts, pages viewed, time spent).

Google Analytics: Google may use cookies through Google Analytics. Google’s use/sharing of information collected by Google Analytics is governed by Google’s terms and privacy policy. You can opt out via Google’s advertising opt-out page or the Google Analytics Opt-out Browser Add-on:

C. Managing cookies

Most browsers let you control cookies via settings (including blocking new cookies and deleting existing ones). If you disable cookies, you may need to reset preferences each visit, and parts of the Site may not work properly.

Learn more about managing cookies:

7) Data security and retention

A. Security

We use appropriate physical, technical, and administrative safeguards designed to protect Personal Data from unauthorized access, use, and disclosure, based on the nature of the data and how it is processed. However, no internet transmission or storage method is 100% secure.

B. Retention

We retain Personal Data as long as needed to provide the Site and/or services. In some cases, we retain Personal Data longer when necessary to comply with legal obligations, resolve disputes, or as otherwise permitted or required by law. We may also retain information in anonymous or aggregated form where it no longer identifies you.

8) Children’s privacy

We do not knowingly collect or solicit Personal Data from children under 16. If you are under 16, please do not use the Site or send us Personal Data. If we learn we collected Personal Data from someone under 16, we will delete it as quickly as possible.

If you believe a child under 16 provided Personal Data to us, please contact Contact@Validtx.com

9) U.S. privacy rights (including California and other states)

A. California resident rights (CCPA/CPRA)

If you are a California resident, you have the rights described below. If there is a conflict between this section and another part of this Privacy Policy, the provision more protective of Personal Data will control (to the extent of the conflict).

Right to access (know): You may request information about our collection and use of your Personal Data over the prior 12 months, including:

  • categories of Personal Data collected
  • categories of sources
  • business/commercial purpose for collecting or selling
  • categories of third parties we shared with
  • specific pieces of Personal Data collected
    If we disclosed your Personal Data for a business purpose, we will identify the categories shared with each category of recipient. If we sold Personal Data, we will identify the categories sold to each category of recipient.

Right to deletion: You may request deletion of Personal Data we collected about you, subject to exceptions (e.g., we may need to keep it to provide services, complete transactions you requested, or for other lawful reasons).

How to exercise your rights (Valid Request):
To exercise the rights above, you (or your Authorized Agent) must submit a request that:

  1. gives enough information for us to verify you are the person we collected data about, and
  2. describes your request clearly enough for us to understand and respond.

We will use information provided in a request only to verify identity and complete the request.

Timing and fees: We aim to respond within 45 days. We do not charge fees unless a request is excessive, repetitive, or manifestly unfounded (and if so, we’ll explain before proceeding).

Submit a request: Email us at Contact@Validtx.com with the subject line “Privacy Rights Request”.

Authorized agents: If you use an agent, you must provide written permission, and we may request proof of that permission.

Sales opt-out / opt-in: We do not “sell” Personal Data as defined under California law and have not done so in the past 12 months. To our knowledge, we also do not sell the Personal Data of minors under 16.

Non-discrimination: We will not discriminate against you for exercising California privacy rights.

B. “Shine the Light” (California Civil Code 1798.83–1798.84)

California residents may contact us to prevent disclosure of Personal Data to third parties for those third parties’ direct marketing purposes. To make such a request, email Contact@Validtx.com with the subject line “Shine the Light Request.”

C. Nevada resident rights

Nevada residents may opt out of the sale of certain Personal Data to third parties who intend to license or sell that Personal Data. Nevada residents can submit a request by emailing Contact@Validtx.com with the subject line “Nevada Do Not Sell Request” and including their name.
Please note: we do not currently sell Personal Data as “sales” are defined under Nevada Revised Statutes Chapter 603A.

D. Other state privacy rights (Colorado/Connecticut/Utah/Virginia and others)

Depending on where you live, you may have additional rights under state privacy laws, which can include (and may vary by state):

  • Access to and deletion of Personal Data
  • Correction of inaccurate Personal Data
  • Data portability
  • Opt-out of certain processing (e.g., targeted advertising, certain profiling, or certain forms of “sale”/sharing as defined by law)
  • Appeal rights if we deny a request (where required)

To request to exercise these rights, email Contact@Validtx.com with the subject line “State Privacy Rights Request”.

10) EEA/UK (GDPR) disclosures and rights

If you are in the European Union, United Kingdom, Liechtenstein, Norway, or Iceland, you may have additional rights under the GDPR. For this section, “Personal Data” and “processing” have the meanings set out in the GDPR. Valid is the controller of Personal Data processed in connection with the Site.

If there is a conflict between this section and another section, the more protective provision will control (to the extent of the conflict).

A. What we collect and how we use it

See Sections 2 (Personal Data we collect) and 4 (Why we collect and use Personal Data).

B. Lawful bases for processing

We process Personal Data only when we have a lawful basis, including:

Contractual necessity (to provide the Site / perform under Terms of Use)

  • Profile or Contact Data
  • Device/IP Data
  • Web Analytics
  • Other info you choose to provide

Legitimate interests (where it furthers our legitimate interests or those of third parties)

  • Profile or Contact Data
  • Device/IP Data
  • Web Analytics
  • Professional/Employment-Related Data
  • Geolocation Data
  • Other info you choose to provide
    We may also de-identify/anonymize Personal Data to support these interests.

Examples include:

  • Providing/customizing/improving the Site
  • Communicating with you
  • Meeting legal requirements and enforcing terms
  • Corporate transactions

Consent (where we ask and you give consent at the time of collection)

Other grounds (legal obligations, vital interests, public interest tasks, where applicable)

C. EU/UK data subject rights

Subject to legal limits, you may have the right to:

  • Access your Personal Data
  • Rectify inaccurate/incomplete data
  • Erase Personal Data
  • Withdraw consent (when processing is based on consent)
  • Portability (machine-readable copy; transmit to another controller where feasible)
  • Object to certain processing (e.g., direct marketing)
  • Restrict processing
  • Lodge a complaint with a supervisory authority in your country or EU member state

To submit a request, email Contact@Validtx.com with the subject line “GDPR Request.” We may be unable to fully comply in certain cases (e.g., where a request is impractical, frivolous, jeopardizes others’ rights, or is not legally required), but we will respond and explain.

D. Transfers of Personal Data

The Site is hosted and operated in the United States, including through our service providers. If you do not reside in the U.S., U.S. laws may differ from those in your jurisdiction. By using the Site, you understand your Personal Data may be transferred to, stored, and processed in the U.S. (and possibly other countries).

We transfer Personal Data using appropriate safeguards, such as:

  1. standard contractual clauses approved by the European Commission (via a data processing agreement), and/or
  2. binding corporate rules aligned with GDPR requirements, and/or
  3. an approved industry/technology-specific code of conduct.

11) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will provide notice by posting an updated policy on the Site and/or by email and/or other reasonable means.

If you continue using the Site after changes are posted, you agree to the updated policy.

12) Contact us

Questions, comments, or privacy rights requests:

Valid, Inc.
Email: Contact@Validtx.com
Mailing address: 8 Springhill Road, Wayland MA 01778

‍

Back to top
Contact