Vercid

Privacy Policy

Effective August 27, 2026

Who we are

Vercid is a business-operations platform built and operated by Deadpan Labs LLC, a Florida limited liability company (“we,” “us”). This policy covers the Vercid platform at vercid.com, client workspaces on Vercid subdomains, and the Vercid mobile app.

What we collect

Account information. Your name, email address, and the role your organization assigns you. Accounts are created by invitation from your organization’s workspace.

Workspace content. The operational data your organization puts into its workspace — jobs, dispatch records, inventory, files, messages, and settings. Your organization controls this content; we process it to run the service.

Usage and log data. Sign-ins, actions recorded in the workspace audit log, device and browser type, and IP addresses, used for security and troubleshooting.

Push notification tokens. If you enable notifications in the mobile app, we store the device token needed to deliver them. You can turn notifications off at any time in your device settings.

What we do with it

We use this data to provide and secure the service: signing you in, rendering your organization’s workspace, delivering messages and notifications, keeping the audit trail your organization relies on, and supporting you when something goes wrong.

We do not sell personal data. We do not run third-party advertising, and we do not use your organization’s workspace content for marketing.

Your organization’s role and ours

Your organization decides what goes into its workspace and who may see it. Under data-protection law your organization is the controller of that data and Deadpan Labs is its processor: we act on your organization’s instructions, not our own. If you are a workspace member and want your data corrected or removed, your administrator is the fastest route — though you can always contact us directly at the address below.

Who we share it with

We share data only with the service providers required to operate Vercid, each bound by its own data-protection terms, and with authorities where the law requires it. Within your workspace, what other members can see is governed by the roles your organization assigns. We do not sell personal data and we do not use workspace content to train machine-learning models.

  • Supabase — authentication, database, and file storage. This is where workspace data lives.
  • Vercel — application hosting and delivery for vercid.com and every workspace subdomain.
  • Stripe — subscription billing charged to the subscribing business. Stripe receives that business’s billing details, not workspace member data.
  • Google — Maps Platform, to draw the equipment and job map from addresses your organization entered; and Google Sign-In, only where your organization turns it on.
  • Expo and Apple — delivery of push notifications. They receive the device token and the notification envelope; message contents are not included in the payload.
  • Cloudflare — bot protection on our public enquiry form. This sees visitors to vercid.com, not workspace members.
  • Resend — delivery of transactional email.

If we add or replace a provider that handles personal data, we will update this list and the effective date above before the change takes effect.

Where we process data

Vercid is operated from the United States, and the providers listed above process data in the United States and other countries where they operate. If you are in the European Economic Area, the United Kingdom, or Switzerland, this means your data may be transferred outside your home country. Where such a transfer requires a legal safeguard, we rely on the European Commission’s Standard Contractual Clauses, together with the equivalent UK and Swiss mechanisms, incorporated through our agreements with each provider.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive a portable copy, and to withdraw consent where our use rests on it. You also have the right to complain to your national data-protection authority.

If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we do not use it for cross-context behavioural advertising. You will never be treated differently for exercising any of these rights.

To exercise any of them, email us at the address below. We respond within 30 days. Because most workspace data belongs to the organization that entered it, we may need to pass your request to your workspace administrator and support them in answering it.

Security

Data is encrypted in transit. Access is enforced with role-based permissions and database row-level security, so workspace members only reach the records their membership allows. Changes to operational records are kept in an append-only audit log.

Retention and deletion

Workspace content is retained for as long as your organization uses the service, including its audit history. When an engagement ends, your organization’s money-related records are retained as required for accounting and legal purposes, and personal data is deleted. You can request access, correction, or deletion of your personal data by emailing us at the address below; we will respond within 30 days.

Children

Vercid is a workplace tool. It is not directed at children under 13, and we do not knowingly collect their data.

Changes to this policy

If this policy changes materially, we will post the new version here and update the effective date. Continued use of the service after a change means the new policy applies.

Contact

Questions about this policy or your data: team@deadpanlabs.com.