Pioneer Privacy Policy

Version: 1.0
Effective date: October 5, 2026
Publication URL: https://pioneer.verisec.ai/privacy

1 Scope and responsibility

Verisec AI LLC, a California limited liability company ("Verisec," "we," "us," or "our"), operates Pioneer, an investigative intelligence platform for approved professional users in the United States and Canada. This policy explains how we handle personal information in connection with Pioneer, its related applications and support, and the records and investigative information available through the platform.

This policy covers account holders, people who contact us, and individuals whose information appears in source records or investigative content. Our Terms of Use govern access and permitted use. This policy does not itself grant permission to collect information, investigate a person, disclose a record, or conduct a legally restricted activity.

For account administration, security, business operations, and the source datasets we select and maintain, Verisec determines the relevant processing purposes. For private content supplied by a customer, we generally process information to provide the contracted service according to that customer's instructions, subject to our own legal obligations. Customers remain responsible for their investigations and their handling of personal information. Their privacy notices and agreements may also apply.

2 Information we collect

We collect information in the following categories, depending on your relationship with Pioneer and the features used:

Account and organization information: names, business email addresses, organization and team affiliations, user roles, account status, authentication records, and display preferences. Accounts are created or approved by Verisec; there is no general consumer self-service registration.
Customer Content: investigative entities, notes, annotations, relationship assertions, files, and other information customers submit or create. This may include personal information about investigation subjects and other people mentioned in a matter.
Source records and enrichment: business and regulatory filings, associated documents and metadata, business contact details, names of officers or other parties, addresses, domains, public Internet infrastructure observations, and related associations. Depending on a source, filings may contain personal contact information, signatures, allegations, or other personal details supplied by the filer.
Technical and usage information: IP addresses, browser and device information, request times, authentication and security events, diagnostic records, and interactions needed to operate and protect the service. Account features also retain preferences, saved record sheets, and other workspace state.
Communications and business records: correspondence, support and privacy requests, contract and billing contacts, and records needed to administer the business relationship. Do not send passwords or complete payment card details through support or investigation notes.

Information comes from users and their organizations, public authorities and filing systems, public Internet sources, data and enrichment providers, and the operation of the service. Public availability does not mean every use of information is unrestricted. Source records and inferred associations may be incomplete, outdated, or incorrect.

3 How we use information

We use information to establish and administer accounts; authenticate users and enforce access permissions; retrieve, organize, correlate, and display source records; provide investigation and collaboration features; respond to requests; administer contracts and billing; maintain service reliability; diagnose problems; prevent misuse; enforce agreements; and meet legal obligations.

We use private Customer Content to provide the service, follow authorized sharing instructions, provide support, protect the service, and comply with law. We do not sell private Customer Content or use it to train general-purpose AI models without a separate express agreement. Any processing by a service provider to deliver a requested feature remains subject to the applicable customer instructions, agreements, and legal obligations; permission to provide a feature does not itself authorize general-purpose model training.

Pioneer is not offered for employment, tenant, credit, insurance, or other regulated eligibility screening. Customers are prohibited from using it for those purposes under the Terms. Information and associations available in Pioneer are investigative material, not findings of wrongdoing or a guarantee of accuracy.

4 When we disclose information

We disclose information as needed for the following purposes:

Customer access: authorized customers can access source information within their permitted scope. Private Customer Content is made available according to applicable account, team, and sharing permissions and customer instructions. A customer's own lawful exports or external disclosures are governed by its contract, obligations, and practices.
Service providers: providers supporting hosting, databases, file storage, email delivery, operations, and support process information needed for their functions. The service uses Fly.io for hosting and managed database infrastructure, Tigris for supported file storage, and Resend for supported transactional email delivery. Some collection or storage workflows may also run in Verisec-managed environments.
Enrichment and embedded features: using an enrichment feature can send the relevant address, domain, IP address, or other lookup input to its provider. Google geocoding, Places, maps, and Street View features may involve Google receiving lookup data. When an embedded map loads in your browser, Google may also receive your IP address, browser details, and other information under its own policies.
Legal and protective purposes: disclosures required by law or valid legal process, or lawfully necessary to protect rights, investigate misuse, address security concerns, or resolve disputes.
Business transactions: information may be disclosed to advisers or transferred in a merger, financing, acquisition, or sale of relevant business assets, subject to applicable confidentiality and privacy requirements.
Your instructions or permission: other disclosures you direct or separately authorize.

We do not sell private investigation files. Our business does provide approved customers with access to source records and derived information, some of which may concern individuals. Whether a particular disclosure is considered a sale or sharing of personal information under a privacy law depends on that law and the information involved. We address applicable requests through [email protected]; this policy does not characterize every source-record disclosure as exempt from privacy law.

5 Cookies and browser storage

Pioneer uses session cookies to maintain authentication, browser storage or cookies for functional preferences, and analytics technologies described in Section 6. For example, the application uses the PIONEER_SESSION cookie for sessions and a table-preferences cookie to remember table settings. An optional browser-recorder workflow can store the selected extension identifier locally. You may clear or restrict cookies and storage through your browser, but doing so can sign you out or prevent features from working.

Embedded third-party services may use their own cookies or similar technologies. Review their policies before using those features. Google's handling is described in its Privacy Policy.

6 Google Tag Manager and Google Analytics

We use Google Tag Manager to manage website tags and Google Analytics to measure use of Pioneer and improve the service. Google receives technical and usage information through these tools. Depending on the features and settings in use, this can include cookie identifiers, browser and device information, pages visited, referring pages, interaction events, and approximate location. Google Analytics uses cookies and similar technologies to distinguish visits and measure activity.

Google's processing is described in its Privacy Policy and Google Analytics data practices. Analytics information is subject to the retention criteria in Section 7 and the retention settings applied to our analytics service.

Our analytics use is for service measurement and improvement. Private investigation content, personal details from source records, credentials, and sensitive search terms are not permitted in analytics event data, page titles, or URLs sent to analytics providers.

You can manage cookies through your browser and use Google's Analytics opt-out browser add-on on supported browsers. The add-on limits Google Analytics measurement; it does not block all tags, other service providers, or operational logging. Contact [email protected] to exercise applicable privacy rights or ask about analytics choices. We obtain consent and honor opt-out rights where required by applicable law.

The application does not implement a separate response to browser Do Not Track signals. This does not limit any obligation to honor legally recognized opt-out preference signals or other mandatory privacy choices.

7 Retention

We retain information for the periods needed to provide the service, administer accounts and contracts, maintain useful source provenance, protect security, resolve disputes, and meet legal obligations. Retention depends on the type of information, the relevant contract, the purpose of processing, source restrictions, and legal requirements. Source records, security logs, customer notes, and billing records may have different retention periods.

Closing an account does not automatically remove underlying public-source records about a person or organization. Customer Content retrieval and deletion are also subject to the customer agreement and the Terms. Information may remain in backups until those backups are replaced, or be retained for a legal hold or another lawful requirement. Retained information remains subject to applicable protections. Contact [email protected] with a specific retention or deletion question.

8 Security

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access and permissions appropriate to the service. No system or method of transmission is completely secure. Users must protect credentials, manage authorized access, and report suspected compromise to [email protected]. We will provide incident notifications when required by applicable law or an applicable agreement.

9 United States and Canadian processing

Verisec is based in California. Information may be processed or stored in the United States and other locations where our service providers operate, subject to applicable law and any agreed contractual restrictions. The service does not promise Canadian-only storage. Information transferred to another jurisdiction may be subject to that jurisdiction's laws and accessible to its courts or authorities through lawful processes.

Where required, we use appropriate contractual and organizational measures for service-provider processing. Transfer does not remove applicable privacy obligations. Canadian federal and provincial requirements may apply differently depending on the organization, activity, information, and location. Contact [email protected] for questions about processing arrangements relevant to your information.

10 Your choices and requests

Contact [email protected] to ask about our practices or request access, correction, deletion, or another privacy right available under applicable law. Depending on the law and circumstances, you may also have rights to information about processing and disclosures, a copy of information, withdrawal of consent, objection or opt-out, or review of a denied request. These rights are subject to applicable requirements and exceptions, including protections for other people, privileged information, and lawful investigations.

You do not need a Pioneer account to contact us about information concerning you. Identify the record or account and explain your request, but do not send unnecessary identity documents or sensitive details. We may request proportionate information to verify identity and authority. Where permitted, an authorized agent may act for you with appropriate evidence of authorization. We will respond within applicable legal time limits and explain a denial or limitation where required. We will not unlawfully discriminate against you for exercising privacy rights.

For information held on behalf of a customer, we may refer your request to that organization or coordinate a response with it. For an inaccurate source filing, correcting the originating record may also be necessary. Neither situation excuses any independent duty Verisec has to respond. We cannot guarantee deletion of a record at its originating authority or copies independently held by a customer.

You may raise a concern with the privacy regulator or other authority responsible for your jurisdiction. Contacting us first does not limit that right. Account and operational notices may be necessary for service delivery and cannot always be disabled while an account remains active.

11 Age restrictions

Pioneer accounts are for approved professionals who are at least 18 and have reached the legal age of majority where they reside. We do not offer accounts to children or knowingly solicit account information from children. Source documents or customer submissions may incidentally refer to a minor; report a concern about such information to [email protected] so we can evaluate it under applicable law.

12 Changes and contact

When we materially change this policy, we will identify its effective date and provide notice appropriate to the change and applicable law. We will obtain consent where required. A policy update does not itself authorize a use of previously collected information that requires a separate legal basis or consent.

Verisec AI LLC, a California limited liability company, Orange County, California.

Privacy, security, and abuse reports: [email protected]
Account support and data correction assistance: [email protected]
Legal notices: [email protected]
Billing: [email protected]