Privacy Policy
Effective: January 1, 2026
Last updated: August 8, 2026
This Privacy Policy explains how Vortoc handles personal information in its business-to-business platform, website, account relationships, and data-intelligence products. "Personal information" includes information linked or reasonably linkable to a person and analogous terms under applicable law.
1. Scope
This Policy covers website visitors, prospects, Customers, users, vendors, and job applicants; persons appearing in public-record-derived or other lawfully sourced datasets ("Data Subjects"); and communications, support, billing, security, and privacy-request records.
It does not govern a Customer's independent handling of Lead Data. Customers are separate businesses responsible for their own notices and legal basis. Links and third-party services have their own policies.
2. Categories collected
Depending on the relationship, Vortoc may process identifiers and contact data, such as name, business details, username, postal address, email, phone number, IP address, and device identifiers; account, transaction, subscription, payment-status, and support information; internet, device, cookie, log, authentication, and approximate-location data; professional, license, organization, role, and compliance-verification information; public-record and event data, such as case or instrument number, filing type, status and date, court or agency, parties named in a record, property or estate-related information, and record location; data from licensed or lawful commercial sources, which may include contact, household, property, demographic, or identity-resolution attributes; inferences, match indicators, confidence scores, category labels, and workflow status; communications preferences, consent evidence when applicable, complaints, opt-outs, suppression entries, and privacy-request records; and other information a person or Customer provides.
Vortoc does not intentionally collect Social Security numbers, full financial-account credentials, medical records, precise geolocation, or children's data for ordinary Lead products. If a source unexpectedly includes high-risk data, Vortoc will apply minimization, restriction, or deletion controls as appropriate.
3. Sources
Sources may include the individual; Customers and authorized users; public court, recorder, assessor, tax, probate, property, corporate, licensing, and other government records; lawful open-data portals; licensed data providers; service providers; business partners; websites and devices; and information derived through matching, standardization, and analysis.
"Public record" describes source provenance, not a blanket legal exemption. Vortoc evaluates additional restrictions applicable to collection, use, disclosure, and retention.
4. Purposes
Vortoc may use personal information to provide and improve the Services; authenticate and administer accounts; compile and deliver lawful data products; match, deduplicate, validate, score, and update data; process orders; support users; prevent fraud and abuse; secure systems; investigate complaints; maintain suppression and audit records; comply with law and source terms; enforce agreements; perform analytics; communicate about the Services; and establish, exercise, or defend legal claims.
Vortoc does not use Lead Data to determine a person's eligibility for credit, insurance, employment, housing, tenancy, government benefits, or another FCRA-regulated purpose.
5. Disclosures and transfers
Vortoc may disclose personal information to Customers receiving authorized Lead products; cloud, security, analytics, payment, support, communications, data, and professional-service providers; corporate transaction participants; affiliates; and authorities or other parties when reasonably necessary for legal compliance, safety, fraud prevention, or rights protection.
Some transfers of Lead Data for monetary or other valuable consideration may be treated as a "sale," "sharing," targeted advertising, or similar regulated activity under certain state laws even when Vortoc does not use those labels colloquially. Where applicable, Vortoc will provide required notices and opt-out mechanisms and honor recognized opt-out preference signals.
6. Cookies and online analytics
Vortoc may use essential, functional, analytics, and advertising technologies. Where required, nonessential technologies will not activate before consent, and the consent tool lets a visitor change that choice at any time. Vortoc processes legally recognized browser-based opt-out signals, such as Global Privacy Control, where applicable. Categories, purposes, and lifetimes are described in the Cookie Notice.
7. Retention
Vortoc retains information only as reasonably necessary for the disclosed purposes, contractual and source requirements, security, suppression, dispute, tax, and legal obligations. Retention depends on data type, sensitivity, freshness, source update cycle, account status, limitation periods, and deletion rights. Suppression records may be retained in minimized form to prevent reintroduction. See the Data Security & Retention Policy.
8. Security
Vortoc uses administrative, technical, and physical safeguards designed for the nature and risk of the information. No system is completely secure. Security measures are described at a high level in the Data Security & Retention Policy; sensitive implementation details are not published.
9. U.S. state privacy rights
Depending on residence and applicable law, a person may have rights to know or access, correct, delete, obtain a portable copy, opt out of sale, sharing, targeted advertising, or certain profiling, limit certain sensitive-data uses, withdraw consent, appeal a denial, and receive equal service. Exceptions may apply, including for certain public information, legal obligations, security, claims, and data not reasonably linkable to a verified requester.
Submit a request by emailing [email protected]. Describe the right requested and provide only information reasonably necessary to locate records. Vortoc will verify requests proportionately, respond within applicable time limits, explain denials, and provide an appeal method where required. Authorized agents may submit requests subject to legally permitted verification. Vortoc will not discriminate for exercising a right.
For opt-out requests that applicable law does not require Vortoc to verify, Vortoc will use a streamlined matching process and may retain a minimized suppression token to honor the choice. Requests directed only to a Customer must be sent to that Customer, though Vortoc may assist contractually.
10. California notice
If the CCPA applies, the categories above describe Vortoc's collection, sources, business and commercial purposes, and disclosure categories for the preceding 12 months. California residents may exercise rights to know or access, delete, correct, opt out of sale or sharing, limit qualifying sensitive-personal-information uses, use an authorized agent, and receive nondiscriminatory treatment, subject to law. To exercise the Do Not Sell or Share My Personal Information right, email [email protected] with "Do Not Sell or Share" in the subject line, or use the Your Privacy Choices page. Vortoc recognizes applicable opt-out preference signals. Vortoc does not knowingly sell or share personal information of persons under 16 without required affirmative authorization.
Where Vortoc meets a state data-broker definition, it will maintain the required registrations and process centralized deletion or opt-out mechanisms by their applicable dates.
11. Children
The Services are for businesses and not directed to children under 13. Vortoc does not knowingly collect personal information directly online from children under 13. Lead products are not intended to identify minors. Report suspected minor data to [email protected] for review and suppression.
12. Changes and contact
Vortoc may update this Policy to reflect operations or law. Material changes will receive additional notice where required. Contact: Praiadorego LLC, a Florida limited liability company, [email protected].