Privacy Policy

1. Scope and roles

This Policy applies when Becchio Group decides why and how personal data is processed through its website, sales process, business operations, and services. In that role, Becchio Group is the data controller or business.

When a Client directs Becchio Group to process personal data in Vero or another service on the Client's behalf, the Client generally controls that data and Becchio Group acts as its service provider or processor. The applicable engagement agreement or data processing terms control that relationship.

This Policy does not govern a third-party service that has its own privacy notice.

2. Data we collect

Information you provide

• Contact and inquiry data: name, business email, company or venue, role, selected need, and the message you submit.
• Account data: name, email, organization, role, authentication identifiers, account status, and assigned permissions.
• Client and project data: files, operating information, configurations, communications, Guest or customer information, and other content a Client or authorized user provides.
• Support and correspondence: messages, requests, feedback, and records needed to resolve an issue.

Information collected automatically

Our systems may record IP address, browser and device information, request path, referring page, timestamps, session and authentication events, feature interactions, error reports, and security or audit events. We use only the cookies or similar technologies needed to operate, secure, remember, and measure the services described here.

Derived information

Vero may produce classifications, recommendations, scores, summaries, forecasts, audit entries, and other outputs from authorized inputs. Derived information can be personal data if it relates to an identifiable person.

We do not intentionally collect personal data from children under 16, and our services are not directed to them.

3. Why we use data

We use personal data only when reasonably necessary to:

• respond to inquiries, evaluate opportunities, and communicate about services;
• create, authenticate, administer, and support accounts;
• deliver Becchio Group services and authorized Vero functionality;
• configure Client workspaces, generate requested outputs, and maintain business records;
• protect accounts, Client data, our services, and our legal rights;
• monitor reliability, diagnose errors, prevent misuse, and improve the services;
• comply with law, contracts, legal process, and tax or recordkeeping duties; and
• establish, exercise, or defend legal claims.

Depending on the context and applicable law, our legal basis may be performance of a contract, steps requested before entering a contract, legitimate business interests, compliance with law, or consent where consent is required. We do not use a privacy-policy checkbox as consent for unrelated marketing or processing.

4. How we disclose data

We may disclose relevant data to:

• the Client and authorized account users within the workspace, engagement, role, and permissions assigned to them;
• infrastructure, authentication, communications, analytics, storage, and AI service providers that help us operate the services under contractual and access restrictions;
• professional advisers such as attorneys, accountants, insurers, and auditors who have confidentiality duties;
• authorities or other parties when required by law or reasonably necessary to protect people, systems, rights, or evidence; and
• a successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and notice obligations.

We do not sell personal data for money. We do not use personal data for cross-context behavioral advertising. If either practice changes, we will update this Policy and provide any legally required choice before the change applies.

5. Client data and AI processing

Clients retain their rights in data and materials they provide. Becchio Group uses Client data to perform the engagement, operate authorized features, secure the service, comply with law, and as otherwise documented in the applicable agreement.

Authorized Vero features may send limited content to an AI or other subprocesser to produce the requested result. We select and configure providers based on the feature, sensitivity, availability, and applicable contractual protections. We do not authorize a provider to use Client confidential information to market to individuals or to build a competing attraction-intelligence service.

Clients and users must not upload personal data they lack authority to provide, or regulated data that Becchio Group has not agreed in writing to process.

6. Retention and deletion

We keep personal data only for as long as reasonably needed for the purpose collected, an active account or engagement, security and audit needs, legal obligations, dispute resolution, and enforcement. Retention varies by data type, Client instruction, contract, and backup cycle.

When data is no longer required, we delete, anonymize, or securely isolate it, subject to lawful holds, fraud prevention, backup rotation, and records we must retain. De-identified information may be kept when it cannot reasonably be linked back to a person.

7. Privacy choices and rights

Depending on where you live and which law applies, you may request access, correction, deletion, or a portable copy of personal data; opt out of certain sales, sharing, targeted advertising, or profiling; restrict or object to processing; withdraw consent; and appeal a denied privacy request.

Send a request to privacy@becchiogroup.com. Include enough information for us to identify the relevant account or interaction. We may verify your identity and authority before acting. If we deny a request, reply with the word “Appeal” and the reason you believe the decision should be reconsidered.

We will not discriminate against you for exercising an applicable privacy right. Some requests may be limited by law, another person's rights, Client instructions, security, or a need to retain evidence. If your data is controlled by a Client, we may direct your request to that Client.

8. Security and incidents

We use administrative, technical, and physical safeguards designed for the nature of the data and service. These include access controls, authentication, transport protection, logging, vendor review, data minimization, and procedures for investigating security events. No service can guarantee absolute security.

If an incident triggers a legal notification duty, Becchio Group will notify affected parties and authorities as required. Account users must promptly report suspected unauthorized access to security@becchiogroup.com.

9. Other information and contact

Our services are operated from the United States. If data is transferred across borders, we use measures appropriate to the data, service, and applicable law.

We may update this Policy as our services or legal obligations change. Material changes will be identified by a new effective date and may be presented to account users when they sign in.