Privacy Policy

Introduction

Vertex 180 LLC ("Vertex 180," "we," "us," or "our"), a Florida limited liability company with its principal place of business at 19340 Wind Dancer Street, Lutz, FL 33558, operates the vertex180.ai website and the Vertex 180 global mobility SaaS platform (collectively, the "Services"). This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information in connection with our Services.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you are using our Services on behalf of an organization, you represent that you have the authority to bind that organization to this Privacy Policy.

Scope

This Privacy Policy applies to:

• Visitors to the vertex180.ai website ("Website Visitors");
• Employer administrators and authorized users of the Vertex 180 platform ("Platform Users"); and
• Employees and individuals undergoing relocation services facilitated through the platform ("Relocating Employees").

If you are a Relocating Employee whose employer has engaged Vertex 180 to coordinate relocation services, your employer acts as the primary data controller for your personal data, and Vertex 180 processes that data as a data processor on your employer's behalf. Please contact your employer's HR or mobility team for information about their privacy practices.

1. Information We Collect

Information You Provide Directly

We collect personal information that you voluntarily provide when you:

• Submit a contact or demo request form on our Website;
• Register for or use the Vertex 180 platform;
• Communicate with us by email, phone, or other means;
• Subscribe to our newsletter or marketing communications; or
• Participate in surveys, events, or promotions.

This information may include your name, email address, phone number, job title, employer name, and any other information you choose to provide.

Platform Data

When Vertex 180 facilitates relocation services on behalf of an employer customer, we may process personal information about Relocating Employees, which may include:

• Name, home address, and destination address;
• Date of birth and employment details;
• Financial information, including bank routing and account details for relocation reimbursements processed through ReloWallet;
• Family and household member information;
• Immigration and visa documentation; and
• Other relocation-related data provided by the employer or the Relocating Employee.

We process this information under the direction of the employer customer and only to the extent necessary to deliver the Services pursuant to the applicable agreement between Vertex 180 and that employer.

Information Collected Automatically

When you visit our Website or use our platform, we and our service providers automatically collect certain technical information, including:

• IP address, browser type and version, and operating system;
• Device identifiers and referring URLs;
• Pages viewed, links clicked, and time and duration of visits; and
• Other interactions with our website content.

2. How We Use Your Information

We use personal information for the following purposes:

• To provide and operate the Services. Processing relocation workflows, coordinating with global mobility service providers, managing ReloWallet transactions, and maintaining platform functionality.
• To respond to inquiries. Responding to contact form submissions, demo requests, and customer support communications.
• To communicate with you. Sending transactional communications, service updates, and — where you have consented or we have a legitimate interest — marketing and promotional materials. You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email, or by emailing privacy@vertex180.ai.
• To improve the Services. Analyzing usage patterns, diagnosing technical issues, and developing new features and functionality.
• To comply with legal obligations. Fulfilling our obligations under applicable laws, including data protection and privacy regulations, and maintaining appropriate business records.
• To protect our rights and the Services. Detecting and preventing fraud, abuse, and security incidents; enforcing our agreements; and protecting the rights and safety of Vertex 180, our customers, and others.

We will not use your personal information for purposes materially different from those described in this Privacy Policy without providing notice and, where required by applicable law, obtaining your consent.

3. Legal Bases for Processing (GDPR / UK GDPR)

If you are located in the European Economic Area ("EEA") or the United Kingdom ("UK"), we process your personal information under one or more of the following legal bases:

• Contract performance. Processing necessary to perform a contract with you or your employer, including the delivery of relocation services.
• Legitimate interests. Processing for our legitimate business interests, such as improving the Services, preventing fraud, and conducting business-to-business marketing to platform contacts, where those interests are not overridden by your rights and freedoms.
• Legal obligation. Processing necessary to comply with applicable laws and regulations.
• Consent. Where you have given clear, freely withdrawable consent, such as for certain marketing communications or optional cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To the extent Vertex 180 acts as a data processor for an employer customer, such processing is governed by the data processing agreement between Vertex 180 and that employer, including any applicable Standard Contractual Clauses.

4. How We Share Your Information

We do not sell personal information. We may share personal information in the following circumstances:

Service Providers and Subprocessors

We engage third-party vendors and service providers who process personal information on our behalf to support the Services, including cloud infrastructure providers, analytics providers, communication tools, e-signature platforms, and relocation service suppliers. These parties are contractually required to process personal information only as directed by Vertex 180 and to maintain appropriate security measures.

Employer Customers

Relocating Employee data may be shared with, or made accessible to, the employer that engaged Vertex 180 to coordinate that employee's relocation, consistent with the instructions and authorizations provided by that employer.

Mobility Service Providers

To deliver relocation services, we may share relevant personal information with third-party relocation service suppliers (e.g., moving companies, real estate agents, destination service providers) as authorized by the employer and, where required, by the Relocating Employee.

Legal Requirements

We may disclose personal information if required by applicable law, regulation, court order, subpoena, or lawful request by a governmental authority. To the extent legally permitted, we will notify affected parties before making any such disclosure and cooperate in seeking appropriate protective measures.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, personal information may be transferred as part of that transaction. We will provide prior notice before personal information is transferred and becomes subject to a materially different privacy policy.

5. International Data Transfers

Vertex 180 is based in the United States. If you are located in the EEA, UK, or another jurisdiction with restrictions on international data transfers, your personal information may be transferred to and processed in the United States or other countries that may not provide an equivalent level of data protection to your home jurisdiction.

Where we transfer personal information from the EEA or UK, we rely on appropriate safeguards, which may include:

• Standard Contractual Clauses ("SCCs") approved by the European Commission;
• The UK International Data Transfer Addendum ("IDTA"); or
• Other legally recognized transfer mechanisms under applicable data protection law.

Copies of applicable transfer mechanisms are available upon written request to privacy@vertex180.ai.

6. Cookies and Tracking Technologies

What We Use

Vertex 180 uses cookies and similar tracking technologies on the vertex180.ai website. These may include:

• Essential cookies. Necessary for the website to function correctly, including session management and security. These cannot be disabled without impacting website functionality.
• Analytics cookies. Help us understand how visitors interact with the website, including which pages are visited, navigation paths, and time spent on each page (e.g., Google Analytics or similar tools).
• Functional cookies. Remember your preferences and settings to improve your browsing experience.
• Marketing / targeting cookies. May be used to deliver relevant advertising and track the performance of marketing campaigns.

Your Choices

You may control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies at any time. Opting out of analytics cookies will not affect your ability to use the website but may limit our ability to improve the experience.

Where required by law (e.g., for EEA or UK visitors), non-essential cookies will only be set with your prior consent, which you may withdraw at any time by adjusting your browser settings or using any cookie preference tool we provide.

7. Data Retention and Security

Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. Factors we consider include the nature and sensitivity of the data, the purposes for which it was collected, applicable legal and regulatory obligations, and our legitimate business needs.

When personal information is no longer required, we will securely delete or destroy it, or anonymize it so that it can no longer reasonably be associated with you. Upon written request, we will provide confirmation of deletion within a reasonable timeframe.

Security

We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction. These measures include encryption in transit and at rest, access controls, and regular security assessments consistent with industry standards.

No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect personal information using commercially reasonable means, we cannot guarantee absolute security.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within seventy-two (72) hours of becoming aware of the breach, consistent with applicable law (including GDPR Article 33). Where required, we will also notify affected individuals without undue delay.

8. Your Privacy Rights

EEA and UK Residents (GDPR / UK GDPR)

If you are located in the EEA or UK, you have the following rights with respect to your personal information:

• Right of access – obtain confirmation that we process your personal data and request a copy.
• Right to rectification – request correction of inaccurate or incomplete personal data.
• Right to erasure – request deletion of your personal data in certain circumstances ("right to be forgotten").
• Right to restriction – request that we restrict processing of your personal data in certain circumstances.
• Right to data portability – receive your personal data in a structured, commonly used, machine-readable format.
• Right to object – object to processing based on legitimate interests, including for direct marketing purposes.
• Right to withdraw consent – withdraw consent at any time without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with your local supervisory authority, such as the UK Information Commissioner's Office (ICO) or the relevant EEA data protection authority.

California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights:

• Right to know – know what personal information we collect, use, disclose, and sell.
• Right to delete – request deletion of personal information we have collected, subject to certain exceptions.
• Right to correct – request correction of inaccurate personal information.
• Right to opt out of sale or sharing – we do not sell or share personal information for cross-context behavioral advertising as defined under the CPRA.
• Right to non-discrimination – we will not discriminate against you for exercising your privacy rights.

How to Exercise Your Rights

To exercise any of the above rights, please submit a written request to privacy@vertex180.ai. We will respond within the timeframe required by applicable law (generally 30 days, with an extension available where necessary). We may need to verify your identity before processing your request.

9. Changes to This Policy and How to Contact Us

Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other operational reasons. We will post the updated policy on this page with a revised "Last Updated" date. For material changes, we will provide more prominent notice, such as an email notification or in-platform notification, prior to the change taking effect. We encourage you to review this Privacy Policy periodically.

Governing Law

This Privacy Policy and any disputes arising hereunder are governed by the laws of the State of Florida, without regard to its conflict of laws principles, except where superseded by applicable data protection law (including GDPR and UK GDPR).

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:

We will make reasonable efforts to respond promptly and in accordance with all applicable data protection laws and regulations.