Privacy Policy

Viridian, by Emerald One LLC

Last updated: October 19, 2026

Viridian is a customer relationship management (CRM) service made by Emerald One LLC ("Emerald One", "we", "us"). This policy explains what information Viridian collects, how we use it, who we share it with, and the choices you have. It covers viridiancrm.com, app.viridiancrm.com, the Viridian, VChat and VMail apps, and any website or form built with Viridian.

Two kinds of information

Information about you as a Viridian user. When you or your organization signs up, we collect your name, email address, password (stored only as a secure hash), organization name, billing details, and the settings you choose.

Information your organization keeps in Viridian. Your organization decides what goes into its Viridian account: contacts, accounts, cases, emails, files, calendar events, chat messages, forms and their answers, payments, and anything else it records. For this information your organization is in charge, and we process it on your organization's behalf and under its instructions. If you are a contact of an organization that uses Viridian and have a question about your information, please ask that organization first; we will help it answer you.

What we collect

  • Account information: name, email, organization, role, sign-in details, two-step verification settings, profile picture.
  • Content you add: records, notes, files, emails, messages, meetings and other data you or your team enter, import or connect.
  • Email: when your organization connects a mailbox, Viridian reads, stores and sends email for it so your team can work from Viridian.
  • Connected services: when you connect another service (for example Google), we receive the information described in that section below.
  • Payments: payments are handled by Stripe. We receive whether a payment succeeded and limited card details (such as the last four digits); we never see or store full card numbers.
  • Device and usage information: IP address, browser and device type, pages visited, and errors, kept in server logs to run, secure and fix the service.
  • Phone notifications: if you turn on notifications, we store a push subscription for that device so we can send notices to it.
  • Cookies: we use cookies that are needed to keep you signed in, protect forms, and remember choices such as light or dark appearance. We do not use advertising cookies.

How we use information

We use information to:

  • provide, maintain and improve Viridian;
  • sign you in, keep your account secure, and prevent fraud and abuse;
  • send the emails, texts and notifications your organization asks Viridian to send;
  • answer support requests;
  • bill for the service;
  • meet legal obligations.

We do not sell personal information, and we do not use your organization's data for advertising.

AI features. Some Viridian features (such as the Viro assistant, email summaries and drafts) send the content needed for that request to an AI service provider to produce the answer. Those providers may not use it to train their models. Your organization's data is never used to train AI models.

Google user data

When you choose to connect a Google account, Viridian asks Google for permission to:

  • Google Drive: see, create and organize files and folders, so your team can browse Drive in Viridian and keep each record's files in its own Drive folder.
  • Google Calendar: read your calendars and create and update events, so meetings in Viridian and in your Google Calendar stay in step.
  • Google Contacts: read contact names and pictures, so people you email show their names and pictures in Viridian.
  • Your email address and basic profile: to know which Google account is connected and, if you choose, to sign you in with Google.

We use this data only to provide those features to you and your organization inside Viridian. We do not sell it, use it for advertising, or let people read it except: with your permission; when needed for security or to follow the law; or when it is part of a feature you use (for example, teammates seeing a shared Drive folder). We do not use Google user data to develop, improve or train AI or machine learning models.

Viridian's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google at any time in Viridian (Setup > Google, or Your profile > Google), or from your Google account's security settings. When you disconnect, we delete the access we were given.

Who we share information with

We share information only with service providers that help us run Viridian, under contracts that limit what they may do with it:

  • hosting and storage (Hostinger);
  • network security and content delivery (Cloudflare);
  • payments (Stripe);
  • text messaging providers, when your organization sends texts;
  • AI service providers, for the AI features above;
  • Google, when you connect a Google account.

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of our business (and we will tell you first).

How long we keep information

We keep your organization's data while its account is open. When an organization closes its account, we delete its data within 90 days, except backups, which roll off on their normal schedule, and anything we must keep by law (such as billing records).

Security

We protect information with encryption in transit (HTTPS), encrypted storage of passwords and connection keys, access controls, two-step verification, and regular backups. No system is perfectly secure, but we work to protect your information and will tell affected organizations promptly about any breach that puts their data at risk.

Your choices and rights

You can see and change your profile and preferences in Viridian, turn notifications on or off, and disconnect connected services. Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to how it is used. To make a request, write to privacy@viridiancrm.com. If your information is held by an organization that uses Viridian, we will pass your request to that organization.

Children

Viridian is for organizations and is not meant for children under 13. We do not knowingly collect information from them.

Changes to this policy

If we change this policy, we will update the date at the top, and tell account owners about significant changes before they take effect.

Contact

Emerald One LLC

privacy@viridiancrm.com