This policy covers two different groups: you as a visitor or customer of getvarro.io (sections 02–04), and professionals who may appear in our research reports (sections 05–08). California rights are in section 09.
This site runs no analytics scripts, no advertising pixels, and no marketing cookies.
To build and send your sample, deliver and support your order, honor the replacement policy, and answer your emails. We keep order records for tax and accounting. We don't sell, rent, or share our visitors' or customers' information with anyone except the service providers needed to operate (hosting, email, payment processing).
We keep customer emails and order records as long as needed to support your order, honor the replacement policy, and meet tax obligations. We take reasonable measures to protect what we hold, but no internet transmission or storage can be guaranteed 100% secure.
Our research reports include business contact details: a person's name, job title, company, company website, and business email address. We research these from publicly available sources (company websites, professional profiles, press coverage, business directories) and licensed business data tools, and we check each business email before delivery.
What we don't collect: personal email addresses, home addresses, phone numbers, consumer data, or any sensitive categories of information. Our research covers US-based businesses and business roles only.
Varro prepares custom B2B market research reports for one client at a time. Reports may include publicly available business contact details, such as a work name, role, company, and work email. We exclude California-based business contacts from Varro reports. Some privacy laws may treat providing business contact details in a paid custom report as a sale or disclosure of personal information, and we say so plainly. Each report is licensed to one customer for its own business use; resale, republication, and sharing are prohibited by our Terms. We honor removal requests and maintain a suppression/do-not-include list so removed contacts are excluded from future research, and we do not publish reports publicly.
Ask, and we'll tell you: email us and we'll identify the type of public source your information was researched from.
This site and our research are strictly business-to-business and not directed at anyone under 18.
If you are a California resident, you have rights under the CCPA/CPRA, whether you're a site visitor, a customer, or a professional in our research: the right to know what personal information we hold about you, to have it deleted, to correct it, and to opt out of its sale or sharing. Business-contact information is covered by these rights.
As of June 2026, our research reports cover contacts at U.S. businesses and exclude contacts we identify as California-based.
To exercise any of them, email hello@getvarro.io. One channel handles all requests, including "Do Not Sell or Share My Personal Information" requests. We respond within 45 days, we don't discriminate against anyone for exercising their rights, and an authorized agent may submit a request on your behalf with proof of authorization.
If your state gives you similar rights (Texas, Oregon, Minnesota, Virginia, Colorado, Connecticut, and others), use the same email and we'll honor your request consistent with the law that applies to you.
Varro is a US service: our research covers US business contacts and the service is directed at US customers. It is not directed at residents of the EU, UK, or other regions, and we don't claim compliance with laws that don't apply to it.
We may update this policy; the date above shows the current version. Questions or requests: hello@getvarro.io.