Veritas DataPrivacy Policy
1. Who is responsible
Veritas Partners LLC, doing business as Veritas Data, Jackson, Wyoming, is the data controller for information collected through veritasdata.dev and api.veritasdata.dev. Contact: hello@veritasdata.dev.
2. What we collect
- Account data. You sign in with GitHub or Google; we never see or store a password. The provider sends us your name, email address and profile picture; we store your verified email and name, and the provider's account identifier, to issue your API key, confirm it is you, and send service notices. When you buy a plan: additionally the plan you chose and the Stripe customer and subscription identifiers Stripe assigns, used for receipts and to manage your subscription.
- Payment data. Handled entirely by Stripe, Inc. We never receive or store card numbers. Stripe's privacy policy governs that data.
- API usage. For each API key: request counts per day, the endpoints used, and the time of last use, to enforce plan limits and detect abuse. We do not log the content of your queries beyond the ticker symbols requested.
- Server logs. Standard technical logs (timestamps, IP address, paths, status codes, user agent) kept for up to 30 days for security and debugging. IP addresses appear only in these logs; we do not build profiles from them.
- Email you send us. If you write to hello@veritasdata.dev we keep the correspondence to answer you.
3. What we do not collect
We set one cookie, and only when you sign in: a session cookie that keeps you signed in (strictly necessary, deleted when you sign out or after 30 days), plus a short-lived cookie during sign-in that protects it from forgery. We use no analytics scripts, advertising pixels, or third-party trackers. There is therefore no cookie banner to show. If we ever add analytics, we will use a cookieless, privacy-preserving tool and update this page first. We do not buy or enrich data about you from other sources.
4. How we use data
To provide the Service, deliver and secure API keys, bill you, enforce plan limits, prevent abuse, respond to support requests, meet legal obligations, and send service notices (for example, changes to terms or outages). We do not send marketing email unless you opt in, and every such email will include an unsubscribe link.
5. Who we share it with
Only service providers that process data on our instructions: Stripe (payments and billing portal), GitHub and Google (sign-in), Resend (transactional email), Railway (application hosting, US), Supabase (database hosting, US), and Cloudflare (DNS, email routing, and backup storage). We may disclose data if required by law or to protect our rights. We do not sell personal data.
6. Retention
Account and usage data are kept while your key is active and for 12 months after it is last used or cancelled, then deleted or anonymized, except records we must keep for tax and accounting. Server logs are deleted after 30 days.
7. Your rights
You may request a copy of the personal data we hold about you, correction of inaccurate data, or deletion of your data (which will end your access to the Service). Email hello@veritasdata.dev from the address on your account; we respond within 30 days. Residents of the EEA, UK, and California have additional rights under their local laws, which we honour.
8. Security
API keys are stored as one-way hashes; the full key is shown once at creation and cannot be recovered by us. Traffic is encrypted in transit (TLS). Access to production systems is limited to the people who operate the Service.
9. International transfers
Our systems are in the United States. If you use the Service from elsewhere, your data is transferred to and processed in the US.
10. Children
The Service is for businesses and adults. We do not knowingly collect data from anyone under 18.
11. Changes
We will post changes here with a new date and notify active subscribers by email of any material change.