California Privacy Notice

1. Categories of personal information collected

In the last 12 months VERA has collected the following categories, as they are defined in Civil Code § 1798.140. Every category is collected from you, from your use of the Service, or from a platform you chose to connect, and each is disclosed to service providers only as described in the Privacy Policy and the Subprocessor List.

2. Why it is collected

To provide and secure the Service, authenticate you, generate and execute the work you ask for, process payment, meter usage, prevent fraud and abuse, provide support, maintain an audit trail, comply with law, and understand aggregate product usage. These are the business purposes for which each category above is collected.

VERA does not use or disclose sensitive personal information for purposes beyond those permitted by § 1798.121, so the right to limit its use does not produce a different outcome here. Credentials are used to sign you in and to reach the platforms you connected, and for nothing else.

3. No sale, no sharing, no targeted advertising

VERA has not sold personal information and has not shared it for cross-context behavioral advertising in the preceding 12 months, and does not do so now. We run no advertising or retargeting technology on our site or in the product.

VERA does not knowingly collect or process personal information of consumers under 16, and therefore has no occasion to seek opt-in consent to sell or share it.

Because there is nothing to opt out of, VERA does not display a "Do Not Sell or Share My Personal Information" link. We honor Global Privacy Control signals as an opt-out request in any case, so that a change in our practices could never leave a prior signal unhonored.

4. Retention

VERA retains each category for as long as your account exists, and deletes it when you delete the account, except for the limited records described in the Data Retention Policy that are kept for legal, tax, and security reasons. We do not retain personal information for longer than is reasonably necessary for the purpose it was collected for.

5. Your California rights

• Right to know. Request the categories and specific pieces of personal information we have collected, the sources, the business purpose, and the categories of third parties we disclose to. Covers the preceding 12 months, and beyond that on request unless it would be impossible or involve disproportionate effort.
• Right to delete. Request deletion of personal information we collected from you, subject to the statutory exceptions (completing a transaction, security and fraud prevention, legal compliance, and internal uses reasonably aligned with your expectations).
• Right to correct. Request correction of inaccurate personal information.
• Right to portability. Receive a copy in a readily usable format. The Settings export produces JSON.
• Right to limit sensitive information. Available where sensitive personal information is used beyond permitted purposes. VERA does not use it that way.
• Right to opt out of sale or sharing. Available where a business sells or shares. VERA does neither.
• Right to non-discrimination. We will not deny service, charge a different price, or provide a lower quality of service because you exercised a right. VERA operates no financial incentive programs.

6. How to exercise a right

Signed-in account holders can export and delete data directly in Settings. Otherwise email support@myvera.io with the subject line "California privacy request" and tell us which right you are exercising and the email address on the account.

We verify requests against the email address on the account, and for deletion or a full export we may ask you to confirm from a signed-in session. We do not ask for identity documents. An authorized agent may submit on your behalf with written permission signed by you, and we may contact you to confirm.

We acknowledge requests within 10 business days and respond within 45 calendar days, extendable once by a further 45 days where reasonably necessary, in which case we will tell you.

7. Appeals

If we decline a request, we will tell you why. To appeal, reply to our decision with the subject line "Privacy appeal" and it will be reviewed by someone who was not involved in the original decision. We respond to appeals within 45 days.

California residents may also contact the California Privacy Protection Agency or the Attorney General. Residents of other US states with comprehensive privacy laws, including Colorado, Connecticut, Virginia, Utah, Texas, and Oregon, may use the same request and appeal process; we apply it uniformly rather than maintaining a separate procedure per state.