Privacy Policy

At Verelia AI, we take your privacy seriously. This policy describes what data we collect, how we use it, how we protect it, and the rights you have over it. If anything here is unclear, email us at support@vereliaai.com.

1. Who we are

Verelia AI ("Verelia," "we," "us," or "our") provides a business intelligence platform that connects your social media, accounting, team management, and website analytics tools into a unified view. The service is available as a web application at app.vereliaai.com and as a mobile application on iOS and Android.

2. Information we collect

Account information

When you sign up, we collect your name, email address, business name, business type, and password (stored as a secure hash, never in plain text). Authentication is handled by Clerk, which may also store a session identifier in your browser or device.

Billing information

Payment processing is handled by Stripe. We do not store your credit card number. Stripe provides us with a customer ID, subscription status, and the last four digits of your card for display purposes only.

Data from connected services

When you connect third-party services to Verelia, we receive the data you authorize us to access. This may include:

• Social media platforms (Instagram, TikTok, Facebook, YouTube, X, LinkedIn): posts, comments, reach, impressions, likes, shares, follower counts, and engagement metrics.
• Accounting tools (QuickBooks, Xero, Wave, FreshBooks): revenue categories, expense categories, transaction totals, and profit margins. We do not receive bank account numbers or individual transaction line items unless explicitly authorized.
• Team and payroll tools (ADP, Gusto, Homebase, Square Team): employee names, hours worked, payroll totals, and overtime. We do not receive Social Security numbers or bank routing information.
• Website analytics: page views, session counts, and conversion events from the tracking snippet you install on your site.

You can disconnect any service at any time from the Connect screen, which revokes our access going forward.

Usage data

We log how you use the app: which screens you open, which features you use, when you log in, and basic device information (device type, operating system, app version). This helps us improve the product and diagnose issues.

AI chat history

When you use the Ask AI feature, we store your questions and our responses so you can reference them later. We use these in aggregate and anonymized form to improve the AI. We do not sell or share your individual questions.

3. How we use your information

• To provide, maintain, and improve the Verelia AI service.
• To calculate your Business Pulse score and generate personalized insights.
• To process payments, send billing receipts, and manage your subscription.
• To send transactional emails (account verification, password reset, billing notifications).
• To provide customer support and respond to your inquiries.
• To detect, prevent, and address fraud, security issues, and technical problems.
• To comply with legal obligations.

We will send you product update emails only if you opt in, and you can unsubscribe at any time using the link in any email we send.

4. How we share information

We do not sell your data. We do not share your data with advertisers. We do not use your business data to train AI models that benefit other customers.

We share information only in these limited cases:

• Service providers: trusted vendors who help us operate the service — Clerk (authentication), Stripe (payments), Railway (database hosting), Vercel (web app hosting), Netlify (website hosting), Anthropic (AI processing), and email delivery providers. Each of these is bound by contract to handle your data confidentially.
• Legal requirements: when required by law, court order, or to protect the rights, property, or safety of Verelia, our users, or the public.
• Business transfers: if Verelia is acquired or merged, your data may transfer to the acquiring entity, subject to this policy or an equivalent replacement.

5. How we protect your information

We use industry-standard security practices: encryption in transit (TLS/HTTPS), encryption at rest for sensitive data, access controls limiting who on our team can see your data, and regular security reviews. Payment data is handled by Stripe, which is PCI DSS Level 1 certified.

No system is perfectly secure. If we ever discover a data breach that affects you, we will notify you within 72 hours of discovery.

6. How long we keep your information

We keep your account data for as long as your account is active. If you cancel your subscription, we keep your data for 90 days in case you reactivate, then delete it permanently. You can request immediate deletion at any time by emailing support@vereliaai.com.

We keep billing records for 7 years to comply with tax and accounting requirements.

7. Your rights

You have the right to:

• Access the information we have about you.
• Correct inaccurate information.
• Delete your account and data.
• Export your data in a portable format.
• Opt out of marketing emails.
• Revoke third-party connections at any time.

To exercise any of these rights, email support@vereliaai.com from the email address associated with your account. We respond within 30 days.

If you are a California resident, you have additional rights under the CCPA. If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR. Email us for details or to exercise those rights.

8. Children's privacy

Verelia AI is not directed at children under 16. We do not knowingly collect information from anyone under 16. If you believe a child has provided us with personal information, please email us and we will delete it.

9. International users

Verelia AI is hosted in the United States. If you use the service from outside the United States, your data will be transferred to, stored in, and processed in the United States. By using the service, you consent to this transfer.

10. Changes to this policy

We may update this policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date at the top. Continued use of the service after the update constitutes acceptance of the new policy.