Privacy Policy
This is a draft pending review. It may change before it is final. Questions: privacy@verilays.com.
1. Who we are
Verilays, operated by Yinon Megidesh and Noam Carter, is the controller of the data this policy covers. Contact: privacy@verilays.com.
2. What this policy covers
Your Verilays account. The data your agent sends through Verilays belongs to your company, and the Data Processing Agreement in our Terms of Service covers it.
3. What we collect
- Your email address.
- Your sign-in data: your password if you sign up with email, or the account details GitHub or Google send us if you sign in with them.
- A record of each time you accept these documents: which version, when, and from which IP address.
4. Why we collect it
To create your account, sign you in, and keep evidence that your company accepted our terms. Giving us this data is voluntary, and no law requires it, but without an email address we cannot open an account for you.
5. Who receives it
Supabase, which runs our database and sign-in, and Vercel, which hosts the dashboard. Both are on our subprocessor list. GitHub or Google take part only if you choose to sign in with them.
6. Cookies
We set the sign-in cookies that keep you signed in, and cookies that remember choices you make on screen: your theme, and the application and agent you last selected. We use no analytics, tracking or advertising cookies, so there is no cookie banner.
7. How long we keep it
Until your account is deleted.
8. Your rights
You can ask to see the data we hold about you, to correct it, or to delete your account. Email privacy@verilays.com. We delete an account within 30 days of the request, backups included.
9. EU representative
Not yet appointed.
10. Changes
We email account owners at least 30 days before a material change to this policy takes effect, and ask you to accept the new version at your next sign-in.