Privacy Policy

This Privacy Policy explains how VERANeural Inc. (“VERANeural”, “we”, “us”) collects, uses, shares and protects personal information when you use VERA, our mobile and web applications, our business products, and veraneural.com (together, the “Services”). People share personal things with VERA. We take that trust seriously, and we have written this policy to be as clear as we can.

1. Summary

• We collect what we need to provide VERA, keep it safe and improve the Services, and no more.
• We do not sell your personal information and we do not share it for targeted advertising.
• We do not use your individual conversations to train foundation AI models. We do not use your conversations to train or improve VERA's own models unless you have opted in.
• You can access, correct, export or delete your data at any time.
• VERA is not a medical service. If you are in crisis, contact emergency services (988 in the US, 112 in Europe).

2. Who we are

VERANeural Inc., 225 1st Ave N, Suite 2006, Saint Petersburg, FL 33701, United States, is responsible for your personal information under this policy (the “controller”). When we provide VERA to a business customer, we process that customer's data on its behalf and under its instructions (see section 9).

Contact: privacy@veraneural.com

3. Information we collect

Information you give us

• Account information: name, email address, password (stored in hashed form) and preferences.
• Conversations and content: the messages, voice input, files and other content you share with VERA, and VERA's responses.
• Memory: details VERA keeps so it can provide continuity, such as goals, preferences and context you have shared. You can view and delete them.
• Contact and enquiries: information you send us through forms, email or support, including investor and business enquiries.
• Payments: if you buy a subscription, payment is processed by Apple, Google or our payment provider. We receive confirmation of the purchase, not your full card details.

Sensitive information

Conversations with VERA may include information about your emotional state, health, relationships or other sensitive matters. We treat everything you share with VERA as sensitive. We process it only to provide VERA to you, keep you safe and meet our legal obligations, and where the law requires it, only with your explicit consent, which you give when you start using VERA and can withdraw at any time by deleting your conversations or your account.

Information collected automatically

• Device and usage data: device type, operating system, app version, language, time zone, crash reports, and how features are used.
• Log data: IP address, access times and error logs, used for security and reliability.
• Cookies: our website uses only cookies and similar technologies needed for it to work and to understand overall site performance. We do not use advertising cookies.

Information from connected services

If you choose to connect a service such as a calendar or email account, VERA accesses only the data needed for the feature you enabled, only with your permission, and you can disconnect at any time.

4. How we use information

• To provide VERA: understand your messages, respond, remember relevant context and carry out actions you approve.
• To keep people safe: detect possible crisis situations and share crisis and emergency resources.
• To secure the Services: prevent fraud, abuse and unauthorised access.
• To support you and communicate about your account, including service and safety notices.
• To improve the Services using aggregated or de-identified usage information, and conversation content only where you have opted in.
• To meet legal obligations and enforce our Terms of Service.

Legal bases (EEA, UK and similar laws): performance of our contract with you; your consent (including explicit consent for sensitive information); our legitimate interests in securing and improving the Services, balanced against your rights; protection of vital interests in an emergency; and compliance with legal obligations.

5. AI processing and model training

VERA uses artificial intelligence, including language models operated for us by carefully selected providers on enterprise cloud infrastructure. These providers process your content only to generate VERA's responses, under contracts that prohibit them from using it to train their own models.

We do not use your individual conversations to train foundation models. We do not use your conversations to train or fine-tune VERA's own models unless you have expressly opted in, and you can withdraw that choice at any time in your settings or by contacting us. Training examples are prepared and reviewed by our team, including our psychologist, and are not taken from user conversations without consent.

VERA's responses are generated automatically and can be wrong. VERA does not make decisions that have legal or similarly significant effects on you.

6. How we share information

We share personal information only as follows:

• Service providers who host, secure and operate the Services for us, such as cloud hosting (Microsoft Azure), databases and authentication, AI model providers, email delivery, analytics, customer support, and app stores. They may use the information only to provide services to us.
• Business customers: if your organisation provides VERA to you, it controls the data in its workspace.
• Safety and legal reasons: where we believe in good faith that disclosure is necessary to protect someone's life or safety, to comply with law or valid legal process, or to protect the rights and security of VERANeural, our users or others.
• Business transfers: if VERANeural is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction, subject to this policy's protections. We will tell you before your information becomes subject to a different privacy policy.
• With your consent or at your direction.

7. How long we keep information

We keep your account information and conversations for as long as your account is active, so VERA can provide continuity. You can delete individual conversations or memories at any time. When you delete your account, we delete or de-identify your personal information within 30 days, except for limited information we must keep for legal, security or fraud-prevention reasons, and backup copies, which are overwritten within 90 days. Website enquiries are kept for up to 24 months.

8. Security

We protect information with encryption in transit and at rest, access controls and multi-factor authentication for our team, managed secrets, tenant isolation for business customers, and monitoring. Our team is bound by confidentiality obligations and receives security training. No system is perfectly secure; if a breach affects your personal information, we will notify you and the authorities as the law requires.

9. Business products

When an organisation uses VERA's business products, we process the organisation's data as its processor or service provider under our agreement with it. That organisation's privacy notice governs how it uses the data, and requests about that data should be directed to the organisation. Each organisation's data is kept separate from other customers' data.

10. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy in a portable format;
• correct inaccurate information;
• delete your information;
• restrict or object to certain processing, including processing based on legitimate interests;
• withdraw consent at any time, without affecting earlier processing;
• opt out of the sale or sharing of personal information or targeted advertising (we do neither);
• not be discriminated against for exercising your rights;
• appeal our decision on your request, and complain to your data-protection authority.

You can delete conversations, memories and your account in the app, or email privacy@veraneural.com. We will verify your identity and respond within the time the law requires (generally 30 days, or 45 days under some US state laws). You may use an authorised agent where the law allows.

Consumer health data: where US state laws on consumer health data apply (such as Washington's My Health My Data Act), we collect and share such data only as needed to provide the Services you request or with your consent, and you have the rights described above for it.

11. International transfers

VERANeural is based in the United States, and our team and providers operate in the United States and Europe. When we transfer personal information from the EEA, UK or Switzerland to countries without an adequacy decision, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

12. Children

The Services are for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy as VERA evolves. We will post the new version here with a new date and, for material changes, notify you in the app or by email before they take effect.

14. Contact us

VERANeural Inc., 225 1st Ave N, Suite 2006, Saint Petersburg, FL 33701, United States
Email: privacy@veraneural.com