Privacy Policy for Verity

The information we collect is used for the following purposes:

• Login Information: To provide and secure your access to the App.
• Query Timestamps:
  • To monitor the overall usage of the App’s resources.
  • To identify patterns that may indicate resource abuse.
  • To help ensure the stability, availability, and fair use of the service for all users.
• Content You Share for Analysis:
  • The content you share (text, content from URLs, audio from public videos) is sent to and processed by third-party services (detailed below) to generate the factual analysis, contextual insights, and (if applicable) text-to-speech output.
  • Your identity (e.g., email used for login) is completely hidden from these upstream service providers; queries are made anonymously from our backend where feasible with the service.

We do not use your query timestamps to track your specific interests or for purposes like advertising. The primary use of timestamps is for operational monitoring and abuse prevention.

Our Stance on Selling Data: We do not sell your personal information to third parties.

To provide its analysis and features, Verity utilizes several third-party services. When you share content or make a query, relevant data is shared with these services for processing. We encourage you to review their respective privacy policies:

We select service providers that we believe maintain high standards of data privacy and security. However, the data shared with them is subject to their individual policies and practices. Verity endeavors to send the minimal data necessary to these services to fulfill your request.

We take the security of your information seriously and implement reasonable technical and administrative measures to protect the data we handle. Our approach includes:

• Secure Authentication: We utilize robust authentication mechanisms for user login, leveraging services such as AWS Cognito and AWS Amplify. This process involves secure methods like JSON Web Tokens (JWTs) to verify your identity and safeguard your account access.
• Protection of Sensitive Information: Internal system credentials and API keys are securely stored and managed using specialized services like AWS Secrets Manager to prevent unauthorized access.
• Access Controls: Access to our backend systems and the data we store is restricted internally through role-based access controls, limited to authorized personnel based on the principle of least privilege.
• Encryption in Transit: We use encryption (HTTPS/TLS) to protect data transmitted between your Verity app, our servers, and the third-party services Verity communicates with.
• Cloud Infrastructure Security: We build our services on Amazon Web Services (AWS), which employs comprehensive security measures to protect the underlying servers and network.

While we strive to use strong security measures to protect your information, no system can be 100% secure. We cannot guarantee the absolute security of your data. Users also play a role in protecting their information by using strong, unique passwords and safeguarding their login credentials.

We believe you should have control over your personal information. Depending on your location and applicable laws, you may have certain rights including:

• Right to Access: You have the right to request information about the personal data we hold about you, such as your login email address and a general description of the types of operational data we maintain.
• Right to Correction: If you believe that any personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to Deletion: You have the right to request the deletion of your Verity account and the personal information associated with it. Upon such a request, we will delete your personal information from our active systems, subject to any legal obligations or legitimate operational needs.
• Right to Object to Processing: In certain circumstances, you may have the right to object to our processing of your personal information. Since the processing of shared content and the collection of timestamps are core to the service, objecting would typically mean ceasing to use the service and requesting account deletion.
• Right to Withdraw Consent: You have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal. Withdrawing consent for core processing activities will mean you can no longer use the service.

To exercise any of these rights, please contact us at verityapp@protonmail.com. We may need to verify your identity before processing your request and will respond within a reasonable timeframe in accordance with applicable data protection laws.

Exercising some of these rights, such as the right to deletion, may result in your inability to use some or all of Verity’s services. We will not discriminate against you for exercising any of your privacy rights.

Verity’s primary data storage and processing occurs on servers located in the United States (specifically, AWS region us-east-1).

The third-party services we utilize may operate globally, and the data shared with them may be transferred to, stored, and processed in countries outside of your country of residence. These countries may have data protection laws that are different from the laws of your country.

By using the Verity app, you acknowledge and consent to the transfer of your personal information to our servers in the United States and to the third-party services which may involve processing in various countries globally. We encourage you to review their privacy policies linked above to understand their data handling practices.