Privacy Policy
This Privacy Policy explains how information is handled when you visit veriqa.app or use its public demo. Veriqa is an independent software project operated by its developer ("Veriqa", "we", "us").
This Policy applies only to the Website and the Veriqa-operated public demo. It does not govern separately licensed software, source code, customer deployments, or future commercial services.
Information we handle
When you browse the Website, our hosting and security infrastructure may process limited technical information, such as your IP address, browser or device type, requested pages, timestamps, and diagnostic or security events. The Website may also store your language, theme, and cookie preferences in first-party cookies or browser storage.
When you use the demo, we temporarily process limited information made available by the channel you choose and needed to complete the demonstration. Depending on the channel, this may include:
- a channel-specific identifier, which may itself be an email address or telephone number;
- a display name or username;
- a profile image or a technical reference used to retrieve it;
- language or locale information; and
- the status and outcome of the authentication or confirmation.
The exact information depends on the selected channel and its settings. Where a
channel identifier is shown in the demo, it is displayed only in masked form,
for example XXXX345.
We also process short-lived transaction, session, security, and OpenID Connect data needed to run and display the demo. The demo does not create a user account or persistent user profile. It does not ask you to provide a password, contact list, message history, or precise location.
If you contact us by email, we process your email address, message, and any information you choose to provide.
If you send an enquiry through the contact form, you first confirm it through a channel of your choice, the same way as in the demo. We then store the enquiry: its subject and text, the time it was sent, the channel type and the channel-specific identifier, and the information the channel provided about you, such as your name, username, telephone number, email address, and language. We do not store a profile image. This information is used only to answer the enquiry through the same channel and to tell our team that an enquiry has arrived.
How we use information
We use information only to operate, display, secure, and troubleshoot the Website and demo; remember your preferences; respond to messages and enquiries; understand general Website usage; and prevent abuse. Demo identity information is not used for advertising or behavioral profiling.
Analytics and cookies
Usage measurement on our own servers
We count how the Website is used on our own infrastructure, without cookies and without any identifier. What we record are aggregate counters: which page was opened, which section of the landing page came into view, which demo builder control was changed, whether a demo sign-in was started, how long a page was actively visible, and a broad category of where a visit came from — direct, search, social, documentation, or other.
These counters carry no identifiers of any kind: no cookie, no browser storage, no session or visitor identifier, no IP address, and no referring address. The referring address is reduced to one of the categories above on our server, and the original is not kept. Your IP address reaches our server as part of any web request and is used to apply rate limits and prevent abuse; it does not enter these counters.
Because these counters are aggregates and hold nothing that points to a particular visitor, they are not used for advertising or profiling, we do not sell them, and we do not share them with third parties.
Third-party analytics
We may use Google Analytics on informational Website pages to understand general usage. When enabled, Google Analytics may process cookies or similar identifiers, page and interaction information, browser or device information, and an IP address.
We do not intentionally send raw channel identifiers, profile images, demo claims, authorization codes, or authentication tokens to Google Analytics. Where required by applicable law, optional analytics is enabled only after the applicable cookie choice has been made.
Necessary cookies or similar storage may be used for language and theme preferences, security, and completion of the demo flow. You can change cookie choices through the Website controls or your browser settings.
Google explains how it uses information from sites that use its services at How Google uses information from sites or apps that use our services.
The Website does not currently respond to browser "Do Not Track" signals.
Sharing
We may share limited information with providers that host, deliver, secure, or maintain the Website; with the email delivery provider that sends our team a notice of each new enquiry (the notice carries the enquiry number, subject, channel, language, and time, but not the enquiry text or your channel identifier); with the channel provider you choose, such as Telegram, WhatsApp, MAX, an email provider, or another supported provider; with Google when Google Analytics is enabled; and where disclosure is required by law or reasonably necessary to protect the Website and its users.
Channel providers process information under their own terms and privacy policies. We do not sell personal information.
Retention and security
Demo identity, transaction, and session information is kept only as long as needed to complete the current flow and for short periods needed for security and troubleshooting. It is not retained as a reusable user account or profile.
Limited protocol, security, diagnostic, and hosting records may remain temporarily. The aggregate usage counters described above are kept in our own metrics storage for a limited period; they hold no identifiers, so there is nothing in them to look up about a particular visitor. Where Google Analytics is enabled, its data is retained according to the configured Google Analytics settings. Preference data remains until it expires or you remove it. Email correspondence is retained only as long as reasonably necessary. Enquiries sent through the contact form are kept until they have been answered and are no longer needed for follow-up, and are deleted earlier on request.
We use reasonable technical and organizational measures appropriate to the limited information processed through the Website and demo. No method of transmission or storage is completely secure.
Your choices
Depending on applicable law, you may request access to, correction of, or deletion of personal information about you. We may need to verify a request and may retain information where permitted or required by law.
The Website and demo are not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Changes and contact
We may update this Policy by publishing a revised version with a new effective date. Questions and privacy requests can be sent to devs@veriqa.app.