Trust and data

Privacy notice

This notice explains what VeriTriage processes, why it is needed, where it is stored, and the choices available to users.

Effective 17 July 2026

Evidence boundary: uploaded HAR, log, and pasted evidence is processed transiently for analysis. Raw captures are not deliberately stored in the account database. A result is retained only when a user chooses to save it.

Information we process

Account identity, including name, email address, verification state, password derivations, and session records.
Workspace membership, roles, invitations, settings, incidents, timelines, actions, comments, reports, and activity records.
Bug and purchasing requests submitted through the service.
Technical request information needed for security, rate limiting, diagnostics, and service operation.
Subscription identifiers and billing status supplied by Stripe. VeriTriage does not receive full card details.

Purposes and lawful basis

We process data to provide the requested service and administer subscriptions, to protect the service and users, to respond to support or purchasing requests, and to meet legal obligations. Depending on the context, the basis is performance of a contract, legitimate interests in operating a secure service, legal obligation, or consent where required.

Service providers

Cloudflare provides application hosting, security, and database infrastructure. Stripe provides checkout, subscription, invoice, and payment services. Resend provides transactional email delivery. These providers process only the information needed for their services under their own contractual and security terms.

Retention and deletion

Workspace owners select a saved-data retention setting. Account, billing, audit, fraud-prevention, and legal records may be retained for longer when necessary. Users can clear local browser reports, delete eligible workspace records, and request account deletion. Raw capture text is not intentionally retained by the analysis endpoints.

International processing

Infrastructure providers may process information in multiple countries. Appropriate provider contracts and transfer safeguards are used where required.

Your choices and rights

Depending on applicable law, individuals may request access, correction, deletion, restriction, portability, or objection, and may complain to their data protection authority. Workspace customers remain responsible for having authority to submit employee or customer evidence and for redacting unnecessary personal data.

Contact

Privacy and data requests can be sent to support@veritriage.com. We may need to verify identity before completing a request.