Privacy
Privacy policy
VERIS is a product operated by Recrucial AB, Sweden. This policy explains how we handle personal data when you visit or use VERIS.
Effective 4 August 2026
Who is responsible
Recrucial AB is the controller for account, billing, website, and support data used to operate VERIS. When customers send AI request data through VERIS, the customer determines the purpose of that processing and Recrucial AB acts as a service provider or processor. Contact privacy@veris.digital for privacy matters.
Data we collect
We collect account and profile details, organization membership, billing and subscription records, support messages, security and audit events, provider configuration metadata, and technical request records such as model, token count, cost, latency, outcome, and timestamps. Provider credentials are stored in protected systems and are not displayed again after entry. AI request content may be processed when you configure VERIS to proxy it.
Why we use it
We use data to provide and secure the service, authenticate users, process payments, route AI requests, calculate usage and costs, generate recommendations, respond to support, prevent abuse, and meet legal obligations.
Our principal legal bases in the UK and EEA are performance of a contract, legitimate interests in operating and protecting VERIS, compliance with law, and consent where required.
Providers and international processing
VERIS relies on infrastructure, authentication, email, payment, and customer-selected AI providers. Data may be processed outside your country. Where required, Recrucial AB uses appropriate transfer safeguards. A customer controls which AI providers receive its request data and should review those providers' terms and regional settings.
Retention and deletion
Account and billing records are retained while an account is active and as required for legal or financial obligations. AI request metadata is retained for up to 30 days by default. Support messages are retained for up to 12 months. We aim to complete verified workspace deletion requests within 14 days, except where limited records must be kept by law, for fraud prevention, or to resolve disputes.
Cookies and local storage
VERIS uses necessary browser storage for authentication, theme, interface preferences, and application context. We do not currently use third-party advertising or behavioral analytics cookies. If that changes, this policy and any required consent controls will be updated first.
Your rights
Depending on your location, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent. Email privacy@veris.digital. We may verify identity before acting. You may also complain to the Swedish Authority for Privacy Protection or your local regulator.
Changes
Material changes will be dated on this page and communicated where required. Continued use after an effective change is governed by the updated policy, subject to rights that cannot legally be waived.