Privacy Policy

Effective date: August 3, 2026

1. Introduction

This Privacy Policy explains how Vero ("Vero," "we," "us," or "our") collects, uses, shares, and protects personal information when you use verostocks.com and related services (the "Service").

We take privacy seriously. This policy is intended to be clear about what we actually collect and why, rather than to obscure it. If anything here is unclear, contact us at privacy@verostocks.com.

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information we collect

2.1 Information you provide directly

Account information. When you register, we collect your email address and a display name. If you register with a password, it is hashed and stored by our authentication provider — we never see or store your password in readable form.

Third-party sign-in. If you sign in using Google, we receive basic profile information that Google makes available (typically your email address, name, and profile identifier). We do not receive your Google password.

Payment information. If you subscribe to a paid plan, payment is processed by our payment processor. We do not receive or store your full payment card number. We store limited billing-related identifiers (such as a customer ID, subscription status, and plan tier) necessary to manage your account.

User content. We store content you create in the Service, including:

Investment theses you write
Watchlists and tracked securities
Custom tool definitions
Workspace and board layout preferences
Alert rules and notification preferences
Feedback and support messages you submit

2.2 Information collected automatically

Usage and analytics data. We use analytics tools to understand how the Service is used — including pages visited, features used, session duration, referring source, device type, browser, and approximate location derived from IP address.

Log data. Our infrastructure providers automatically log standard request information including IP address, timestamps, and requested URLs.

Cookies and similar technologies. See our separate Cookies Policy for detail on exactly what is stored on your device.

2.3 Information we do NOT collect

For clarity, we do not:

Collect or store your brokerage credentials, account numbers, or actual portfolio holdings
Have any access to your real investment accounts or execute any trades
Collect payment card numbers directly
Sell personal information to third parties

3. How we use your information

We use personal information to:

Provide the Service — create and manage your account, store your theses and preferences, deliver the features you use
Generate personalized content — produce briefings, thesis evaluations, and analysis based on the securities you track and the theses you write
Process payments — manage subscriptions, billing, and plan access
Send communications — transactional emails (account confirmation, password reset, billing notices) and, where you have enabled them, alert notifications
Improve the Service — understand usage patterns, diagnose errors, and develop new features
Maintain security — detect and prevent fraud, abuse, unauthorized access, and violations of our Terms
Comply with legal obligations — respond to lawful requests and meet regulatory requirements

Legal bases (if you are in the EEA or UK): We process personal data on the basis of (a) performance of a contract with you, (b) our legitimate interests in operating and improving the Service, (c) your consent where required (for example, certain cookies and marketing communications), and (d) compliance with legal obligations.

4. Artificial intelligence processing

This section is specific to how Vero works and deserves your attention.

Core features of the Service — including thesis evaluation, daily briefings, news summarization, and analysis tools — are powered by third-party artificial intelligence providers.

What this means in practice:

Content you write may be sent to a third-party AI provider for processing. When Vero evaluates news against your investment thesis, the text of your thesis and the relevant news content are transmitted to our AI provider to generate the evaluation.
We send only what is necessary to produce the requested output.
We do not send your email address, name, payment information, or account credentials to AI providers as part of this processing.
We access AI providers through their business API tiers, under which submitted content is not used to train their models. Their handling of this data remains governed by their own terms and data processing policies.

If you do not wish your written content to be processed by third-party AI systems, you should not use the thesis, briefing, or AI analysis features of the Service.

5. How we share information

We do not sell your personal information. We share it only as described below.

Service providers. We share information with third parties who perform services on our behalf, each only to the extent necessary for their function:

Database and authentication — account storage, authentication, user content (account info, user content)
Payment processing — subscription billing (billing identifiers, transaction data)
Email delivery — transactional and notification email (email address, message content)
AI processing — thesis evaluation, summaries, analysis (thesis text, news content — see Section 4)
Market data — prices, quotes, financial data (ticker symbols requested)
Analytics — usage measurement (usage events, device and browser data)
Hosting — running the Service (request logs, IP address)

Legal requirements. We may disclose information if required by law, subpoena, court order, or other legal process, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers. If we are involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

With your consent. We may share information for other purposes with your explicit consent.

6. Data retention

We retain personal information for as long as your account remains active, and afterward only as long as necessary to:

Comply with legal, tax, or accounting obligations
Resolve disputes and enforce our agreements
Maintain security and prevent fraud

Upon account deletion, we delete or anonymize your personal information and user content within thirty (30) days, except where retention is legally required. Backups may retain data for a commercially reasonable additional period before being overwritten.

Aggregated or de-identified data that cannot reasonably be used to identify you may be retained indefinitely.

7. Your rights and choices

7.1 All users

Access and update. You can view and update your account information in Settings.
Delete your account. You can request account deletion from Settings → Data. This deletes your account and associated user content.
Export your data. You can request an export of your data from Settings → Data.
Notification preferences. You can adjust or disable email and in-app notifications in Alerts settings.
Cookies. See our Cookies Policy for cookie controls.

7.2 If you are in the EEA, UK, or a similar jurisdiction

You may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request erasure ("right to be forgotten")
Restrict or object to certain processing
Data portability — receive your data in a structured, machine-readable format
Withdraw consent where processing is based on consent
Lodge a complaint with your local data protection authority

7.3 If you are a California resident

Under the CCPA and CPRA, you may have the right to:

Know what personal information we collect, use, and disclose
Request deletion of your personal information
Request correction of inaccurate personal information
Opt out of the "sale" or "sharing" of personal information — we do not sell personal information
Not be discriminated against for exercising these rights

7.4 How to exercise your rights

Contact us at privacy@verostocks.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before fulfilling certain requests.

8. Security

We take reasonable technical and organizational measures to protect personal information, including:

Encryption of data in transit (HTTPS/TLS)
Encrypted storage of credentials — passwords are hashed, never stored in readable form
Row-level security policies restricting data access to the account that owns it
Secrets management for API keys and credentials
Access controls limiting who can access production systems

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly of any suspected unauthorized access.

9. International data transfers

Our service providers may store and process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers (such as Standard Contractual Clauses).

By using the Service, you understand that your information may be transferred to and processed in countries with different data protection laws than your own.

10. Children's privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 13. If we learn we have collected such information, we will delete it promptly.

If you believe a child has provided us personal information, contact privacy@verostocks.com.

11. Third-party links and services

The Service may contain links to third-party websites, including news sources cited in AI-generated summaries. This Privacy Policy does not apply to those sites. We are not responsible for their content or privacy practices. Review their policies before providing information to them.

12. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated by updating the "Last updated" date and, where appropriate, by notifying you through the Service or by email.

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact us

Questions, requests, or complaints regarding this Privacy Policy:

Vero
Privacy inquiries: privacy@verostocks.com
General support: hello@verostocks.com
Website: verostocks.com