Privacy Policy
Effective: July 13, 2026
Veris is a small, independent social platform built on a simple idea: every account is a verified human, and trust is earned in the open. That idea shapes how we handle your data — we collect the minimum needed to run the service, we don't run ads, and we never sell your information.
What we collect, and why
Phone number. Verifying that every account belongs to a real person is the core of Veris, and your phone number is how we do it. We use it to send you a one-time login code and to enforce one-account-per-person. It is never shown to other users and never used for marketing.
Email address (optional). You can add an email to your profile and verify it to strengthen your public trust standing. If you join our waitlist, we collect the email you submit there, along with your consent choice and which link brought you to us (for example, whether you found us through Reddit). We email you only what you've consented to.
Profile and content. Your username, display name, bio, avatar, posts, replies, likes, and follows — the things you create on Veris. Posts, replies, and your profile are public; that's what a public square is.
Connected accounts. If you link an external account (like LinkedIn or GitHub) to build your trust standing, we store which service you connected and the account identifier that service gives us. We never see or store your passwords for those services, and we don't read your data there — the connection itself is the signal.
Trust standing. Your Trust tier and standing indicator are computed from your verifications and connections, and are shown publicly next to your name. That's not a privacy leak — it's the product: the inputs stay private, the standing is public.
Technical basics. Like nearly every website, our infrastructure keeps short-lived server logs (IP addresses, request times) for security and debugging. We also use privacy-friendly, cookie-free analytics (Vercel Analytics) that tell us page-level traffic in aggregate — never who you are or what you do across other sites.
What we don't do
No ads. No selling or renting your data. No tracking you across the web. No profiling for engagement optimization — Veris deliberately has no attention-maximizing algorithm to feed.
Who processes data on our behalf
We're a small operation and rely on established providers to run the service: Supabase (database and authentication), Vercel (hosting and analytics), Twilio (delivering login codes to your phone), Resend (sending verification and service emails), and Cloudflare (domain and network services). Each receives only what's needed for its job.
Where your data lives
Our infrastructure is hosted in the United States. If you use Veris from elsewhere, your data is processed in the US.
Retention and deletion
Deleted posts are removed from view immediately and permanently purged from our systems within 30 days. If you delete your account, your profile, posts, connections, and verification records are deleted — this is built into the product, not a support ticket. Waitlist entries are deleted on request, and every waitlist email includes an unsubscribe path. Server logs and backups age out on short cycles.
Your rights
Wherever you live, you can: see what we have about you (most of it is already visible in your own settings), correct it, delete it (in-product), and withdraw marketing consent at any time. California residents: we don't sell or share personal information as defined by California law, and we treat these rights as available to everyone regardless of statute. Email support@veris.social for anything you can't do in-product.
Do Not Track
Our analytics don't track you across sites, so there's nothing to opt out of; we don't respond to DNT signals because we never do the thing DNT exists to stop.
Age
Veris is for people 18 and older.
Changes
If this policy changes, we'll update it here with a new effective date, and for meaningful changes we'll say so plainly on the site rather than burying it.