Privacy Policy

Verity is currently designed for rule-level coverage intelligence, policy monitoring, and RCM workflow analysis. Do not submit protected health information or electronic protected health information ("PHI/ePHI") unless we have explicitly entered a PHI-enabled agreement with you.

This means you should not include patient names, dates of birth, member IDs, medical record numbers, claim IDs, chart notes, or uploaded patient documents in searches, Ask Verity messages, onboarding fields, or API requests. We may block inputs that appear to contain PHI/ePHI.

Account Information: When you create an account, we collect your name, email address, and password. If you subscribe to a paid plan, we collect billing information through our payment processor.

Usage Data: We automatically collect information about how you use the Service, including pages visited, searches performed, features used, and interaction patterns.

Device & Browser Data: We collect IP address, browser type, operating system, and device identifiers for security and analytics purposes.

API Usage Data: If you access our Service through the API, we log request metadata including endpoint, method, IP address, user agent, response time, and timestamps. This data is associated with your API key and used for rate limiting, abuse detection, and usage billing.

Cookies: We use essential cookies for authentication and session management, and analytics cookies to understand how the Service is used.

We use the following third-party services that may process your data:

• Supabase: Authentication and database hosting
• Vercel: Application hosting and analytics
• Google Ads: Advertising and conversion tracking
• Stripe: Payment processing for subscriptions

Each of these services has its own privacy policy governing how they handle your data. We encourage you to review their policies.

We retain your account information for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).

API usage logs, including IP addresses, are retained for 90 days for security and billing purposes, after which they are automatically purged or anonymized.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us at the address below.