Privacy Policy

Who we are

Veris (veris.dev) provides software risk intelligence. We analyze connected GitHub repositories to surface security, reliability, and cost risks. Questions: support@withveris.com.

What we collect

Account information you provide, such as email address, name, and authentication details (including GitHub if you sign in that way).

Repository metadata and contents we read through the Veris GitHub App after you connect a repository. Access is read-only. We do not modify your repository.

Product data created in Veris: workspaces, projects, scans, findings, and billing records (plan, credits, invoices).

Usage and device information used to operate and improve the product, including pages visited, feature use, approximate location from IP, and error logs.

How we use it

We use this information to create and secure your account, run scans, show findings, process payments, send product messages related to Veris, and keep the service reliable.

During a scan, repository content may be sent to AI model providers so we can analyze architecture, dependencies, and risk. If you connect your own model key, that provider processes the content under your account with them. We do not use your code to train AI models.

Processors we rely on

We use vendors to run Veris. The main ones today are Supabase (authentication and database), Stripe (payments), GitHub (repository access), PostHog (product analytics), and AI model providers used for analysis. They process data only to provide their services to us.

Cookies and analytics

We use cookies and similar storage for sign-in sessions, theme preference, and product analytics. PostHog helps us understand how the product is used so we can fix issues and improve it. You can control cookies in your browser; blocking some cookies may prevent sign-in from working.

Retention and deletion

We keep account, scan, and finding data while your account is active so the product works. Billing records may be kept as required for tax and accounting. Email support@withveris.com to request access, correction, or deletion of personal data we hold.

Sharing

We do not sell your information. We share data with the processors above, with workspace members you invite, and when required by law.

Contact

Privacy questions go to support@withveris.com.