← verilix

Privacy Policy

Effective 2026-10-12

verilix (the "Service") takes your privacy seriously. This policy explains how we handle your personal information.

1. What we collect

• At sign-up: email address; name and profile image (to the extent Google provides them when you use Google sign-in)

• While using the Service: background context, documents, conversation content, tags/folders, and feedback you enter or save

• Connection management: MCP API keys (only a hash is stored), connected-app info, and tool-call logs (time and tool type)

• Operations: access logs automatically generated by hosting

If you register your own API key (BYOK), it is stored encrypted.

2. How we use it

• Identifying you, signing in, and managing your account

• Providing features such as saving, searching, summarizing, and categorizing documents

• Sending the weekly digest email (can be turned off in Settings)

• Preventing abuse, security, improving quality, and responding to inquiries

3. Retention

We keep your data while your account is active. When you delete your account you can no longer sign in, and we delete or irreversibly de-identify the data without undue delay, except where the law requires retention. Documents you delete are kept in the trash so they can be restored.

4. Service providers and international transfers

We use the following providers, so your data may be processed on servers outside your country:

• Supabase: database and authentication

• Vercel: hosting

• Anthropic: document classification, summaries, and digest generation (text is sent)

• Google (Gemini): embeddings for search (text is sent); Google sign-in

• Google (Gmail SMTP): sending digest and other emails

If you register BYOK, text may be sent to the AI provider you chose for the relevant feature. We do not provide personal information to third parties except as required by law.

5. Operator access and security

The operator may view users' conversations and documents in an admin console only when necessary, such as for abuse checks, incident response, or support. Data is protected with row-level access control, HTTPS in transit, and hashed/encrypted storage of API keys. No system can guarantee perfect security.

6. Your rights

You can view and edit your information, delete your account in Settings, and request access, correction, deletion, or restriction of processing at any time.

7. Cookies and local storage

We use cookies to keep you signed in and browser local storage for conveniences such as theme and panel state. We do not use advertising or tracking cookies.

8. Changes

We will notify you in the Service or by email before changes take effect.

9. Contact

For privacy questions or requests: s.jin1448@gmail.com.