Effective date: November 11, 2026 · Version 2026-11-11
This policy explains what personal information VeriCouncil.ai LLC ("VeriCouncil", "we", "us") collects when you use VeriCouncil Cloud (the "Service"), why we collect it, who receives it, how long we keep it, and what choices you have.
VeriCouncil.ai LLC is a Texas limited liability company. The Service is offered only to people in the United States who are 18 or older.
The Service does not accept file uploads.
Please do not put sensitive information in a mission. Our Terms of Service prohibit submitting, among other things, patient health records, identification numbers, financial account numbers, children's data and biometrics.
If you choose a paid plan, you give your card and billing details to Stripe on Stripe's own checkout page.
Free accounts are not asked for a card and we hold no card information about them.
We keep records of what happens in your account so that we can run and improve the Service: when you signed up and confirmed your email, how many missions you ran and when, whether each finished or failed, how long it took, what it cost us to run, when you started a checkout or subscribed, and when you downloaded a report. These records hold counts, times and amounts. They do not hold mission content.
We count how many times our pages are loaded each day. This is a single daily total. It is not linked to you, uses no cookie and records nothing about who the visitor was.
To stop abuse, we count how many accounts are created and how many sign-in links are requested from each network address (IP address) each day. We keep these counts for two days and then delete them. We do not otherwise store your IP address in our database.
Cloudflare, which delivers the Service, processes the IP address and browser details of every request as part of carrying traffic and protecting against attacks.
We set one session cookie to keep you signed in. It is strictly necessary for the Service to work.
Our application logs contain identifiers and metadata only: account and mission identifiers, times, status, token counts and cost. We have built the Service so that questions, pasted text and reports are not written to our logs or error messages.
If you email us, we receive your email address and whatever you write.
| Information | Why we use it |
|---|---|
| Name, email and password hash | To create your account, send you confirmation and sign-in links, sign you in, secure your account and send service messages (such as receipts and notices about changes). |
| Record of agreement to the Terms and to renewal | To show what you agreed to and when, as the law requires for subscriptions. |
| Mission inputs and reports | To run your mission, produce your report and show it to you until it is removed. |
| Payment references and credit ledger | To charge you, track your usage credit, pay refunds, keep accounts and meet tax and legal duties. |
| Usage records | To operate the Service, enforce limits such as the monthly free allowance, control our costs, and understand in total how the Service is used. |
| Network address counters | To limit abuse. |
| Session cookie | To keep you signed in. |
| Logs | To operate, secure and troubleshoot the Service. |
| Email-news choice | To send product news and offers only to people who have chosen to receive them. |
| Messages you send us | To answer you. |
We do not use mission content for training, evaluation or advertising. We do not use your information for targeted advertising. We do not make decisions about you by automated profiling that have legal or similarly significant effects.
We send product news and offers by email only if you have chosen to receive them. The box at sign-up is not ticked for you. You can change your choice at any time in the Service under "Email choices and closing your account", or with the unsubscribe link in any such email. We act on an unsubscribe straight away. Each such email identifies VeriCouncil.ai LLC as the sender and includes our postal address.
Account emails (confirmation, sign-in links, subscription confirmations, receipts and notices about changes) are sent whatever you choose here.
We share information with companies that process it for us, under their standard terms, to provide the Service:
| Provider | What it does for us | What it processes |
|---|---|---|
| Cloudflare | Hosting, database, running the AI models, and sending account emails | Account information, mission inputs and reports, usage records, logs, and the network details of each request |
| Stripe | Payments | Card and billing details you give Stripe, transaction data, your email address |
Your mission content is processed by open-weight AI models (from the OpenAI gpt-oss, Meta Llama and NVIDIA Nemotron families) that Cloudflare runs on its own platform. Your content is not sent to OpenAI, Meta or NVIDIA. Cloudflare states that it does not use customer content to train generative AI models. Cloudflare's description of how it handles this data is at developers.cloudflare.com/workers-ai/platform/data-usage.
Stripe also uses the information it collects for its own purposes, such as preventing fraud, meeting its legal duties and improving its services. For those uses Stripe decides how the information is handled, not us. Stripe's privacy policy is at stripe.com/privacy.
Before any new provider processes your mission content, we will update the provider list in this policy and tell you by email or in the Service at least 30 days in advance.
We may also disclose information:
| Information | How long we keep it |
|---|---|
| Mission inputs and reports | Removed from your account and our active database 30 days after the mission is created, sooner if you delete the mission, and at once if you close your account. |
| Recovery copies | Our hosting provider keeps recovery copies of the database for up to 30 days. Content removed from the active database can remain in those copies for up to 30 more days, and then it is gone for good. |
| Name, email, password hash, email-news choice | Until you close your account. They are then removed from the account record at once, and from recovery copies within 30 days. |
| Records of agreement (Terms, renewal) | For as long as you have an account and for at least 3 years after, or longer where the law requires. |
| Payment references, credit ledger and refund records | 7 years. |
| Usage records | For as long as you have an account. After you close it, they are kept without your name or email address. |
| Network address counters | 2 days. |
| Logs | Kept by our hosting provider for a short period, measured in days, and then deleted. |
If we ever restore the database from a recovery copy, missions older than 30 days are removed again automatically within about an hour.
Save a copy of any report you want to keep. We do not recover deleted missions for users.
No system is perfectly secure. If a breach affects your personal information, we will notify you without unreasonable delay and no later than 60 days after we determine that the breach occurred, and we will notify state authorities where the law requires.
Whatever state you live in, you can email support@vericouncil.ai to:
We will confirm your identity before acting, normally by asking you to reply from the email address on your account. Someone you have authorised in writing may make a request for you; we will check their authority with you. We answer within 45 days. If we need longer, we will tell you why and answer within a further 45 days.
If we decline a request, we will explain why. You can appeal by replying to that message, and we will answer the appeal within 60 days. If you are still unhappy, you can contact your state attorney general.
We will not treat you unfairly for making a request. We may keep information that the law requires us to keep, such as payment records, and we will tell you if that applies.
The Service is not directed to anyone under 18, and you must be 18 or older to use it. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, email support@vericouncil.ai and we will delete it.
Our Terms of Service also prohibit users from submitting data about children in a mission.
We do not track you across other websites or over time. No other company collects information about your activity on the Service for its own tracking or advertising.
We do not sell personal information and do not share it for cross-context behavioural advertising, and we have not done either in the past 12 months. Because of that, there is nothing for a "Do Not Track" setting or a Global Privacy Control signal to switch off, and the Service behaves the same way whether or not your browser sends one.
We do not use or disclose sensitive personal information for any purpose other than providing the Service.
Some states, including Texas and California, give their residents specific privacy rights. Rather than work out which law applies to each user, we give the rights in Section 7 to every user. We do not sell personal information, and we would ask for your consent before ever selling sensitive personal information.
This policy is linked from every page of the Service.
We operate in the United States and offer the Service only to people in the United States. Cloudflare and Stripe run global networks, so your information may be processed on their systems inside or outside the United States.
We may update this policy. We will post the new version with a new effective date and version number. If a change is material, including the addition of a provider that will process your mission content, we will tell you by email or in the Service at least 30 days in advance.
VeriCouncil.ai LLC, a Texas limited liability company
Support, billing and privacy questions and requests: support@vericouncil.ai
Mailing address: VeriCouncil.ai LLC, PO Box 1911, Georgetown, Texas 78627