VeRa Privacy Policy
This Privacy Policy explains how VeRa collects, uses, protects, discloses, and retains personal information in connection with user accounts, creator profiles, subscriptions, tips, payouts, trust and safety review, and platform operations. It is written for a Canadian and Quebec-aware launch and should be finalized with legal counsel before production use.
- VeRa collects account, profile, payment, usage, moderation, and support information needed to operate the platform.
- We use personal information to run subscriptions and tips, support creators, process payouts, moderate content, prevent fraud, and comply with law.
- We rely on service providers such as Stripe and other processors to help deliver payment, hosting, analytics, and security services.
- Data may be processed outside Canada depending on providers and infrastructure, subject to contractual and security safeguards.
- You can contact VeRa to request access, correction, or deletion, subject to legal and operational limits.
Categories of data
VeRa may collect categories of personal information including account details, login credentials, profile information, identity and age-verification information, payment and billing records, creator payout information, device and browser data, IP address, usage and engagement data, customer support records, moderation and safety records, and communications sent through the service.
Depending on how you use VeRa, we may also collect creator onboarding records, payment disputes, legal acceptance logs, fraud and risk review data, and platform enforcement records.
Purposes of use
VeRa uses personal information to create and manage accounts, authenticate users, operate creator profiles, process subscriptions and tips, facilitate creator payouts, support trust and safety review, enforce platform rules, provide customer support, investigate fraud, improve service performance, comply with legal obligations, and maintain business and platform integrity.
Service providers and processors
VeRa uses service providers and processors to support payment processing, creator payout operations, identity and onboarding verification, infrastructure hosting, storage, analytics, monitoring, communications, trust and safety tooling, and support operations.
- StripePayment processing, subscriptions, creator payouts, identity and onboarding support.Cross-border processing may occur depending on Stripe infrastructure.
- Infrastructure and hosting providersApplication hosting, storage, performance, reliability, and security operations.Provider locations may include Canada, the United States, and other jurisdictions used by VeRa service providers.
- Analytics and monitoring providersService analytics, debugging, performance monitoring, and product operations.Processing location depends on the provider selected by VeRa.
Analytics
VeRa may use internal analytics and third-party monitoring tools to understand how users interact with the platform, measure creator and product performance, debug issues, analyze conversions, and support security and fraud detection. Analytics data may include feature usage, device/browser details, referral or attribution metadata, and event-level product interaction data.
Retention
VeRa retains personal information only for as long as necessary for the purposes described in this Policy, including platform operation, support, legal compliance, fraud prevention, moderation, accounting, dispute handling, and audit needs.
- Account and profile recordsRetained while the account remains active and for a reasonable period afterward for legal, security, fraud, and audit purposes.
- Billing, payout, and transaction recordsRetained as needed for accounting, tax, chargeback, audit, and payment network compliance obligations.
- Trust and safety, moderation, and enforcement recordsRetained as needed to investigate incidents, enforce policies, and respond to legal claims or regulatory requirements.
Access, correction, and deletion requests
You may request access to personal information VeRa holds about you, ask us to correct inaccurate information, or request deletion where applicable. VeRa may retain information where required for legal, accounting, fraud, safety, dispute, tax, or platform integrity purposes.
Requests can be directed to the privacy contact listed below. VeRa may request reasonable information to verify identity before acting on a privacy request.
Safeguards
VeRa uses administrative, contractual, technical, and organizational safeguards designed to protect personal information against unauthorized access, misuse, loss, theft, disclosure, or alteration. These measures may include access controls, logging, encryption in transit, vendor restrictions, environment controls, and risk-based review of sensitive workflows such as payouts and moderation.
Cross-border processing
VeRa and its service providers may process personal information outside your province or country, including outside Quebec and outside Canada, depending on the systems and vendors used to operate the service. Personal information processed in another jurisdiction may be subject to the laws of that jurisdiction.
TODO: LEGAL REVIEW - finalize cross-border transfer assessment wording and any Quebec specific notice obligations.
Breach response
If VeRa identifies a confidentiality incident, privacy breach, or security event affecting personal information, we may investigate, contain, remediate, document, and notify affected individuals, regulators, payment providers, or law enforcement where required or appropriate.
TODO: LEGAL REVIEW - finalize confidentiality incident reporting workflow, notice thresholds, and regulator escalation timing.
Privacy contact
Questions, complaints, or requests relating to privacy, confidentiality incidents, corrections, deletion, or data handling may be sent to VeRa’s privacy contact.
- Privacy Policy version: 2026-03-11.1
- Cookie Policy version: 2026-03-11.1
- TODO: LEGAL REVIEW - finalize Quebec-specific privacy governance language, including privacy officer responsibilities and complaint handling.
- TODO: LEGAL REVIEW - finalize privacy impact assessment process language for new features, vendors, and higher-risk processing.
- TODO: LEGAL REVIEW - finalize cross-border transfer assessment wording for Canadian and Quebec requirements.
- TODO: LEGAL REVIEW - finalize confidentiality incident reporting workflow and regulator/individual notice timing language.
