Privacy Policy

VeriTalk is committed to protecting and respecting your privacy. This Privacy Policy explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others, and how we keep it secure. We may change this Policy from time to time, so please check this page occasionally to ensure you're happy with any changes.

0.Definitions: What We Mean by "Personal Data"

When we say we "don't store your personal data," we mean something specific. Here's what counts as personal data under our definition, what doesn't, and what that means for you.

Subscriber Personal Data (In Scope)

Personal data we protect under that claim includes:

• Direct identifiers: Your email address, phone number, and name.
• Call content: Summaries of what a call was about, and labels of what we think the caller intended (e.g., "legitimate," "suspicious," "fraudulent"). We store these only if you enable it in your settings, and they are encrypted with a key we hold on our servers.

What's Not Personal Data (Out of Scope)

We store the following without a consent gate, but they are not "personal data" under our definition. Call-level records are automatically deleted after 180 days (see Data Retention below):

• Call metadata: When calls happened, how long they lasted, whether they were incoming or outgoing, and whether they connected.
• Threat verdict: Our coarse classification of whether a call was safe, low-risk, medium-risk, high-risk, or critical. This is a single label, not a detailed explanation.
• Analysis metadata: Confidence scores and technical factors we used to reach our verdict. These are not call content.

Your Contacts (Third-Party Personal Data)

Your contact list contains names, phone numbers, and emails of people you trust. These are their personal data, not yours. You are responsible for obtaining their consent before adding them to VeriTalk. We store contact information encrypted in transit and at rest, under the same protection as your account data. We do not use it for marketing or share it with third parties.

How We Protect Call Summaries (Encryption)

If you enable call-detail retention in your settings, we encrypt summaries and intent labels using a key VeriTalk holds on our servers. This encryption protects you against database breaches and accidental exposure. Important: VeriTalk staff with access to the encryption key can decrypt your data. This is not end-to-end encryption, and it does not protect against subpoenas (law enforcement can compel both the data and the key). If you need stronger protection—where even we cannot read your data—you would need end-to-end encryption with a key only you hold, which we do not offer today.

Data Retention

Call content (summaries and intent labels) is stored only while call-detail retention is enabled in your settings. If you turn retention off, we stop storing content for future calls; previously stored summaries remain encrypted and are removed along with the rest of your call records by the 180-day sweep. Call metadata is kept for 180 days and then automatically deleted. You can delete your account at any time; we offer a 90-day grace period to cancel the request, or you can choose immediate deletion (used for "right to be forgotten" requests under GDPR). After deletion, all your data is permanently removed.

1.What Data We Collect

We collect different types of information, including:

• Account Information: When you register for a VeriTalk account, we collect your email address and encrypted password.
• Usage Information: Information about how you use our services, such as when you access our services and what features you use.
• Phone Number Data: Information about phone numbers and call patterns for scam detection purposes.
• Device Information: Information about your device, including your IP address, browser type, and operating system.

2.How We Use Your Data

We use your data for the following purposes:

• To provide and maintain our service
• To notify you about changes to our service
• To allow you to participate in interactive features of our service
• To provide customer support
• To gather analysis or valuable information to improve our service
• To monitor the usage of our service
• To detect, prevent and address technical issues
• To identify and prevent scam calls and fraudulent activities

3.Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. We also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our service, or we are legally obligated to retain this data for longer time periods.

4.Data Security

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. We use a variety of security measures, including encryption and authentication tools, to help protect and maintain security, integrity, and availability of your information.

5.Sharing Your Information

We may share your information with:

• Service Providers: Third party companies and individuals that provide services on our behalf or help us provide our services to you
• Law Enforcement: Under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company

Notifications and Third-Party Services

When VeriTalk sends a notification about a flagged or intervened call, the notification message contains only a link to view the call details in the VeriTalk app, a timestamp and environment tag (for our operations team), and a generic category (e.g., "call flagged") with no details about the call.

We never include the caller's number or name, a summary of why the call was flagged or what threat level was assigned, your account email or phone, or any detail beyond "something happened — open the app to see what." This means notification platforms — Discord for our team alerts, and SMS or push services if enabled later — cannot see your call activity or the details of your interactions.

6.Your Data Protection Rights

You have the following data protection rights:

• The right to access, update or delete the information we have on you
• The right of rectification — the right to have your information corrected if it is inaccurate or incomplete
• The right to object — the right to object to our processing of your personal data
• The right of restriction — the right to request that we restrict the processing of your personal information
• The right to data portability — the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format
• The right to withdraw consent — the right to withdraw your consent at any time where we relied on your consent to process your personal information

7.Cookies, Tracking, and Analytics

The VeriTalk app uses cookies and similar technologies only for what the service needs to function — keeping you signed in and remembering your settings. We do not use advertising cookies or behavioral tracking, and the app contains no analytics vendor.

This marketing website uses Umami to count page visits. We only use analytics services that maintain user anonymity: Umami is cookieless, sets no identifiers, builds no visitor profiles, and gives us only aggregate statistics (which pages were viewed, roughly where from). It never sees your account, your calls, or anything you do inside the app.

8.Children's Privacy

Our service is not intended for use by children under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.

9.Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10.Contact Us

If you have any questions about this Privacy Policy, please contact us at info@veritalk.org.