Privacy Policy

Account data — name, email, trade role, company name and state, and a hashed password (we never store passwords in plain text).

Questions and answers — the questions you ask Verika, the answers and citations returned, and timing, linked to your account. This powers your question history across devices and lets your company owner see unanswered questions (“gaps”).

Company knowledge — answers and documents your company's owner or experts add to your company knowledge base. This content is private to your company: it is never served to, or retrievable by, any other company's users.

Connected drives (optional) — if your company connects Google Drive or Microsoft OneDrive/SharePoint, we request read-only access, store the access credential encrypted, and only ingest the specific files your owner selects. Disconnecting removes the credential and the selections.

Voice — push-to-talk speech is transcribed on your device (Android) or by your browser (web). We receive the resulting text, not your audio.

Usage analytics — our website uses Vercel Analytics (aggregate, cookie-free page analytics).

To answer your questions and cite sources; to sync your history across devices; to show company owners what their crew asked and what Verika couldn't answer; to send transactional email (sign-in links, welcome emails, crew invites) via our email provider, Resend; to improve answer quality; and to operate billing through Stripe once paid plans begin (card details go directly to Stripe — we never see them).

We do not sell your data. We do not use your company's private knowledge or documents to serve other customers.

Questions are answered by AI models running on Amazon Web Services (Amazon Bedrock) in the EU (Ireland) region. Your question text and the retrieved source passages are sent to the model to produce an answer; AWS does not use Bedrock inputs or outputs to train models.

Our API runs on AWS in the EU (Ireland) region, and data is stored in MongoDB Atlas, also hosted in Ireland. Transactional email is delivered by Resend. The website is hosted on Vercel.

We keep your account data and question history while your account is active. To delete your account and associated personal data, email hello@heyverika.com and we'll complete deletion within 30 days. Company knowledge belongs to the company and is managed by its owner.

Depending on where you live (including under UK/EU GDPR), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict processing. Email us and we'll help.

If you sign in with Google or connect Google Drive, our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements: Drive access is read-only, used solely to ingest the documents your company owner explicitly selects into your company's private knowledge base, and never used for advertising. Equivalent limits apply to Microsoft data accessed via Microsoft Graph.

If we materially change this policy we'll note the new effective date here and, for significant changes, email account holders. Contact: hello@heyverika.com.