Privacy Policy
1. Scope
This Privacy Policy describes how Verracis ("we", "us", "Verracis") collects, uses, shares, and protects information about you when you access or use verracis.com (the "Service"). It applies to subscribers, invitees, and casual visitors to the public portions of the site.
2. Information we collect
2.1 Information you provide directly
When you create a Verracis account, authentication is handled by Clerk (clerk.com), our third-party identity provider. Clerk collects and stores on our behalf: your email address, any name or profile metadata you provide, and a hashed credential if you use password-based sign-in. Verracis never sees or stores your password.
If you correspond with us by email — for example, responding to an invitation or asking a question — we retain that correspondence and the email address you sent it from so we can reply and keep a record of the exchange.
2.2 Information collected automatically
When you load a page on verracis.com, our hosting provider (Cloudflare Pages) automatically records standard server-log information: IP address, user agent, timestamp, and the path you requested. These logs are used for diagnostics, abuse prevention, and aggregated traffic statistics. We do not currently run client-side analytics (Google Analytics, Segment, etc.) on Verracis.
2.3 Cookies
Verracis uses cookies only for essential functionality:
- Clerk session cookies — set by Clerk to keep you signed in across page loads. These are strictly necessary; the Service cannot function for signed-in users without them.
- Cloudflare cookies — set by our hosting provider for bot detection and basic abuse prevention.
We do not currently set advertising, tracking, or cross-site profiling cookies. If that changes, this policy will be updated and you will be notified through the site.
3. How we use your information
We use the information described above to:
- Authenticate you and deliver the subscriber-only portions of the Service.
- Communicate with you about your account, invitations, billing (when paid subscriptions launch), and material changes to the Terms or this policy.
- Detect and prevent abuse, fraud, scraping, and other activity that threatens the Service or its users.
- Produce aggregate, de-identified analytics to understand how the Service is used and where to improve it.
We do not sell your personal information. We do not share your email address with advertisers or data brokers.
4. Third-party services
Verracis synthesizes market data and commentary from multiple third-party sources. You should be aware of the following data-flow relationships:
- Clerk — authentication and user identity management. Clerk's privacy policy governs how your credentials and profile are stored. See clerk.com/privacy.
- Cloudflare Pages — hosting and CDN. Cloudflare processes server logs and provides bot-mitigation services. See cloudflare.com/privacypolicy.
- Databento, Yahoo Finance, Unusual Whales, TranscriptAPI, and public data providers — Verracis pulls market data and transcript sources from these vendors. These relationships are outbound — Verracis sends no subscriber information to these vendors, only the queries needed to retrieve market data.
When payment processing launches, the payment processor (to be selected) will independently collect and store billing information (card number, billing address) under its own privacy policy. Verracis will never see or store your full payment-card details.
5. Data retention
We retain your account information for as long as your account is active, plus a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our Terms. Server logs are typically retained for 30 to 90 days. If you close your account, we will delete or de-identify your personal information within a reasonable period, except where retention is required by law (for example, tax or accounting records) or where it is needed to defend against legal claims.
6. Your rights
6.1 All users
You may at any time:
- Access the personal information we hold about you.
- Correct inaccurate information in your account profile.
- Request deletion of your account and associated personal information.
- Export a copy of the personal information you provided.
To exercise any of these rights, contact us through the email address provided in your invitation. We will respond within a reasonable period, typically within 30 days.
6.2 European Economic Area, UK, and Switzerland (GDPR)
If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation, including the right to object to processing, the right to restrict processing, the right to data portability, and the right to lodge a complaint with your local data protection authority. The legal basis on which we process your personal information is typically (a) the performance of a contract (delivering the subscribed Service to you) and (b) our legitimate interests in operating and securing the Service.
6.3 California residents (CCPA/CPRA)
If you are a California resident, you have the right to know what categories of personal information we collect, to request deletion, to request correction, to opt out of the "sale" or "sharing" of personal information (Verracis does not sell or share personal information in the CCPA sense), and to non-discrimination for exercising these rights.
7. Security
Verracis uses HTTPS for all traffic to verracis.com. Authentication is delegated to Clerk, which implements industry-standard credential storage and session management. Subscriber-only content is gated behind Clerk-authenticated routes. No system is perfectly secure, however, and you should use a strong, unique password and enable any multi-factor authentication options Clerk provides.
8. Children
The Service is not directed to, and we do not knowingly collect personal information from, anyone under 18 years of age. If we become aware that a person under 18 has provided us with personal information, we will delete it.
9. International transfers
Verracis is operated from the United States. If you access the Service from outside the United States, your personal information may be transferred to, stored, and processed in the United States or other jurisdictions where our third-party service providers operate. By using the Service, you consent to this transfer.
10. Changes to this policy
We may update this Privacy Policy from time to time. When material changes are made, we will post the updated policy on this page and update the "Last updated" date above. For material changes affecting the categories of information collected or the purposes of processing, we will provide prior notice by email to subscribers with an active account.
11. Contact
Questions about this Privacy Policy, or requests to exercise any of the rights described above, can be sent to the contact address provided in your invitation email. [PLACEHOLDER: public privacy contact address to be set with counsel.]