This Privacy Policy describes how personal data is processed for users of Veravox (the "Service"), available at veravox.app, in accordance with EU Regulation 2016/679 ("GDPR").
1. Data controller
The data controller is Veravox. For any request regarding data processing, please write to privacy@veravox.app.
2. Data collected
- Account data: name, email, encrypted password, Google profile used for sign-in.
- Business data: company name, logo, images, description, Google link, content uploaded by the customer.
- Reviewer data: name, email, phone (optional), review text and star rating.
- Technical data: IP address, user-agent, timestamps, access logs, strictly necessary cookies.
- Anti-fraud signals: typing patterns, form-fill speed and behavioral signals used to compute a trust score.
3. Purposes and legal basis
- Providing the Service and performing the contract (Art. 6.1.b GDPR).
- Legal, tax and accounting obligations (Art. 6.1.c GDPR).
- Security, fraud and fake-review prevention on legitimate-interest basis (Art. 6.1.f GDPR).
- Service communications and technical support.
- Direct marketing only upon explicit, revocable consent (Art. 6.1.a GDPR).
4. Processing methods
Data is processed with electronic tools, adopting technical and organizational measures adequate to guarantee integrity and confidentiality (TLS encryption in transit, access control, security logs).
5. Retention
Data is retained only for the time strictly necessary: account data for the subscription duration and up to 24 months after termination; tax data for 10 years; reviews and feedback until the customer deletes them.
6. Recipients and processors
Data may be processed by suppliers acting as processors under Art. 28 GDPR, including: hosting and database (Supabase / Lovable Cloud), CDN networks, transactional email provider, payment provider. An updated list is available upon request at privacy@veravox.app.
7. Transfers outside the EU
Some providers may process data outside the EU. Such transfers rely on EU Commission adequacy decisions or Standard Contractual Clauses (SCCs).
8. Your rights
You may at any time exercise the rights under Art. 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and consent withdrawal, by writing to privacy@veravox.app. You may also lodge a complaint with your local supervisory authority.
9. Cookies
Veravox uses only technical cookies necessary for operation (session, authentication, language preferences). No profiling cookies are used without consent.
10. Changes
This Policy may be updated. Changes will be published on this page with the last-updated date.