What we hold, and why

This policy applies to customers and authorized users of the Veritypress platform, and to visitors of veritypress.ai. Veritypress is a business tool sold to organizations; it is not directed to consumers or to anyone under 18, and we do not knowingly collect data from children.

We collect only what the platform needs to do its job:

• Account and organization data — your name, email, and organization membership, handled through our authentication provider so you can sign in and so we can scope every record to the right tenant.
• Content and brand configuration — the topics, drafts, brand voice, personas, and editorial material you create or upload, plus the public sources cited in generated content.
• Connected-account credentials — the tokens you authorize for the social, video, and publishing accounts you connect (including Google/YouTube, covered in its own section below). These are stored server-side and never exposed to the browser.
• Operational records — audit logs, compliance-check results, approval decisions, and job history that make up the evidence trail behind each asset, along with standard server logs needed to run and secure the service.

We use your data to run the platform: to generate, check, and publish the content you ask for, to keep an auditable record of how each asset was produced and approved, to secure and troubleshoot the service, and to communicate with you about your account. We do not sell your data, and we do not use the content or credentials you connect to train third-party advertising profiles.

When you connect a YouTube channel, Veritypress uses Google's OAuth to request permission to upload and manage videos on yourchannel. We ask only for the scopes needed to publish the content you approve, and the connection authorizes your own channel — not access to anyone else's.

With that authorization, here is exactly what happens to Google user data:

• What we store— an OAuth refresh token for your channel, held server-side so we can publish on your behalf without asking you to re-authorize each time, plus the channel's basic identity (channel name and ID) so the console can show you which account is connected.
• What we do with it — we use the token only to upload and manage videos you have reviewed and approved inside Veritypress. We do not read your audience data, we do not post without an approval, and no human at Veritypress reads your Google user data except where needed to resolve a support or security issue you raise, to comply with law, or where you give explicit consent.
• What we never do — we do not sell Google user data, use it for advertising, or transfer it to others except as needed to provide the publishing feature you connected (for example, our hosting and OAuth infrastructure).
• How to revoke— disconnect the channel in the Veritypress console, or remove Veritypress's access at myaccount.google.com/permissions. On revocation we stop using the token and delete the stored refresh token.

Veritypress's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

The same principle holds for the other accounts you connect, such as Facebook, Instagram, X, or a content platform like Shopify: tokens are stored server-side, used only to publish the content you approve to the accounts you chose, and never exposed to the browser. Some connections run through a managed-OAuth provider that holds custody of the token on our behalf; the subprocessor list on our security page names who that is. You can disconnect any channel in the console at any time.

We rely on a short list of infrastructure and model providers to run the platform — hosting, database, authentication, media generation, narration, and managed OAuth. The current list, with each provider's purpose, is maintained on our security page.

We keep your data for as long as your account is active and for as long as we need it to provide the service. Audit and compliance records are append-only by design, because their value is that they cannot be quietly rewritten. When you close your account or disconnect a channel, we delete the associated credentials and will delete or anonymize your other data on request, subject to records we are required to retain by law.

All traffic is TLS in transit, data at rest lives in managed services that encrypt it as a platform property, and credentials are redacted from logs. Our full posture — tenant isolation, the evidence trail, and the credential-handling roadmap — is described on the security page.

You can access, correct, export, or delete your data by contacting us, and you can revoke any connected account as described above. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honor those requests. Email privacy@veritypress.ai and we will respond.

If we change this policy we will update the date above and, for material changes, give account holders reasonable notice. Continued use of the platform after a change means you accept the updated policy.

Questions about privacy or a data request? Email privacy@veritypress.ai.