This policy explains how Keyveve, Inc. ("we") handles personal data when you use Veqen.
The short version
- We store your account details so you can sign in and pay.
- We don't keep the email addresses, IP addresses or phone numbers you send us to check, with two narrow exceptions described below.
- We don't sell personal data and we don't use it for advertising.
1. Data about you (our customer)
| What | Why | How long |
|---|---|---|
| Email address and password hash | To run your account and sign you in | Until you delete your account |
| Billing details (handled by Stripe; we see the card brand and last 4 digits only) | To take payment | As required for tax and accounting, usually 7 years |
| Usage records: which check ran, when, its cost, which key | Billing, your usage page, abuse prevention | Until you delete your account |
| Sign-in sessions with IP address and browser | Security | 30 days |
| Signup IP address and our own risk score for your signup | Fraud prevention | Until you delete your account |
2. Data you send us to check
When you check an email address, IP address, phone number or domain, we process it to produce the result and then discard it. We do not keep it in our usage records.
Two exceptions:
- Idempotency. If your request includes an
Idempotency-Keyheader, we store the response for 24 hours so a retry gets the same answer, then delete it. - Domain facts. We cache public facts about domains (mail servers, registration date) to keep checks fast. These are facts about domains, not about people, and they're refreshed regularly.
For data you send us to check, you are the controller and we act as your processor.
3. Visitors to the free tools
The free tools process what you type in the same way and don't store it. We count requests per IP address for one day to enforce the daily limit.
4. Sub-processors
| Provider | Purpose |
|---|---|
| Microsoft Azure | Hosting and database |
| Stripe | Payments and invoices |
| Resend | Account and billing emails |
| Cloudflare (if enabled) | Bot protection on signup |
5. Cookies
We use only necessary cookies: one to keep you signed in and one to protect forms against cross-site request forgery. No analytics or advertising cookies.
6. Your rights
Depending on where you live (for example under GDPR, UK GDPR or CCPA), you can ask to access, correct, export or delete your personal data, or object to how we use it. You can delete your account yourself in Settings. For anything else, email support@veqen-app.com. You can also complain to your data protection authority.
7. International transfers
We may process data in the United States and other countries where our providers operate, using safeguards such as the EU Standard Contractual Clauses where required.
8. Security
API keys and passwords are stored only as one-way hashes. Data is encrypted in transit (HTTPS). Access to production systems is restricted.
9. Changes
We'll post changes here and email account holders about material ones.
Contact
Keyveve, Inc. · support@veqen-app.com