1. Who operates the service
Verid-Beacon is operated by S. Ashrath, its founder. The privacy contact is shaikashrath07@gmail.com. The service is intended for people aged 18 or older. We will update this section if the operating entity or contact details change.
2. Information we process
- Account details: email address, optional name, profile photo, and identity information returned by Google or GitHub when you choose those sign-in methods. Uploaded profile photos use a private Supabase Storage bucket; account pages request short-lived signed links. Supabase Auth handles authentication credentials and session tokens; the Verid-Beacon application database stores an account profile linked to the Supabase identity. The app does not store your raw password in its profile record.
- Website and check data: website names and URLs you save or submit, HTTP status and response-time measurements, check outcomes, selected security-header/TLS/DNS findings, and related error details.
- Reports: the target and test evidence used to generate a report, the generated report, and its creation time when the report is saved to your account.
- Browser storage: the app uses browser storage for preferences such as theme, selected website, local check history, and notification settings. Supabase session cookies are used to keep you signed in.
- Platform analytics: total registered account counts and account creation dates are used to report overall registrations. Optional activity analytics are off by default. If you turn them on in Account Security, the service stores a private account identifier, broad page category, sign-in time, and actions such as checks or reports. It does not put your email, target URL, test evidence, or report text into those activity events. The private dashboard displays group totals only. Turning the setting off clears your saved product-activity events and live session record; account registration totals remain until the account is deleted.
- Authenticator security: if you set up two-factor sign-in, Supabase Auth enrolls the authenticator app and verifies its time-based one-time codes. The app does not send SMS codes or collect payment details for this security option.
- Service operations: our hosting, authentication, and database providers may process technical information such as request metadata, IP address, and security logs to operate and protect the service. Exact log retention depends on the configured provider and plan.
3. Why we use information
We use information to create and secure accounts, authenticate sign-ins, associate saved websites and reports with the correct user, run checks and generate reports you request, display your history, respond to support requests, prevent misuse, and maintain the service. Optional activity analytics are based on your choice in Account Security. Where applicable law requires a legal basis, account, check, and report processing is generally needed to provide the service you request; security and abuse prevention rely on our interest in protecting the service and its users; legal disclosures rely on applicable legal obligations; and optional processing that requires consent is based on that consent. We do not use account or check data for targeted advertising.
4. AI-assisted reports and third parties
If you request a report using Synexis Insights, the server sends the target and test evidence you submitted to Google’s Gemini API to create the response. Avoid including passwords, access tokens, personal customer data, or other secrets in a target or test evidence. The report may be saved in your Verid-Beacon account history.
Google’s Gemini API data handling depends on the service tier and current Google terms. Google states that content submitted through the unpaid tier may be used to improve its products, while paid-tier content is not used for that purpose. For production reports, configure paid API billing and review Google’s Gemini API usage and data policies. We cannot promise zero provider retention; do not submit confidential or personal information in report evidence.
Supabase provides authentication, database, and storage infrastructure. Google and GitHub provide optional federated sign-in. Those providers process information under their own terms and privacy notices. We do not sell account information or website-check data, and the current app does not configure advertising trackers.
6. Retention and deletion
We keep account details and saved websites, checks, and reports while the account remains active or while needed to provide the requested feature. Optional activity events are retained in the account’s analytics history until you turn sharing off, which clears those events, or the account is deleted. You can remove saved websites in the app. Account-wide deletion is not currently self-service: email us from the account address to request account closure and deletion of associated data. We will verify the request and delete or de-identify data we control unless a limited copy must be retained for security, legal, or dispute-resolution reasons. Backups and provider logs may persist for a limited period under provider retention schedules. Where an exact period depends on an event, such as account closure or a provider’s backup cycle, that event is the retention criterion.
7. Your choices and privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent where processing relies on consent. You can turn optional activity analytics on or off in Account Security; turning it off clears product activity already saved for your account. You can also ask us to explain or review a request. Email shaikashrath07@gmail.com; we may request reasonable information to verify identity. You may have a right to complain to your local privacy regulator.
8. International processing and security
Verid-Beacon is offered internationally, and service providers may process data in countries other than yours. The location and transfer safeguards depend on each provider, the project’s configuration, and applicable law. You can ask us for information about the safeguards relevant to your account by emailing the privacy contact above. Supabase publishes its Data Processing Addendum; Google publishes its Gemini API usage and data policies. We use Supabase Auth and server-side database access, and apply access controls in the application; this notice is not a certification that every security control or legal transfer mechanism has been independently audited. No online service can guarantee absolute security.
9. Required information and automated decisions
An email address is needed to create and access an account. A name is optional. You choose whether to save websites or request checks and AI reports; without the URL and evidence needed for a particular feature, that feature cannot run. Not providing optional information does not prevent you from using unrelated account features.
Verid-Beacon does not use account information to make decisions solely by automated processing that produce legal or similarly significant effects about you. AI-assisted reports analyze submitted website-test evidence and are informational; they do not decide account eligibility, employment, credit, or access to essential services.
10. Children and changes
The service is for adults and is not designed for or directed to people under 18. We do not knowingly invite children to create accounts. If you believe a minor has provided account information, contact us so we can review and take appropriate action.
We may update this notice as the product, providers, or legal requirements change. Material changes will be highlighted in the service where reasonably practical.