Vera Civic: Privacy Policy

Effective date: 1 November 2026 · Version: 1.0

Summary in plain words

Today you use Vera without an account, so we do not ask for your name, email or phone number. We do keep your chats with Vera, a random code from your browser and your internet (IP) address, so that Vera can answer you, count daily limits and stay safe. To answer you, Vera sends your words to outside AI companies, mainly Google and OpenRouter, and if you use the microphone, your voice goes to Groq. Vera does not use your conversations to train AI models. You have rights over your data under the Nigeria Data Protection Act 2023, and you can always complain to the Nigeria Data Protection Commission.

---

1. Who we are

1.1 Vera Civic is run by VERA CIVIC LIMITED (RC 9669132), a private company limited by shares under the Companies and Allied Matters Act 2020. Our address is 2 Cajeoleforo Street, Iju Ishaga, Lagos, Nigeria.

1.2 We decide how your personal data is used, so we are the "data controller".

1.3 For anything about your personal data, email support@veracivic.com, or write to us at the address above.

---

2. What this policy covers

2.1 This policy covers the Vera Civic website at veracivic.com as it works today.

2.2 Today Vera has no accounts, no sign-in and no paid plans. Before we add them, we will update this policy.

2.3 Our Terms of Service set the rules for using Vera. Read them at veracivic.com/terms.

---

3. The personal data we collect

3.1 What you give us

• Your messages and Vera's answers. Everything you type to Vera, and what Vera writes back. Your messages can include personal details if you choose to share them.
• Your voice, if you use the microphone. The recording is sent to Groq to be turned into text. Vera itself does not keep the recording. Voice input is for adults.
• Emails you send us. If you write to support@veracivic.com, we receive your email address and what you write.

3.2 What is created when you use Vera

• A device code. Your browser keeps a random code for Vera (called vera:device). It is sent with your questions so we can count the daily limit. It does not contain your name.
• Your internet (IP) address. Our servers see it on every request. We use it to count usage limits and to stop abuse.
• Technical logs. Our servers write logs to find faults and stop attacks. See section 8.3.

3.3 What we do not collect

• We do not ask for your name, email address, phone number or date of birth.
• We do not take payments, so we hold no card or bank details.
• We do not read your device's location (GPS).
• We do not use advertising or analytics cookies.

---

4. Why we use your data and our lawful basis

The Nigeria Data Protection Act 2023 ("NDPA") lets us use personal data only on a lawful basis listed in section 25(1).

---

5. How Vera's AI uses your words

5.1 Vera does not run its own AI model. To answer you, we send your message, the recent conversation and the sources Vera found to an outside AI company, which writes the reply.

5.2 The AI companies we use are:

• Google (Gemini models): to write answers, sort questions, plan searches and summarise sources.
• OpenRouter, which passes requests to DeepSeek models: to check whether search results match your question, and in some cases to help write answers.
• Groq: to turn your voice into text when you use the microphone.

5.3 Vera does not use your conversations to train AI models.

5.4 Our team does not read chats as a matter of routine. The exception is the security alerts in section 8.3.

5.5 Vera can be wrong, and it cannot see what you do. It only knows what you tell it.

---

6. Safety messages

6.1 Vera checks each message against a list of warning words and phrases. These are signs that someone may be in danger, for example violence, abuse, self-harm or a medical emergency.

6.2 If a message matches, Vera looks up checked help services and gives them to you. Safety help is free, needs no account, and does not count towards your daily limit.

6.3 A safety message is part of your chat. It is kept like any other message (section 8).

6.4 Vera cannot call anyone or send help. If you are in danger now, call 112. Our Safety page at veracivic.com/safety lists checked help lines.

---

7. Who receives your data

7.1 We do not sell personal data, and we do not share it with advertisers.

7.2 We use these service providers to run Vera. They may use your data only to provide their service to us.

7.3 When the law requires it. We may share personal data if a law, a court order or a lawful request from a public authority requires it, or to protect someone's life or safety.

7.4 If the company changes hands. If VERA CIVIC LIMITED merges, is sold or reorganises, personal data may pass to the new owner, who must respect this policy.

---

8. How long we keep your data

8.1 Chats. We delete a chat automatically once it has had no new messages for 30 days. The clean-up runs once a day. A copy of the chat open in your browser tab is cleared when you close the tab.

8.2 Usage limit counters. These counters use your IP address or device code. They expire after 1 hour or 24 hours.

8.3 Logs and security alerts.

• Our servers write technical logs. They can include your IP address, the web address you asked for, error details, and short parts of your question.
• If a message looks like an attempt to trick Vera into breaking its rules, we record your IP address and the first 200 characters of the message. We also send them to our team's alert channel on Telegram.
• When the website has an error, we send our team a short report on Telegram with the web address and the error message.
• We have not yet set a fixed period for deleting logs. We keep them only as long as we need them to run and protect Vera.

8.4 Voice. Vera does not store your recording. Groq receives it to turn it into text.

8.5 The device code stays in your browser until you clear your browser storage.

8.6 Emails you send us are kept as long as we need them to deal with your message.

---

9. Sending data outside Nigeria

9.1 Our servers and service providers are outside Nigeria, mainly in Europe and the United States. So your personal data is sent outside Nigeria.

9.2 OpenRouter does not always use the same company to run a model. So your words may also be processed in other countries.

9.3 We send only what each provider needs to do its job.

---

10. Children

10.1 Vera is for people aged 12 and over.

10.2 If you are under 18, you may use Vera only with your parent's or guardian's consent. Safety help is open to everyone. This follows section 31 of the NDPA, which says a parent or legal guardian gives consent for a child.

10.3 Vera does not ask your age and cannot check it. So a child's messages are handled the same way as an adult's, by the providers in section 7.

10.4 Voice input is for adults. If you are under 18, please type instead.

10.5 People under 18 cannot buy paid plans.

10.6 If you are a parent or guardian and think your child has used Vera without your consent, email support@veracivic.com. We will help remove what we can find.

---

11. Your rights

11.1 Under the NDPA you have the right to:

• be told how we use your data (this policy);
• see your data and get a copy (section 34);
• correct data that is wrong or incomplete (section 34);
• delete your data (section 34);
• ask us to limit how we use it in some cases;
• take back consent at any time, where we rely on consent (section 35);
• object to our use of your data, including where we rely on legitimate interests (section 36);
• not be subject to a decision based only on automated processing that has legal or similarly serious effects on you (section 37);
• get your data in a common, machine-readable format (section 38); and
• complain to the Nigeria Data Protection Commission if you think we have mishandled your data (section 46).

11.2 How to ask. Email support@veracivic.com and tell us which right you want to use. Because Vera has no accounts, please tell us enough to find your data, such as when you chatted and what you asked. We may ask you to confirm details before we act. We will answer within 30 days, free of charge.

11.3 Complaints to the regulator. You can complain to the Nigeria Data Protection Commission at any time. You do not have to come to us first, but we would like the chance to help.

11.4 Automated tools. Vera uses automated tools: the safety check in section 6, and the daily limits. None of them makes a decision with legal or similarly serious effects on you. If you think one has, write to us and a person will review it.

---

12. How we protect your data

12.1 We use technical and organisational measures suited to the risk (NDPA section 39). For example, we limit how often anyone can send messages, we protect the site's forms against attacks from other websites, and we limit who on our team can reach our servers.

12.2 No system is perfectly secure.

12.3 If a security breach puts your personal data at risk, we will tell the Nigeria Data Protection Commission within 72 hours of becoming aware of it (NDPA section 40). If the risk to you is high, we will tell you as clearly as we can, as far as we are able to reach you.

---

13. Cookies and browser storage

13.1 Cookies. Vera sets one cookie, vera_csrf. It is a security cookie that stops other websites from sending requests as you. It is deleted when you close your browser.

13.2 Browser storage. Vera keeps some items on your device, not on our servers:

• vera:device: the random device code (section 3.2);
• vera:lang, theme and vera.readingPrefs: your language and display settings;
• vera:chat:v1 and similar items: the chat open in this tab, cleared when you close the tab.

13.3 You can clear cookies and browser storage in your browser settings at any time.

---

14. Changes to this policy

14.1 We may update this policy when Vera or the law changes. We will show the date at the top.

14.2 If a change matters, for example a new kind of data, a new purpose or a new AI provider, we will show a notice on veracivic.com before it takes effect.

14.3 We keep earlier versions and will show them on request.

---

15. Contact

VERA CIVIC LIMITED, 2 Cajeoleforo Street, Iju Ishaga, Lagos, Nigeria.

Email: support@veracivic.com