← Back to Verityx

Privacy Policy

Last updated: 4 May 2026

1. Who we are

Verityx is operated by Nevodia Ltd, a company registered in England and Wales, with registered office in Cambridge, United Kingdom. For data protection enquiries, contact us at privacy@verityx.io.

2. What data we process

Audit data: When you connect Verityx to your project management and source control systems, we process user stories, commit metadata, pull request metadata, test result metadata, and deployment records. We access this data in read-only mode. We do not access source code content, only commit metadata (author, date, message, files changed).

Account data: Name, email address, company name, and role — collected when you request a walkthrough or create an account.

3. Cookies and analytics

We use a single essential authentication cookie when users sign in. We do not use tracking cookies, third-party marketing pixels, or analytics cookies. Where service telemetry is collected for reliability or security, it is used only for platform operation and not for advertising or cross-site tracking.

4. How we use your data

Audit data is processed exclusively to generate delivery assurance findings for your project. It is not used for model training, shared with other clients, or retained beyond your configured retention period. Account data is used to provide the service and communicate with you about your engagement.

5. Data isolation

Each client's audit data is processed within an isolated tenant. There is no cross-tenant data access, no shared storage, and no data commingling between clients.

6. Data retention

Audit data retention is configurable per engagement. You may request deletion of all audit data at any time. By default, audit data is retained for 90 days after the final report is generated, after which it is automatically purged.

7. Third-party processors

We use infrastructure providers (cloud hosting, database services) that process data on our behalf under strict data processing agreements. We do not sell or share your data with third parties for their own purposes.

8. Your rights

Under UK GDPR, you have the right to access, rectify, erase, restrict processing of, and port your personal data. To exercise these rights, contact privacy@verityx.io.

9. Legal entity

Verityx is operated by Nevodia Ltd, registered in England and Wales, with registered office in Cambridge, United Kingdom.

10. Contact

For any privacy-related questions: privacy@verityx.io