Privacy Policy

1. Who We Are

Vericode provides caller and phone-number verification tools for Australian businesses. This Privacy Policy applies to the Vericode website, workspace application, API, and Sidekick browser extension.

2. Personal Information We Collect

We collect workspace and user identity information through WorkOS, including names, email addresses, organization membership, login events, and session metadata. We collect phone numbers submitted for verification, verification codes and outcomes, SMS dispatch logs, delivery status, provider response metadata, API key metadata, workspace settings, billing and plan metadata, and support or security correspondence you send us.

The Sidekick browser extension may record usage events needed to operate and debug the verification flow, such as connection state, selected phone-number text, send/check outcomes, and error states. The website uses aggregate, privacy-focused web analytics to understand page traffic.

3. Information We Do Not Collect or Sell

We do not scrape address books or contact lists. We do not use third-party advertising trackers. We do not sell personal information.

4. How We Use Personal Information

We use personal information to authenticate users, map WorkOS organizations to Vericode workspaces, send and check verification codes, show verification history, prevent abuse, manage quotas and billing, provide support, maintain audit logs, improve service reliability, and meet legal or regulatory obligations.

5. Disclosure and Service Providers

We disclose personal information only as needed to provide and operate Vericode. This includes WorkOS for authentication and organization management, MobileMessage for SMS delivery, Stripe for payments where billing is enabled, hosting and database providers, email and support tools, and professional advisers where necessary. We may also disclose information if required by law or to protect the security and integrity of the service.

6. Overseas Disclosure

We aim to keep primary application data in Australia where available. Some service providers, including WorkOS, Stripe, analytics, email, support, or infrastructure providers, may process or store information outside Australia. Where this occurs, we use reputable providers and take reasonable steps to protect information handled by those providers.

7. Security

We protect personal information using account-based access controls, WorkOS authentication, API key controls, encryption in transit, audit logging, least-privilege operational access, and monitoring appropriate for an early-stage SaaS product. No internet service can be guaranteed perfectly secure, but we work to prevent unauthorized access, misuse, loss, or disclosure.

8. Retention

We keep workspace, user, verification, SMS dispatch, billing, and audit records for as long as needed to provide the service, resolve disputes, investigate security or abuse issues, meet legal obligations, and support customer records. We delete or de-identify information when it is no longer needed for these purposes, unless we are required to retain it.

9. Access and Correction

You may request access to, or correction of, personal information we hold about you. We may need to verify your identity and your relationship to the relevant workspace before acting on a request.

10. Australian Privacy Principles

This policy is intended to support open and transparent management of personal information under APP 1, explain collection practices under APP 5, describe use and disclosure under APP 6, address overseas disclosure under APP 8, outline security under APP 11, and explain access and correction rights under APP 12.

11. Contact

Privacy enquiries can be sent to [email protected]. General support is available at [email protected].

12. Changes to This Policy

We may update this Privacy Policy as the service changes. The latest version will be published on this page with an updated date.