Privacy Policy
Effective 13 October 2026
Veridus is an inventory, sales and customer-credit app for businesses. This policy covers the Veridus mobile app, the web app at app.veriduspro.com and this website. It explains what data we collect, why, who we share it with, how long we keep it and what you can do about it. "Veridus", "we" and "us" mean the operator of the Veridus service. Contact us any time at [email protected].
In short: we collect what we need to run your business records and nothing more. We do not sell your data, we do not show ads, and we do not use your business data to train AI models. Your business data belongs to you.
1. Who is responsible for what
For your own account (as a business owner or staff member), Veridus decides how that data is used. For the records a business keeps about its own customers, staff and suppliers, the business decides what to record, and we store and process those records on the business's behalf. If you are a customer of a business that uses Veridus, contact that business first about the records it keeps about you; we will help it answer you.
2. What we collect and why
| Data | Why we use it |
|---|---|
| Account details: name, email address, phone number, business name, password (stored only as a one-way hash) | To create your account, sign you in, verify your email, reset your password and contact you about your account. |
| Business records you enter: products, prices, stock, sales, receipts, returns, payment methods and amounts, expenses, suppliers and purchases | This is the service itself: keeping your stock, sales and reports correct and in sync across your devices. |
| Your customers' details: names, phone numbers and the amounts they owe the business (credit sales) | So the business can track who owes it money. Veridus does not lend money and does not contact your customers. |
| Staff details and activity: staff names, phone numbers, roles and a log of actions such as sales, voids and price changes | So the owner can manage staff access and see who did what. |
| Precise location, only at checkout, and only if the owner has set a shop location and turned on sale-location checks | To record whether a sale was made at the shop, so the owner can spot sales rung up elsewhere. Location is read only while you are using the app, never in the background. If you refuse location permission, sales still go through. |
| Microphone and voice, only while you hold the microphone button to speak a sale | To turn what you say into products from your catalogue. See section 3. |
| Photos, only an image you choose to attach to a support ticket | To help us understand and fix the problem you report. |
| Bluetooth | Only to find and connect to your receipt printer. We do not collect data about nearby devices. |
| Diagnostics: app version, phone operating system, sync status, recent errors and the details of any records that have not synced yet (which can include sale and customer details). Sent only when you tap "Send diagnostic report", or automatically when syncing gets stuck if you turned on automatic reports | To find and fix problems, especially sales that are stuck and not reaching the server. Diagnostic reports are stored as support tickets. |
| Subscription payments: plan, amount, date and payment reference | To bill your subscription. Card and bank details are entered on our payment provider's page and never reach our servers. |
| Website visits: anonymous page views and button clicks on veriduspro.com | To understand which parts of the website are useful. This uses Vercel Web Analytics, which does not use cookies. |
Legal basis
We use account details and business records to perform our contract with you (providing the service you signed up for). Location, voice, photos and diagnostics are used only with your consent, given through your phone's permission prompt or by choosing to send a report, and you can withdraw it at any time in your phone's settings or the app. We keep security and deletion logs because we have a legitimate interest in protecting accounts and showing that requests were carried out, and we keep records when the law requires it.
3. Voice input
Speaking a sale is optional. When you use it, your phone's speech recognition service turns your voice into text. Where your phone supports it, this happens entirely on the phone. Where it does not, Android sends the audio to Google's speech recognition service to be converted to text, under Google's privacy policy. Veridus itself never receives, records or stores your audio. The resulting text is matched against your catalogue on your phone, and the words you teach the app ("my customers call this one 'Peak'") are stored only on your phone.
4. Data stored on your phone
So that you can keep selling without internet, the app keeps a working copy of your business data on the phone and sends changes to our servers when a connection is available. This copy stays on the phone when you sign out, so unsent sales are not lost. Deleting your account in the app removes it from that phone; uninstalling the app removes it from any phone.
5. Who we share data with
We do not sell or rent personal data. We share it only with the service providers we need to run Veridus, and only for that purpose:
- Hetzner (servers and database hosting, in the European Union)
- Cloudflare (secure network connections and encrypted backup storage)
- Resend (sending account, verification and report emails)
- Paystack and Flutterwave (processing subscription payments)
- Google (speech recognition on Android, as described in section 3)
- Vercel (hosting this website and the web app, and anonymous website analytics)
Veridus support staff can view an account only when you ask for help, and only in a time-limited, logged support session. We disclose data to authorities only when Nigerian law requires it.
Data stored outside Nigeria
Our servers are in Germany (European Union), and some of the providers above are based in the United States or the European Union, so your data is transferred outside Nigeria. We use only providers that protect data to a standard at least equal to the Nigeria Data Protection Act, under contracts that limit them to processing data on our instructions.
6. How we protect it
All data sent between the app and our servers is encrypted in transit (HTTPS). Passwords are stored only as one-way hashes. Each business's data is kept separate from every other business's. Our database is not reachable from the internet, and backups are encrypted.
7. How long we keep it
- While your account is open, we keep your data so the service works.
- If you delete your account, the business is closed at once and permanently deleted after 30 days. Staff logins deleted by the staff member are removed at once. See how account deletion works.
- Deleted data leaves our encrypted backups as those backups expire on their normal rotation.
- We keep a minimal record that a deletion happened (account ID, date, number of records removed) in our security log, and our payment providers keep payment records under their own legal duties.
8. Your rights
Under the Nigeria Data Protection Act 2023 and similar laws, you can ask to see the personal data we hold about you, correct it, receive a copy, object to or restrict how we use it, or delete it. You can correct most details yourself in the app under More → Edit Profile and delete your account under More → Delete Account. For anything else, email [email protected]. We will reply within 30 days. You may also complain to the Nigeria Data Protection Commission.
9. Children
Veridus is a business tool for adults. It is not meant for anyone under 18, and we do not knowingly collect data from children.
10. Changes to this policy
If we change this policy, we will update the date at the top. If a change affects how we use your data in a significant way, we will tell you in the app or by email before it takes effect.
11. Contact
Email [email protected] with any question about privacy or your data.