Privacy Policy
Last updated: 2026-06-30
Summary of Key Points
This Privacy Notice applies to Nicat Əsgərzadə Akif oğlu (doing business as Veridian) ("we," "us," or "our"). It describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at https://veridianly.com, download and use our mobile application Veridian, or engage with us in other related ways.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@veridianly.com.
1. What Information Do We Collect?
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Personal information you disclose to us
The personal information we collect includes the following categories:
- Names
- Email addresses
- Usernames
- Password (hashed)
- Financial account information (bank names, types, balances)
- Transaction data (amounts, currency, dates, notes, labels)
- Payment card label (an optional free-text label you type, e.g. "Visa ending 1234" — never a real card number; we do not capture cards or use this to charge you)
- User-generated content (notes, categories, beneficiary names)
- Device information (mobile identifiers for session management)
- Usage / analytics data (GA4 on website)
Device and mobile permissions
We may request access to certain features of your mobile device, including:
- Geolocation Information — Our mobile application may request location permission for potential future features. We do not currently collect or process location data. See "14. Location Permission" below. You may grant or revoke this permission in your device's settings.
- Mobile Device Access — We may request access to your device's camera and photo library so you can attach receipt images to transactions. See "15. Camera/Photos" below. You may grant or revoke this permission in your device's settings.
- Mobile Device Data — We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, and hardware model.
Information automatically collected
Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information.
- Log and Usage Data — Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type and settings, and information about your activity in the Services.
- Device Data — We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, and more.
Google API
Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
2. How Do We Process Your Information?
We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your personal information for the following purposes:
- To facilitate account creation and authentication and otherwise manage user accounts.
- To deliver and facilitate delivery of services to the user.
- To respond to user inquiries/offer support to users.
- To send administrative information to you, including details about our products and services, changes to our terms and policies.
- To protect our Services as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
- To identify usage trends so we can improve the Services.
- To save or protect an individual's vital interest when necessary, such as to prevent harm.
3. What Legal Bases Do We Rely On to Process Your Information?
We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
If you are located in the EU or UK, the legal bases we rely on include: Consent, Performance of a Contract, Legitimate Interests, and Legal Obligations. If you are located in Canada, we may process your information if you have given us specific permission (express consent) or in situations where your permission can be inferred (implied consent). You can withdraw your consent at any time.
- Consent — We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
- Performance of a Contract — We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you.
- Legitimate Interests — We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms.
- Legal Obligations — We may process your information where we believe it is necessary for compliance with our legal obligations.
- Vital Interests — We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party.
4. When and With Whom Do We Share Your Personal Information?
We may share information in specific situations described in this section and/or with the following third parties. We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. We have contracts with our third-party service providers. The third parties we may share personal information with include:
- Cloud Computing Services (e.g., DigitalOcean)
- Communication and chat services (e.g., ConvertKit)
- Functionality and Infrastructure Optimization (e.g., Open Exchange Rates)
- User Account Registration and Authentication (e.g., Google Sign-In)
- Web and Mobile Analytics (e.g., Google Analytics)
- Website Performance Monitoring (e.g., Honeycomb)
- Business Transfers — We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
5. Do We Use Cookies and Other Tracking Technologies?
We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.
Google Analytics
We may share your information with Google Analytics to track and analyze the use of the Services. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.
6. How Do We Handle Your Social Logins?
Our Services offer you the ability to register and log in using your Google account (Google Sign-In). Where you choose to do this, Google shares a limited set of profile information with us — specifically your name and email address. We do not receive a friends list, profile picture, or other social-graph data, and we do not support Facebook or other social logins.
We will use the information we receive only for the purposes that are described in this Privacy Notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider.
7. Is Your Information Transferred Internationally?
Our servers are located in the Netherlands. If you are accessing our Services from outside the Netherlands, please be aware that your information may be transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we may share your personal information.
If you are a resident in the EEA, UK, or Switzerland, we will not transfer your personal information to countries that are not deemed to provide adequate protection for personal data without appropriate safeguards in place.
8. How Long Do We Keep Your Information?
We keep your personal information only for as long as you maintain an active account with us. When you delete your account, we delete or anonymise your personal information within 30 days, except where a longer retention period is required by law (for example, records the operator must keep to meet Azerbaijani tax and accounting obligations). We do not retain your personal information for any purpose once it is no longer needed to provide the Services or to meet such a legal obligation.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible, then we will securely store your personal information and isolate it from any further processing until deletion is possible.
9. How Do We Keep Your Information Safe?
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.
Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
10. Do We Collect Information From Minors?
We do not knowingly collect, solicit data from, or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services.
If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at privacy@veridianly.com.
11. What Are Your Privacy Rights?
Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.
In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws, including the right to request access, correction, or deletion of your personal information, as well as the right to withdraw consent where we are relying on your consent to process your information.
If you would at any time like to review or change the information in your account or terminate your account, you can contact us or use the self-service options described below. Upon your request to terminate your account, we will delete or anonymise your account and information within 30 days, except where a longer retention period is required by law.
We will respond to requests to access, correct, port, or delete your personal information within one month of receiving the request, as required under applicable data protection law. If your request is complex or we receive a number of requests, we may extend this period and will tell you if we do.
Account Information
To review or change the information in your account or to terminate your account, you can:
- Log in to your account settings and update your user account.
- Contact us using the contact information provided.
- In-app: Users can delete their account from the account settings within the app.
- By email: Users can email privacy@veridianly.com to request account updates or deletion. Accounts are deleted within 30 days of the request.
12. Controls for Do-Not-Track Features
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If you are in the EEA, the UK, or another region with cookie-consent requirements, the primary way to control non-essential tracking on our website is the cookie consent banner described in our Cookie Policy, not the DNT signal.
13. Do United States Residents Have Specific Privacy Rights?
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.
Categories of Personal Information We Collect
The table below shows the categories of personal information we have collected in the past twelve (12) months. We only collect personal information from you for the following purposes: facilitating the delivery of our Services; receiving help through our customer support channels; and responding to your inquiries.
Sources of Personal Information
We collect personal information from the following sources: directly from you when you provide it, automatically as you use the Services, and from third-party service providers (e.g., Google Sign-In).
Your Rights
You have rights under certain US state data protection laws. These rights include:
We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising. We have not sold or shared personal information in this way in the preceding twelve (12) months.
- Right to know whether or not we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request the deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to non-discrimination for exercising your rights
- Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects
How to Exercise Your Rights
To exercise these rights, you can contact us by emailing us at privacy@veridianly.com. Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf.
California Shine The Light Law
California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name | YES |
| B. Personal information as defined in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information | YES |
| C. Protected classification characteristics under state or federal law | Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | NO |
| D. Commercial information | Transaction information, purchase history, financial details, and payment information | YES |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or other similar network activity | Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements | YES |
| G. Geolocation data | Device location (permission declared in app manifest; not currently collected or processed) | NO |
| H. Audio, electronic, sensory, or similar information | Images and audio, video or call recordings created in connection with our business activities | NO |
| I. Professional or employment-related information | Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us | NO |
| J. Education Information | Student records and directory information | NO |
| K. Inferences drawn from collected personal information | Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual's preferences and characteristics | NO |
| L. Sensitive personal Information | Account login information and financial information including account access details | YES |
14. Location Permission
Our mobile application requests access to your device's location. We request this permission but currently do not collect or process location data. This permission may be used in future features.
15. Camera/Photos
Our mobile application may request access to your device's camera and photo library for attaching receipt images to transactions.
16. Do We Make Updates to This Notice?
Yes, we will update this notice as necessary to stay compliant with relevant laws. We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
17. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, you may email us at privacy@veridianly.com or contact us by post at:
Nicat Əsgərzadə Akif oğlu 44 Jafar Jabbarli street Baku, Yasamal AZ 1065 Azerbaijan
18. How Can You Review, Update, or Delete the Data We Collect From You?
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.
To request to review, update, or delete your personal information, please email us at privacy@veridianly.com or use the in-app account deletion feature in Settings.