Back to Verity

Notice for Quebec Residents (Law 25 / Loi 25)

In compliance with Quebec's Act respecting the protection of personal information in the private sector: our Privacy Officer may be reached at legal@verityskills.com. You have the right to access and correct your personal information. We communicate personal information outside Quebec (to the United States) via Stripe, Anthropic, Supabase, and Vercel for service delivery. Data transfer agreements are in place.

Privacy Policy

Last Updated: February 27, 2026

1. Introduction

Verity (“we,” “our,” or “us”), a product of C2MCI Group Inc., is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Verity financial anomaly detection service.

2. Information We Collect

  • Account Information: Email address and payment information (processed via Stripe) when you subscribe.
  • Subscription and Tier Data: Your current subscription tier (Retail, Pro, or Fund) and subscription status.
  • Watchlist Data: Ticker symbols and financial instruments you add to your personal watchlist to receive targeted anomaly alerts.
  • Alert Preferences: Notification settings, push notification subscription, and delivery preferences.
  • API Usage Data: Timestamps and metadata for API calls made using your vtk_ API key. We do not log the content of your API requests beyond what is necessary for billing and abuse prevention.
  • Usage Data: Information about how you access and use the Service, including pages visited and features used (via PostHog analytics).
  • Technical Data: IP address, browser type, and device information for security and fraud prevention.

3. How We Use Your Information

  • Provide, operate, and maintain the Verity service and deliver anomaly alerts
  • Process your subscription payments and manage your account
  • Personalize alert delivery based on your watchlist and tier
  • Detect and prevent abuse, fraud, and unauthorized API access
  • Improve and develop our anomaly detection models and service features
  • Communicate with you about your account, service updates, and support

4. What We Do Not Do

  • We do not sell your personal information to third parties
  • We do not share your watchlist or alert history with other users
  • We do not use your watchlist data for our own trading or for third-party commercial purposes
  • We do not store the plaintext of your API key — only a one-way SHA-256 hash and a 4-character display hint are retained

5. Sharing of Information

We may share information only with:

  • Service Providers: Stripe (payment processing), Supabase (database hosting, United States), Anthropic (AI analysis, used when you invoke skill endpoints), PostHog (product analytics), Vercel (hosting infrastructure). These providers process data on our behalf under data protection agreements.
  • Legal Compliance: When required by applicable law, regulation, court order, or to protect the rights and safety of Verity, our users, or the public.

6. Data Retention

We retain your account data for as long as your account is active. Alert and anomaly event history is retained for 12 months. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Your Rights (GDPR / CCPA)

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and associated personal data
  • Export: Request a machine-readable export of your data (email, watchlist, alert history)
  • Opt-Out: Opt out of non-essential communications at any time

To exercise these rights, email legal@verityskills.com. We will respond within 30 days. California residents: we do not sell personal information and will not discriminate against you for exercising your CCPA rights.

8. Security

We use industry-standard security measures including: TLS encryption in transit, hashed API key storage (SHA-256, never plaintext), API-level authentication and authorization on all data access endpoints, and regular security audits. However, no electronic transmission or storage is 100% secure. You are responsible for the security of your API key and account credentials.

9. Specific Information for Quebec Residents (Law 25)

In compliance with Quebec's Act respecting the protection of personal information in the private sector:

  • Privacy Officer: The person responsible for the protection of personal information at Verity is our Privacy Officer. You may contact them at legal@verityskills.com.
  • Right to Access and Correction: You have the right to request access to the personal information we hold about you and to request correction if it is inaccurate.
  • Data Transfer: We communicate your personal information outside of Quebec (specifically to the United States) to our service providers (Stripe, Anthropic, Supabase, Vercel) for the purpose of providing the service. We have agreements in place to ensure your data is protected.

10. International Data Transfers

Your information may be stored and processed in the United States, where our primary infrastructure providers (Supabase, Vercel) operate. By using the Service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Continued use after changes constitutes acceptance.

12. Contact

Privacy questions or rights requests: legal@verityskills.com

Verity is a product of C2MCI Group Inc.

Terms of Service →Contact →