VeryAIdocs

Legal

Terms of Use

Effective Date: July 25, 2025

These Terms of Use ("Terms") govern your access to and use of the services provided by Veros Inc. ("Veros," "we," "us," or "our"), including the Veros Identity Provider platform and all related applications, websites, and APIs (collectively, the "Service"). By accessing or using the Service, you agree to be bound by these Terms. If you do not agree, do not use the Service.

1. Eligibility and Acceptance

You must be at least 18 years of age to use the Service. By accessing or using the Service, you represent and warrant that you meet this age requirement and that you have the legal capacity to enter into a binding agreement.

Your use of the Service constitutes your acceptance of these Terms and our Privacy Policy. If you are using the Service on behalf of an organization, you represent that you have the authority to bind that organization to these Terms.

2. Description of the Service

Veros provides a palm-recognition biometric authentication service. The Service allows users to verify their identity using contactless palm scanning technology. Our system processes palm images to generate a secure, non-reversible mathematical representation referred to as a "palm model."

No palm images are stored. Palm images are used transiently during enrollment and verification and are deleted after conversion into the palm model. The palm model alone cannot be used to reconstruct or reverse-engineer an image of your palm.

3. Legal Basis for Processing

We process your personal and biometric data under the following legal bases:

  • GDPR Article 9(2)(a) — Explicit Consent: We obtain your explicit, informed consent before collecting or processing any biometric data. You may withdraw consent at any time.
  • GDPR Article 6(1)(f) — Legitimate Interests: We rely on legitimate interests for non-biometric processing activities such as fraud prevention and service security, where such interests are not overridden by your rights and freedoms.
  • Data Minimization: We collect only the minimum data necessary to provide the Service. Palm images are deleted immediately after model generation, and account identifiers are pseudonymous.
  • Data Subject Rights: You have the right to access, rectify, erase, restrict processing of, and port your personal data, as well as to object to processing and withdraw consent. See Section 9 for details.
  • Biometric Privacy Laws: We comply with applicable biometric privacy regulations, including the Illinois Biometric Information Privacy Act (BIPA), the California Consumer Privacy Act (CCPA), and other applicable state, federal, and international biometric data laws.

4. User Registration

When you register for the Service, you are assigned a random, pseudonymous account ID. This identifier does not contain or reveal any personal information. You are not required to provide your name or other identifying details to create an account.

Providing an email address is optional and is used solely for account recovery and important service communications if you choose to provide one.

You may delete your data at any time through the Service's account management features. Deletion of your account will result in the removal of your palm model and associated account data in accordance with our data retention policies described in Section 7.

5. Palm Enrollment and Biometric Data

During enrollment, you capture images of your palm using your device's camera. These images are processed either locally on your device or transiently on our servers to generate your palm model.

  • Palm images are deleted immediately after the palm model has been generated. Images are not stored on our servers or in any persistent database.
  • Only the encrypted palm model is retained. The palm model is a non-reversible mathematical representation that cannot be used to reconstruct your palm or any image thereof.
  • You may erase your palm model at any time using the "Erase" function in the application. After erasure, you may re-enroll by scanning your palm again to generate a new model.

6. Use Restrictions

You agree not to:

  • Use the Service in violation of any applicable local, state, national, or international law or regulation.
  • Reverse-engineer, decompile, disassemble, or otherwise attempt to derive the source code, algorithms, or underlying technology of the Service.
  • Attempt to gain unauthorized access to any portion of the Service, other users' accounts, or any systems or networks connected to the Service.
  • Interfere with, disrupt, or compromise the security, integrity, or performance of the Service or its infrastructure.
  • Use the Service to impersonate another person or entity or to misrepresent your identity or affiliation.
  • Use automated means (bots, scrapers, or other tools) to access the Service without our prior written consent.

7. Data Retention and Deletion

We retain biometric data (palm models) only under the following conditions:

  • Active consent: Your palm model is retained for as long as you maintain an active account and have not withdrawn consent.
  • User-initiated deletion: You may delete your palm model at any time using the "Erase" function within the application.
  • Automatic deletion: If your account has been inactive for 3 years after your last use of the Service, your biometric data will be automatically deleted.

Deletion of your palm model is performed through the "Erase" function available in the application. Once erased, the palm model is permanently removed from our systems.

Your data is stored in the United States. For information about international transfers, please see our Privacy Policy.

Fraud cases: In limited circumstances involving suspected fraud or security incidents, palm images may be temporarily retained for review and investigation. Such images are anonymized where possible, subject to strict access controls, and deleted promptly after the investigation concludes.

8. Sharing and Disclosure

We do not sell your biometric data or personal information. We may share data in the following limited circumstances:

  • Sub-processors: We engage trusted sub-processors who assist in providing the Service (e.g., cloud infrastructure providers). All sub-processors are bound by contractual obligations to protect your data.
  • Third-party applications: When you explicitly authorize a third-party application to verify your identity through the Service, we share only your pseudonymous account ID and usage metadata. Palm models are never shared with third parties.
  • Legal requirements: We may disclose data when required by law, regulation, legal process, or enforceable governmental request.
  • Fraud investigation: We may share data with law enforcement or regulatory authorities when necessary to investigate suspected fraud, security breaches, or violations of these Terms.

For transfers of personal data from the European Union or European Economic Area, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection.

9. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data, including your palm model.
  • Right to Object: Object to processing of your personal data based on legitimate interests.
  • Right to Restrict Processing: Request that we limit the processing of your personal data in certain circumstances.
  • Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Withdraw Consent: Withdraw your consent to biometric data processing at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

You may also lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.

To exercise any of these rights, contact us at legal@veros.org.

10. Security

We implement robust security measures to protect your data, including:

  • End-to-end encryption: All data transmitted between your device and our servers is encrypted in transit and at rest.
  • Limited internal access: Access to biometric data is restricted to authorized personnel on a strict need-to-know basis.
  • Secure pseudonymous identifiers: Your account ID is randomly generated and does not reveal personal information.
  • Privacy-by-design: Our system architecture is built with privacy as a foundational principle. Palm models are non-reversible, palm images are not stored, and data minimization is applied at every stage.

11. Intellectual Property

All intellectual property rights in and to the Service — including but not limited to software, algorithms, designs, trademarks, logos, documentation, and content — are and remain the exclusive property of Veros Inc. or its licensors.

Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Service for its intended purpose. This license does not include the right to copy, modify, distribute, sell, or lease any part of the Service or its underlying technology.

12. Suspension and Termination

We reserve the right to suspend or terminate your access to the Service, in whole or in part, at our discretion, for any of the following reasons:

  • Violation of these Terms or any applicable law or regulation.
  • Suspected fraudulent, abusive, or harmful activity.
  • Activity that threatens the security, integrity, or availability of the Service.
  • Compliance with legal obligations or law enforcement requests.

You may delete your account at any time through the application. Upon account deletion, your palm model and associated data will be removed in accordance with our data retention policies.

13. Changes to Terms

We may update these Terms from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you through one or more of the following channels:

  • In-app notification
  • Email (if you have provided an email address)
  • Posting the updated Terms on our website

Your continued use of the Service after the effective date of updated Terms constitutes your acceptance of the changes. If you do not agree with the updated Terms, you should discontinue use of the Service and delete your account.

14. Governing Law

These Terms shall be governed by and construed in accordance with the laws of The Cayman Islands, without regard to conflict of law principles.

If you are a resident of the European Union or European Economic Area, nothing in these Terms shall deprive you of the benefit of mandatory consumer protection provisions of the laws of your country of residence.

15. Contact Us

If you have any questions, concerns, or requests regarding these Terms of Use, please contact us at:

Veros Inc.
Email: legal@veros.org