Draft for review by counsel. Last updated 2026-07-03.
Two things, kept separate: (1) waitlist details you submit — your email, optional company, and the free-text answer to “what are you running agents for,” plus the referral/utm source in the link you arrived from; and (2) spend events you or your agents send to the API — structured fields only (model, tokens, cost, agent, principal, policy, project, merchant, amount, timestamps).
We do not persist raw request bodies beyond the structured event fields, and we do not store prompt or completion content. Emails live only in the waitlist table. API keys are stored only as SHA-256 hashes; your raw key is shown once and never recoverable from us.
Waitlist details are used to contact you about the design-partner program and product. Spend events are used to produce your tenant's books. Data is tenant-scoped; we do not read across tenants. Aggregate, non-identifying usage may inform product decisions.
We don't sell your data. Infrastructure runs on Cloudflare (Workers + D1). We retain waitlist and ledger data until you ask us to delete it. Email burak@veritally.ai to access, export, or delete your data.
Veritally is its own brand. This is informational and not legal advice.