Draft. This policy reflects our intended practices during closed beta. The binding final version will be reviewed by counsel before public launch (August 2026). Contact jorg@veracium.io with questions.

Privacy

Last updated: 14 April 2026

1. Who we are

Veracium GmbH i.G., Berlin, Germany, operates the VerifyLive platform ("Service"). GDPR data controller: Veracium GmbH i.G.

2. Data we collect

For all users: email, password hash, IP address at login time, user agent, audit log of platform actions. For journalists: KYC identity documents (processed by our KYC partner, not stored in plaintext by Veracium), device identifier, precise and fuzzed GPS coordinates during active assignments, captured media and its SHA-256 hashes, payout details (processed by Stripe). For organizations: organization registration documents, editor accounts, assignments created.

3. Journalist identity protection

Organizations never receive a journalist's real name, contact information, or unfuzzed GPS coordinates. Journalists are addressed by pseudonymous ID (Journalist-XXXXXX). The mapping between pseudonymous ID and real identity is held only by Veracium.

4. Data hosting

All data is processed in the European Union. Primary hosting: Frankfurt, Germany. Object storage: EU region. Anthropic Claude Vision is used for AI analysis under a data processing agreement; prompts and media are not retained for model training.

5. Your rights (GDPR)

You have the right to access, rectify, erase, restrict processing, port, and object. Journalists retain these rights even where the mapping to pseudonymous ID is the only link. Requests: jorg@veracium.io.

6. Retention

Stream metadata, SHA-256 hashes, and certificates are retained for the legal evidentiary period required by the purchasing organization (typically 7 years). Raw video can be deleted earlier on request, subject to pending legal proceedings.

7. Sub-processors

• Render (hosting, Frankfurt) • Anthropic (Claude Vision AI analysis) • Stripe (payments, Stripe Connect) • LiveKit (WebRTC streaming) • S3-compatible object storage, EU region • KYC provider (to be disclosed before public launch)

8. Contact

Veracium GmbH i.G., Berlin, Germany jorg@veracium.io

Privacy — Veracium-VerifyLive