Verity — Privacy
Last updated: October 1, 2026 (test release)
Who runs Verity. Verity is a test product run by Kestra [legal name and state of incorporation], a company owned by Ankit Goyal. Questions about this policy: [contact email on the Verity domain].
What Verity is. Verity reads what you connect — your mail, your documents, your account feed — and keeps a record it can show you line by line. It never sends an email, never moves money and never files anything; you and your advisers do those.
What we read
- Your mail (Google). With your permission Verity reads your Gmail messages and attachments. It asks Google for read-only access and nothing else: it cannot send, draft, delete or change anything in your account. Verity's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to build and maintain your record and to show it to you. It is never used for advertising, never sold, never shared for anyone else's purposes, and never used to train AI models.
- Documents you give us. Statements, tax forms, letters you photograph, folders you upload.
- Your account feed, if you connect one (read-only balances and transactions through the aggregator you choose). Verity cannot trade or transfer.
- Your answers to Verity's questions, and the choices you save.
What we do with it
Verity builds a record: facts with the page they came from, items that need doing, questions, and drafts that wait for you to send from your own mail. Every number on a page links to the document it came from.
To read your documents, Verity sends redacted text to the AI providers we use — Anthropic, OpenAI and Google. Each is under terms that keep nothing: they do not retain your data and do not train on it. In normal operation identifiers (account numbers, tax IDs) are reduced to their last four before anything goes to them.
Who can see your data
- You. Everything, always, with an export at any time.
- Verity's own systems, which read your record to do their work. Every read goes through one gateway and is logged.
- The person who runs Verity, and the AI tools he builds it with — Anthropic's Claude and Cognition's Devin, both on terms that keep nothing — can read your data as it is when something needs debugging. Every such read is logged with its reason, and you will see it on your Settings page under "Who has read your data."
- No one else. Verity has no advertisers, no data partners, and no resellers. We disclose data only if the law compels it, and we will tell you unless the law forbids that too.
Where it lives and how it is protected
Your data is stored in the United States on Fly.io (database) and Tigris (documents), encrypted at rest; your documents and mail bodies are encrypted under a key that belongs to your household alone. Connections to your mail and accounts use tokens that are sealed with that key and hold the narrowest scope the provider offers. We keep rolling backups for seven days.
How long we keep it
| what | while you use Verity | when you leave |
|---|---|---|
| your record — facts, items, your answers, drafts, the access log | kept and versioned; nothing is silently deleted | exported to you as files; then deleted, and gone from backups within seven days |
| your documents and mail bodies | kept, encrypted under your household key | exported to you; then the key is destroyed, which makes them unreadable |
| the working archive (redacted prompts and responses) | kept, redacted | purged within seven days |
| the search index (redacted text) | kept | purged |
| what the AI providers see | sent per request; zero retention by contract | nothing to delete |
| backups | rolling, seven days | expire within seven days |
| test cases built from your documents | only with your separate written consent | purged |
Leaving
Settings › "Leave Verity" gives you everything as files first. Then the key to your documents is destroyed and the rest is gone within seven days. There is no waiting period and no one to convince.
Your choices
You can disconnect your mail or an account at any time in Settings (and at Google's own security settings). You can see every read of your data, pause everything new, export, or leave.
Children
Verity is for adults managing their own household's affairs. It is not offered to anyone under 18.
Changes
If this policy changes in a way that matters, you will see it on your Home page before it takes effect, and you can leave before it does.