← Vereyo

Privacy Policy

Effective date: June 26, 2026

This Privacy Policy explains how TopMail, Inc., a Delaware corporation doing business as Vereyo ("Vereyo," "we," "us," or "our"), collects, uses, discloses, and protects information in connection with the Vereyo website, applications, APIs, and related services (the "Service").

Vereyo provides software for construction professionals and is intended for business use. This Policy is incorporated into our Terms of Service.

1. Information We Collect

Information you provide to us.

  • Account and contact information — name, email address, company name, password (stored hashed), and similar details you provide when you register or contact us.
  • Customer Content — the drawings, plans, PDFs, project files, project addresses, measurements, and other materials you upload to or generate through the Service.
  • Communications — information you provide when you email us, request support, or respond to surveys.
  • Billing information — if you purchase a paid plan, billing details are collected and processed by our payment processor; we do not store full payment card numbers.

Information we collect automatically.

  • Usage and device data — pages and features used, actions taken, timestamps, referring pages, browser and device type, operating system, and approximate location derived from IP address.
  • Log data — IP address, request metadata, and diagnostic information collected by our servers and infrastructure providers.
  • Cookies and similar technologies — see Section 7.

We do not intentionally collect special categories of personal data, and the Service is not directed to children under 18.

2. How We Use Information

We use information to:

  • provide, operate, secure, and maintain the Service, including processing your Customer Content to generate Outputs (takeoffs, measurements, and estimates);
  • create and manage your account and authenticate you;
  • process payments and manage subscriptions;
  • provide customer support and respond to your requests;
  • monitor, debug, analyze, and improve the Service, including the accuracy and performance of our automated and AI features;
  • communicate with you about the Service, including service, security, and administrative messages, and (where permitted) product updates;
  • detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms; and
  • comply with legal obligations and enforce our agreements.

AI processing. To generate Outputs, your Customer Content (for example, plan images and extracted text) is processed by automated systems and transmitted to third-party AI/model providers acting as our subprocessors (see Section 4). We use these providers under terms intended to restrict use of your content to providing the service to us.

3. How We Share Information

We do not sell your personal information. We share information only as follows:

  • Service providers / subprocessors — vendors that host, store, process, secure, or support the Service, acting on our behalf and under contract (see Section 4).
  • At your direction — with people or integrations you authorize.
  • Within your organization — with other authorized users of your account, as applicable.
  • Legal and safety — when we believe disclosure is required by law, legal process, or governmental request, or is necessary to protect the rights, property, or safety of Vereyo, our users, or the public.
  • Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

4. Subprocessors

We rely on the following categories of third-party subprocessors to operate the Service. Specific providers currently include:

  • Cloud hosting and application delivery — Vercel.
  • Database, authentication, and file storage — Supabase.
  • AI / machine-vision model processing — Google Cloud (including Vertex AI).
  • Background job/message delivery — Upstash.
  • Product analytics — PostHog.

This list may change as the Service evolves. We will maintain a current list and provide it on request at legal@vereyo.com.

5. Data Retention

We retain personal information and Customer Content for as long as your account is active or as needed to provide the Service, and thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We may delete or de-identify information when it is no longer needed. You can request deletion as described in Section 6; note that backups and logs may persist for a limited period before being overwritten.

6. Your Choices and Rights

  • Access and update — you can access and update your account information within the Service.
  • Deletion — you may request deletion of your account and associated data by contacting legal@vereyo.com.
  • Marketing — you can opt out of non-essential marketing emails using the unsubscribe link; we may still send service and administrative messages.
  • California residents — to the extent the California Consumer Privacy Act (as amended by the CPRA) applies, you have rights to know, access, delete, and correct personal information, and to opt out of "sale" or "sharing" of personal information. We do not sell personal information. You may exercise these rights by contacting legal@vereyo.com, and we will not discriminate against you for doing so.
  • Other U.S. states — residents of certain other states may have similar rights; contact us to exercise them.

We will verify requests as required by law before acting on them.

7. Cookies and Analytics

We and our providers use cookies and similar technologies (such as local storage and device identifiers) to:

  • keep you signed in and maintain your session (strictly necessary);
  • remember preferences; and
  • measure and analyze usage so we can improve the Service (analytics, currently via PostHog).

Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies may prevent parts of the Service from working (for example, staying signed in). Because the Service is offered to U.S. business users, we rely primarily on disclosure rather than a consent banner; if we expand to jurisdictions that require consent, we will provide appropriate controls.

8. Security

We use technical and organizational measures designed to protect information, including encryption in transit, access controls, and reliance on reputable infrastructure providers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. International Users

The Service is operated from, and information is processed in, the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your jurisdiction.

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide notice by posting the updated Policy with a new effective date and, where appropriate, by other means. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

11. Contact Us

Questions or requests regarding this Policy or your information:

TopMail, Inc. (d/b/a Vereyo) · 16192 Coastal Highway, Lewes, DE 19958 · legal@vereyo.com