Data Processing Agreement
Last updated: June 30, 2026
This Data Processing Agreement ("DPA") forms part of our Terms of Service and Privacy Policy. It explains how Veritas Social processes personal data when you use the service.
1. Scope
This DPA applies to account data, profile data, content you upload, and any other personal data processed to provide and secure the service.
2. Roles and responsibilities
- Users control the content they create and share.
- Veritas Social processes that data to host, transmit, display, and secure the service.
- Veritas Social is also a controller for account, billing, safety, and analytics data needed to run the platform.
3. Sub-processors
Under GDPR, we may use third-party processors to help deliver the service. Our current sub-processors include:
- Supabase - database hosting, authentication, and file storage
- OpenAI - AI-assisted product features such as writing, translation, or content help where enabled
- Expo - push notifications and app delivery
- Google - mobile device services and translation tooling where used on device
We only use processors that are subject to appropriate contractual and security obligations.
4. Security
- Encryption in transit and at rest where supported.
- Access controls and authentication for internal systems.
- Reasonable administrative and technical safeguards.
5. Data subject rights
Where applicable, you may request access, correction, deletion, or portability of your data.
- Access your personal data.
- Correct inaccurate data.
- Request deletion where permitted by law.
- Request a portable copy where required.
Requests can be made to hello@veritassocial.org.
6. Retention and contact
We keep data only for as long as needed to provide the service, satisfy legal obligations, resolve disputes, and enforce agreements. For DPA questions, contact hello@veritassocial.org.