Privacy Policy

Effective October 13, 2026. This policy explains what personal information VEARA, Inc. ("VEARA") collects when you use VEARA, how it is used and shared, and the choices you have.

1. Information we collect

Account. Your email address, your name, and a password, which our sign-in provider stores and VEARA's servers never receive. If you sign in with Google, Google shares your name and email address with us.

Orders. The name, shipping address and phone number you give for delivery, the addresses you save, the items you order and what you paid. Card details are entered on Stripe's payment page and are not received by VEARA.

What you make. The images you upload, the text and prompts you enter, the designs you generate, edit and save, custom design requests with their reference photos, and the text and images you search with.

Waitlist and sign-up. Your answers to the waitlist questions, and how you first reached VEARA: the campaign tags in the link you followed (such as utm tags and ad click identifiers), the page that referred you and the first page you landed on. Referral codes you use or share, and the credits that come with them.

Artists. If you apply as an artist: your introduction, portfolio link and sample works, the version of the Artist Terms you accepted and when, and the records needed to calculate your royalties.

Messages. What you send through the contact form (name, email address, topic, message and order number) and the emails you send us.

Technical information. When your browser loads VEARA, our hosting providers receive your IP address and browser information as part of each request. When advertising measurement is on in your browser (section 4), the Google Ads tag and the OpenAI Measurement Pixel also receive the cookies or similar identifiers they set, your IP address and browser information.

People we contact. If VEARA emails you about working together, we keep your email address, our messages and your replies.

2. How we use it

We use this information to create and secure your account; to make, ship and support your orders; to take payment; to run the design tools and search; to send you the emails the service sends (sign-up, waitlist, order confirmations and receipts); to review waitlist and artist applications and calculate artists' royalties; to answer your messages; to see which campaigns and referrals bring people to VEARA; to prevent fraud and abuse; and to meet our legal obligations.

3. Service providers

VEARA shares personal information with the service providers below, only as needed for each to do its part in running VEARA.

ServiceWhat it does for VEARAWhat it receives
SupabaseSign-in, database and file storageEmail address, password (stored by Supabase), first and last name, the account and order records VEARA keeps, and uploaded and generated images
Google Sign-InOptional sign-in with a Google accountThe name and email address of the Google account you choose to sign in with
StripePaymentsAccount email address, order and credit purchase amounts, and order and account numbers. Card details are entered on Stripe's page; VEARA never receives them
PrintifyProduction and shipping of printed productsName, shipping address, email address, phone number, and the items ordered with their print files
OpenAIAI image generation and image and text analysisImages and text you submit to the design tools, images you upload to search with, and search text
Google Ads (Google LLC)Advertising measurement: tells VEARA whether a visit from a Google ad led to a sign-up or a purchaseThe identifiers the Google tag sets in your browser, your IP address and browser information, the address of each VEARA page where the tag loads, ad click identifiers, and the actions measured (sign-up, design saved, checkout started, and purchase with the order value)
OpenAI ChatGPT AdsAdvertising measurement: tells VEARA whether a visit from a ChatGPT ad led to a sign-up or a purchaseThe identifiers the OpenAI pixel sets in your browser, your IP address and browser information, the address of each VEARA page where the pixel loads, ad click identifiers, and the actions measured (sign-up, design saved, checkout started, and purchase with the order value). The pixel may also send SHA-256 hashes of contact details, such as an email address, shown on the page. For purchases, VEARA's servers also send the order number and a SHA-256 hash of the order email address, never the address itself
Google Maps PlatformAddress suggestionsThe address text you type into a shipping address field
ResendEmail deliveryEmail address, name, and the content of account, order and receipt emails
Google CloudHosting of the VEARA API and image servicesThe requests your browser makes to the VEARA API, including account, order and design data, and server logs
VercelHosting of the websiteThe pages you request, your IP address and browser information
DiscordNotices to VEARA's artist community channelAn artist's name with the ID of a design they submitted, and the text and reference photos of a custom design request, without the requester's name or email address
InstantlyOutreach emailEmail addresses of people VEARA contacts about working together, and their replies

We may also disclose information when the law requires it, to protect the rights and safety of VEARA and others, or as part of a merger, acquisition or sale of VEARA's business.

4. No sale; advertising measurement

VEARA does not sell your personal information.

VEARA uses two advertising measurement tools, the Google Ads tag and the OpenAI Measurement Pixel, to measure whether its own ads on Google and in ChatGPT lead to sign-ups and purchases on VEARA. Section 3 lists what each receives. Under some U.S. state privacy laws, letting these advertising companies receive identifiers and activity from our site may count as "sharing" personal information for cross-context behavioral advertising. You can opt out at any time in Your Privacy Choices, linked at the bottom of every page; VEARA treats a Global Privacy Control signal from your browser as the same opt-out (section 6).

VEARA uses no analytics services and no session recording.

5. Cookies and browser storage

Needed to run the site. Small cookies that tell our servers whether you are signed in, whether your account has access and whether you are following an invite link; your sign-in session, kept in your browser's local storage; and session storage that carries what you chose from one page to the next, for example into the design editor.

Your preferences. Your contact details and your own logo or text for previews, if you add them, and whether you closed the welcome popup.

How you found us. The campaign tags and referring page of your first visit, the ad click identifiers and campaign tags of your latest visit from an ad, and a referral code from a link you followed. These are sent to VEARA, to see which campaigns and referrals bring people here. When you place an order, the ad click identifiers from your latest ad visit are saved with it, and the OpenAI click identifier is passed to OpenAI with the purchase measurement, unless you have opted out.

Advertising measurement. Unless you have opted out in Your Privacy Choices or your browser sends Global Privacy Control, VEARA's pages load the Google Ads tag and the OpenAI Measurement Pixel. They store their own cookies in your browser (such as Google's ad click cookies and OpenAI's __oppref and __obref) to recognize visits that came from an ad. If you opt out, VEARA stores that choice in your browser's local storage, the tags are not loaded on later pages, no measurement events are sent from that browser, and the OpenAI pixel's cookies are removed.

Address forms load Google's address suggestions, and payment happens on Stripe's own page; what those services receive is listed in section 3.

6. Do Not Track and Global Privacy Control

Do Not Track. VEARA does nothing different when a browser sends a Do Not Track signal.

Global Privacy Control. VEARA honors Global Privacy Control as a request to opt out of advertising measurement for that browser: when your browser sends it, the advertising tags do not load, no measurement events are sent, and purchases you make from that browser are not reported to OpenAI.

7. How long we keep it

We keep personal information for as long as we need it for the purposes above, including to meet legal, tax and accounting obligations and to resolve disputes. Order and payment records are kept as business records.

8. Your choices and requests

You can ask to see, correct or delete the personal information VEARA holds about you by emailing jonathan@veara.ai from the address on your account. We may need to confirm your identity first, and we may keep information the law requires us to keep. We will not treat you differently for making a request.

Opting out of advertising measurement. You have the right to opt out of the advertising measurement described in section 4. Use Your Privacy Choices below, also linked at the bottom of every page, to turn it off in a browser. The choice is kept in that browser, so make it in each browser you use; clearing your browser's storage resets it. A Global Privacy Control signal does the same automatically.

Your Privacy Choices

Global Privacy Control is honored automatically: if your browser sends it, advertising measurement stays off without any action here.

9. Children

VEARA is not for anyone under 18, and we do not knowingly collect personal information from children. If we learn that an account belongs to someone under 18, we close it and delete its personal information. Our Terms of Service set out who can use VEARA.

10. Where information is processed

VEARA is based in the United States and runs the service there. If you use VEARA from outside the United States, your information is transferred to and processed in the United States.

11. Changes to this policy

We may update this policy. The effective date at the top of this page shows when it last changed.

12. Contact

Privacy questions and requests go to VEARA, Inc.:

Email: jonathan@veara.ai