Privacy Policy

Account information. Email address, password (stored only as a salted cryptographic hash), company name if provided, plan, language, and settings. If you enable passkeys or two-factor authentication, we store the related public credentials — never your biometrics, which stay on your device.

Billing. Payments are processed by Stripe. We store your subscription status and a customer reference — we never see or store full card numbers.

DNS queries. To provide filtering, domain lookups from your configured networks and devices are processed by our resolver infrastructure. We use this data to enforce your policies, detect threats, and show you activity and reports (for example, "12 phishing attempts blocked this week"). Query logs are retained for a limited period for reporting and security purposes and then deleted or aggregated. We do not sell DNS data or use it for advertising.

Breach monitoring. If you add email addresses to Breach Watch, we check them against the Have I Been Pwned breach database. Only the addresses you explicitly add are checked.

Emails and support. Transactional emails (reports, alerts, password resets) are delivered through our email provider. If you contact support, we keep the correspondence.

VeeShield accounts are created and controlled by adults. We do not knowingly collect personal information from children. When a parent uses VeeShield to protect a household, DNS queries from household devices — including children's devices — are processed solely to enforce the filtering policies the parent configured, and activity is reported to the account holder, not to us for any independent use. Person profiles (names/emojis) are labels chosen by the account holder.

We share data only with service providers who process it on our instructions: our DNS filtering infrastructure partner (query resolution), Stripe (payments), our email delivery provider, our hosting providers, and Have I Been Pwned (breach checks, only addresses you add). We may disclose information if required by law. If VeeMost is involved in a merger or acquisition, data may transfer with appropriate protections. We never sell personal data.

Passwords are hashed with scrypt; sessions are revocable server-side; two-factor authentication and passkeys are available to every account; access to production systems is restricted and audited. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you consistent with applicable law.

Account data is kept while your account is active and deleted or anonymized within a reasonable period after account closure, except where law requires longer retention (e.g., billing records). DNS query logs are retained on a rolling short-term window for reporting and security, then deleted or aggregated.

Depending on where you live (including the EU/EEA, UK, and certain US states), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly in your dashboard, or by emailing [email protected]. We respond within the timelines applicable law requires. You may also lodge a complaint with your local data-protection authority.

We operate globally; data may be processed in the United States and other countries through the providers above, with appropriate safeguards for cross-border transfers where required.

We will notify you of material changes to this policy by email or in the dashboard before they take effect. Questions: [email protected], or VeeMost Technologies, Inc., New Jersey, USA.