Privacy Policy

VeroMint, operated by VeroMinds LLC · Effective September 3, 2026

This policy explains what personal information VeroMint collects, why we collect it, who we share it with, and how long we keep it. It covers the VeroMint mobile app and the veromint.app website — including guest ticket buyers, who purchase event tickets through a VeroMint checkout link without creating an account.

1. Information we collect

From app users

• Account information: email address, username, and sign-in credentials (passwords are handled by our authentication provider and never stored in plain text; you may also sign in with Apple or Google).
• Date of birth: collected at signup, and at profile setup if you sign in with Apple or Google, to confirm you meet our minimum age and to apply the right account rules if you are 13 to 17. See our Terms of Service for how age affects what you can do on VeroMint.
• Profile details you choose to add: display name, avatar, bio, and, if you enable nearby features, a coarsened location we calculate from a ZIP code you provide. We store your city, state, and a deliberately coarsened set of coordinates — never your exact address or precise location. Other users see your city, state, and ZIP code, which is more specific than the coarsened coordinates used for distance display but does not reveal your exact address.
• Marketplace activity: your collection and inventory, listings, offers, orders, trades, ratings, messages to other users, and event submissions.
• Checkout details: a shipping address you provide when you buy or ship a marketplace item, shared with our shipping label provider (see Section 4).
• Purchases from VeroMint and promo codes: if you buy a subscription, a listing promotion, or a sponsored placement, we keep the purchase and billing records, including any promo code you redeem, the discount amount, and a count of your redemptions. We use these records to apply the discount and to enforce per person and total use limits on each code.

From guest ticket buyers

• Purchase details via Stripe Checkout: your name, email address, and the details of your ticket purchase (event, ticket type, quantity, and amount paid). No account is required to buy a ticket.

From advertisers

If you purchase a sponsored placement, we collect the creative content you submit (headline, body text, image, and outbound link), your campaign selections, and payment details processed by Stripe, as described in our Advertiser Agreement. We do not collect information about the users who view a placement beyond the aggregate view and click counts we show you, and we do not use any personal information for ad targeting.

Payments

• Payments are processed by Stripe. Your card number goes directly to Stripe — VeroMint never receives or stores full card details. For ticket purchases, the event organizer is the seller of record; VeroMint provides ticketing technology.

Collected automatically

• Basic technical information such as IP address and request logs, used for security, rate limiting, and abuse prevention.
• A device push notification token, if you enable notifications, used only to deliver notifications to your device.
• Bot protection signals processed by Cloudflare Turnstile when you sign in, sign up, or reset your password, used to distinguish people from automated traffic.

1a. Cookies and local storage

VeroMint itself does not set cookies on veromint.app. When you use VeroMint in a web browser, we keep a small amount of information in your browser's local storage: your session and sign in state, so you stay signed in between visits; your preferences, including your answer to our cookie and local storage notice and small flags such as which tips you have already dismissed; and a local copy of items such as your tickets, so they open even without a connection. That ticket copy holds the same details the ticket itself shows, such as the event, the name and email on the order, and the ticket code. This storage is strictly necessary to run the service, and it is not used to track you.

We do not set third party advertising or tracking cookies, and we do not use analytics services that follow you across sites. Sponsored placements on VeroMint are first party: VeroMint sells and shows them itself, they are not personalized, and they do not write anything to your browser. Payment pages hosted by Stripe and the Cloudflare bot check described in Section 1 are run by those providers under their own policies.

Our notice offers two optional categories, analytics and personalized ads. Both stay off unless you switch them on, and we do not currently use either. If that ever changes, nothing in those categories will be stored unless you have turned it on, and you can change your choice at any time.

To clear this storage, sign out. Signing out removes everything VeroMint keeps in your browser's local storage, including your session and the local copy of your tickets, except your notice choice, which stays so you are not asked again. To remove that too, clear site data for veromint.app in your browser's privacy or site settings; you will then see the notice again on your next visit.

2. How we use your information

• Ticket delivery: emailing your QR-code tickets, and re-sending them when you ask us to.
• Check-in: validating tickets at the door and keeping a check-in and scan record for the event organizer.
• Account claiming: attaching tickets bought with your email address to your VeroMint account (see section 3).
• Marketplace operation: running accounts, listings, orders, offers, trades, portfolio tracking, notifications, and customer support.
• Safety and legal: fraud prevention, rate limiting, content moderation, including automated message screening (see section 2a), and compliance with applicable law.
• Promotional email: if you have a VeroMint account, we may email you about plans, offers, new features and events. Every promotional email includes an unsubscribe link, and you can turn promotional emails off at any time in Account settings under Promotional emails. Account, order, ticket and security emails are not promotional and continue regardless.

We do not sell your personal information, and we do not use guest ticket buyer information for marketing.

2a. Automated message monitoring

To keep VeroMint safe, messages you send to other users through the app are automatically screened. Two kinds of screening run on our behalf: keyword screening on our own servers, which checks message text against rules for categories such as sexual content, threats, harassment, and scams; and an artificial intelligence classifier using the Claude API, a service operated by Anthropic PBC, which reviews message text in context for the same categories.

Anthropic acts as our processor under a written agreement and may use the message text only to provide this classification service to us, not for its own purposes. We share the message text itself; we do not share the recipient’s name, email address, or other contact details with Anthropic. Sharing message text with Anthropic on these terms does not make it a sale of your personal information, and does not change the statements in Sections 2 and 6a that VeroMint does not sell personal data.

We use the results of this screening for safety and fraud prevention, including warning senders, applying temporary messaging restrictions, and detecting scams. Messages and conversations that are flagged by this screening may be reviewed by our administrators for that safety and enforcement purpose, and not for any other purpose. Administrators can view the flagged message and the surrounding conversation to understand context. Decisions to suspend or terminate an account are always made by a human administrator, never automatically.

You consent to this review by using the Service, as described further in our Terms of Service.

If a message you send appears to contain contact information, such as a phone number, email address, or a handle on another service, we detect this and show you a warning; we do not block the message from sending or store a separate record of the detection beyond normal message logging.

If you block another user, we stop delivering messages between you and that user in both directions and hide that user’s content from you. We keep a record that the block exists so we can enforce it, but blocking does not delete either user’s prior messages.

3. The account check at ticket purchase

When a ticket is purchased, we check whether the buyer’s email address matches an existing VeroMint account so that tickets can be attached to that account automatically, and we record whether an account existed at the time of purchase (this helps us understand how people discover VeroMint). This check is internal only — the result is never shown to organizers, other users, or anyone else.

4. How we share information

• Event organizers: the organizer of an event receives the attendee name and email address for tickets to their event only, so they can run check-in and manage the event. Organizers may use attendee data only to administer that event — never for marketing lists, and never for resale.
• Stripe: processes payments. For tickets, the charge is made on the event organizer’s Stripe account (the organizer is the merchant of record). Stripe’s own privacy policy applies to the payment data it processes.
• Service providers: vendors that process data on our behalf under contractual restrictions. We currently use:
  • Supabase: hosts our database, authentication, and file storage.
  • Resend: delivers our email.
  • Shippo: creates shipping labels and tracking for marketplace orders (receives sender and recipient names and addresses).
  • Anthropic: classifies message text for safety (see Section 2a).
  • Cloudflare: provides Turnstile bot protection when you sign in, sign up, or reset your password.
  • Twilio: delivers administrator sign-in codes by text message.
  • Expo, Apple, and Google: deliver push notifications to your device.
  We will update this list if we add, remove, or change a service provider in a way that affects the categories of data described in this policy.
• Legal: we may disclose information when required by law, or to protect our users, the public, or VeroMint.

5. How long we keep it

• Guest ticket data: attendee and buyer names and email addresses are deleted 90 days after the event ends. We retain the non-personal financial record (amounts, statuses, and payment references) for accounting, refunds, and dispute handling.
• Account data: kept while your account is active. If you delete your account, we remove your personal information except where the law requires us to keep certain financial records, and except for the moderation and dispute records described below, which follow their own retention rules even after account deletion.
• Fraud-prevention record: if we deactivate an account for a violation of our Terms of Service, we keep a minimal record consisting of a one-way cryptographic hash of your email address, a short reason code, the deactivation date, and internal identifiers. We use this record only to enforce our block on that email address re-registering and to preserve enforcement history; it does not include your plaintext email address, username, display name, or any other content from your account.
• Moderation records: records of flagged messages (short excerpts, category, severity, and review outcome) are kept while a related investigation, strike, or messaging suspension is active, and are automatically deleted no later than twelve months after the matter is resolved. Pending matters are retained until they are resolved.
• Dispute records: records of order disputes, returns, and related communications are retained for the periods required for payments compliance, including refund and chargeback handling.

6. Your choices

• You can request access to, correction of, or deletion of your personal information by emailing contactus@veromint.app.
• You can delete your account (and the data attached to it) at any time from Profile → Delete account in the app; active sales or purchases must complete first.
• You can turn promotional emails off at any time in Account settings under Promotional emails, or with the unsubscribe link at the bottom of any promotional email.
• Guest ticket buyers can request earlier deletion of their ticket information once their event has taken place, subject to the financial record-keeping described above.

6a. U.S. state privacy rights

VeroMint is operated by VeroMinds LLC, a Virginia limited liability company, from the United States. Depending on your state of residence, you may have additional rights under state privacy laws — including the Virginia Consumer Data Protection Act (VCDPA) and similar laws in other states — such as the right to confirm whether we process your personal data, to access, correct, delete, or obtain a copy of it, and to opt out of targeted advertising or the sale of personal data. VeroMint does not sell your personal data and does not use it for cross-app targeted advertising. To exercise any of these rights, email contactus@veromint.app; if we decline a request, you may appeal by replying to our decision and we will review it.

7. Children

VeroMint is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us personal information, contact us and we will delete it.

Users 13 to 17 may use the Service only with the involvement of a parent or legal guardian, as described in our Terms of Service. We do not serve targeted or interest-based advertising to any user, and we do not sell personal data belonging to a user of any age, so no known-child opt-in or opt-out mechanism for targeted advertising or sale is required for this reason. Where a state privacy law gives a parent or guardian rights over a minor’s data, that parent or guardian may exercise those rights the same way described in Section 6, by emailing contactus@veromint.app.

8. Changes to this policy

We will post any changes on this page and update the effective date. For a material change — including a change to the monitoring disclosures in Section 2a or the retention periods in Section 5 — we will send an email notice to account holders in addition to flagging the change in the app.

9. Contact

VeroMinds LLC
contactus@veromint.app

Questions about a specific event, its refund policy, or its taxes should go to the event organizer — they are the seller of record for tickets.