Legal
ServeVera — Privacy Policy
Last updated: June 2026 · © 2026 Eve Veyroj Group LLC. All rights reserved.
1. Who We Are
ServeVera is operated by Eve Veyroj Group LLC ("we", "us", "our"), based in Frisco, Texas, USA. ServeVera is a product of Ask Eve. This Privacy Policy explains what information we collect, how we use it, and your rights regarding it. Contact: support@servevera.com.
2. Information We Collect
- Account information: name, email, business name, location details, and authentication factors (password hash, two-factor authentication secret) when you sign up.
- Business & financial data: sales, profit, bills, cash, vendor and purchasing records, inventory, and other information you enter or that we organize on your behalf.
- Labor & staff data: staff names, roles, schedules, tasks, and labor figures used for operations and labor-cost visibility.
- Documents & compliance records: invoices, permits, licenses, contracts, certifications, and reports you upload to the document vault, along with related deadlines.
- Data from connected services: information we retrieve, at your direction, from integrations you authorize such as Toast, Square, QuickBooks, and Gusto.
- Usage data: pages visited, features used, login times, IP addresses, and basic device/browser information used for security and reliability.
3. How We Use Your Information
- To provide and improve the ServeVera service
- To send account-related emails (login, billing, updates)
- To calculate profit, labor, cash flow, and compliance reminders
- To organize data retrieved from your connected POS, accounting, and payroll integrations
- To power AI features (such as summaries and insights) you choose to use
- To detect, investigate, and prevent fraud, abuse, or security incidents
- To comply with legal obligations (tax, accounting records retention, lawful requests)
- We do NOT sell your data to third parties
- We do NOT use your financial data for advertising
4. Subprocessors & Integrations
We use trusted third-party providers to deliver the Service. They process your data only on our instructions or at your direction:
- Supabase — managed Postgres database, file storage, and authentication (United States).
- Stripe — payment processing for subscriptions.
- Resend — transactional email delivery.
- OpenAI / Anthropic — AI features (summaries and insights); data sent only when you use an AI feature, and not used to train their models.
- Twilio — SMS notifications (when enabled).
Integrations you connect (data flows in at your direction, governed by your own agreement with each provider):
- Toast / Square — point-of-sale sales and order data.
- QuickBooks — accounting and financial data.
- Gusto — payroll and labor data.
5. Data Storage & Security
Your data is stored using row-level security so each business can only access its own data. Data is encrypted in transit (TLS) and at rest. We support two-factor authentication for account access (required for Owners and Admins). We perform automated daily backups and follow industry-standard security practices.
6. Data Retention & Deletion
Your data is retained while your account is active. You may export a complete copy of your data at any time from Settings → Data & Privacy. You may also request permanent deletion of your account and all associated data; deletion is applied after a 30-day grace period to allow recovery from accidental requests, except where retention is legally required.
7. Cookies
We use essential cookies only — for login sessions and security. We do not use advertising or tracking cookies.
8. Your Rights (GDPR / CCPA)
Subject to applicable law, you have the right to: (a) access the personal data we hold about you; (b) correct inaccurate data; (c) request deletion ("right to be forgotten"); (d) restrict or object to processing; (e) data portability (the in-app export tool satisfies this); and (f) lodge a complaint with your local data-protection authority. To exercise any of these rights, contact support@servevera.com.
9. Children
The Service is intended for business use and is not directed at individuals under 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.
11. Language
This Privacy Policy is offered in English and Thai for your convenience. If there is any conflict between translated versions, the English version controls.