Verity — Privacy

Last updated: October 19, 2026 (test release)

Who runs Verity. Verity is a test product run by Kestra Inc., a Delaware corporation owned by Ankit Goyal. Questions about this policy: contact@trykestra.com.

What Verity is. Verity reads what you connect — your mail, your documents, your account feed — and keeps a record it can show you line by line. It never sends an email, never moves money and never files anything; you and your advisers do those.

What we read

Your mail (Google). With your permission Verity reads your Gmail messages and attachments. It asks Google for read-only access (gmail.readonly) and nothing else: it cannot send, draft, delete or change anything in your account. It also receives your name and email address from Google to sign you in. Verity uses Gmail data only to find your financial documents and messages (statements, K-1s, capital calls, tax notices, deadlines), build and maintain your record from them, and show that record to you. It is never used for advertising, never sold, never shared for anyone else's purposes, and never used to create, train or improve any machine-learning or artificial-intelligence model.

Verity's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace scopes will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.
Documents you give us. Statements, tax forms, letters you photograph, folders you upload.
Your account feed, if you connect one (read-only balances and transactions through the aggregator you choose). Verity cannot trade or transfer.
Your answers to Verity's questions, and the choices you save.

What we do with it

Verity builds a record: facts with the page they came from, items that need doing, questions, and drafts that wait for you to send from your own mail. Every number on a page links to the document it came from.

To read your documents, Verity sends redacted text to the AI providers we use — Anthropic, OpenAI, Google and Cloudflare. Each is under terms that keep nothing: they do not retain your data and do not train on it. In normal operation identifiers (account numbers, tax IDs) are reduced to their last four before anything goes to them.

Who can see your data

You. Everything, always, with an export at any time.
Verity's own systems, which read your record to do their work. Every read goes through one gateway and is logged.
A person, only in four cases. Nobody at Verity — not the person who runs it, and not the AI tools he builds it with (Anthropic's Claude and Cognition's Devin, both on terms that keep nothing) — reads your mail or your record except: when something goes wrong for you and you agree first, for that one problem; to investigate abuse or a security incident; when the law requires it; or as statistics that are aggregated and anonymized, for running the service. Every such read is logged with its reason, and you will see it on your Settings page under "Who has read your data."
No one else. Verity has no advertisers, no data partners, and no resellers. We disclose data only if the law compels it, and we will tell you unless the law forbids that too.

Where it lives and how it is protected

Your data is stored in the United States on Fly.io (database) and Tigris (documents), encrypted at rest; your documents and mail bodies are encrypted under a key that belongs to your household alone. Connections to your mail and accounts use tokens that are sealed with that key and hold the narrowest scope the provider offers. The database is copied once a day, and each copy is kept for five days.

How long we keep it

While you use Verity we keep your record and change it only by adding new versions; nothing is silently deleted. When you leave, this is what happens, and when:

what	the moment you leave	seven days after you leave	twelve days after you leave
your access	nobody can sign in to your household any more	—	—
your Gmail connection	Verity asks Google to remove its access and stops reading (if Google does not confirm, we tell you, so you can remove it yourself)	—	—
your record — facts, items, quoted lines from your mail, the text of your documents, the people and accounts, your answers, drafts, the access log, the record of each AI request	locked: nothing is added or changed	deleted from the database	gone from the daily copies too
your documents and mail bodies we stored	the key that encrypts them is destroyed, so they cannot be read	—	—
the daily copies of the database	—	—	the last copy that held your record has expired

Why twelve days. Your record is deleted from the database seven days after you leave. The database is copied once a day and each copy is kept for five days, so the last copy that still held your record expires five days after the deletion.

Your stored documents. The files themselves stay in storage, encrypted. The key that opens them is destroyed when you leave. The daily copies of the database hold a sealed copy of that key for up to five days; after that, no copy of it exists anywhere, and the files can never be opened again by anyone, including us.

What stays. In Verity's operations log, and nowhere else:

one line saying that your household left, and when;
one line saying that it was deleted, when, and how many rows of each kind were deleted;
for each action Verity or the person who runs it took on your household while you were here (a read to fix a problem, for example), a line with only when it happened and who acted — the command, its reason and its result are erased.

Each line carries your household's internal identifier, a random string that means nothing outside Verity. No name, no email address, no amount and nothing from your mail or documents. The AI providers keep nothing, so there is nothing to delete there.

If we ever restore the database from a copy. A copy taken before you left would bring your record back. Verity keeps a note outside the database that your household left. Sign-in checks that note, so nobody can open a household that left, even from a restored copy; within a day Verity also locks it again (key destroyed, logins removed) and deletes it again seven days later.

Test cases built from your documents exist only with your separate written consent, and are deleted when you leave.

Leaving

Settings › "Leave Verity" lets you export everything as files first. Then you type LEAVE, and the steps above happen. There is no waiting period before you can leave and no one to convince.

Your choices

You can disconnect your mail or an account at any time in Settings (and at Google's own security settings). You can see every read of your data, pause everything new, export, or leave.

Children

Verity is for adults managing their own household's affairs. It is not offered to anyone under 18.

Changes

If this policy changes in a way that matters, you will see it on your Home page before it takes effect, and you can leave before it does.