1) Who We Are & Scope
This Privacy Policy explains how Verastro, Inc. collects, uses, and shares information when you use the
Visa & Case Tracker application and related sites/services.

2) What We Collect
● Account & Contact: email, name (optional), password hashes.
● Case Inputs: receipt numbers or case identifiers you manually provide to check public status.
● Notifications: preferences for email or in-app alerts.
● Usage/Device: IP address, device type, OS, app version, diagnostics, and crash logs.
● Cookies/Web storage: for session management and preferences.
We do not require government IDs, SSNs, or sensitive biometric data for basic use.

3) Sources of Information
● You (when you enter data or change settings).
● Public government sites (e.g., USCIS status pages) for status retrieval (we do not receive any
non-public data from USCIS).
● Service providers (analytics, error logging).

4) How We Use Information
● Provide core features (case lookups, history, reminders, notifications).
● Improve functionality, reliability, and security.
● Communicate updates and respond to support requests.
● Comply with law, prevent fraud/abuse.

5) Legal Bases (GDPR, where applicable)
● Performance of a contract (provide the Services).
● Legitimate interests (service reliability, security, product improvement).
● Consent (email alerts/marketing where required).
● Legal obligations (compelled disclosures).

6) Sharing
We do not sell personal information. We share only with:
● Vendors/Processors (hosting, email, analytics) under data-processing terms;
● Legal/Compliance (when required by law or to protect rights);
● Business transfers (mergers/acquisitions with notice as required).

7) Retention
Account and case inputs persist while your account is active or as needed to provide Services. You can
delete cases or your account in-app or by emailing us; we’ll delete or de-identify data unless retention is
required by law.

8) Security
We use reasonable technical and organizational measures (encryption in transit, access controls, isolated
secrets, regular patching). No method is 100% secure, but we continuously improve safeguards. (Security
commitment language harmonizes with your earlier “reasonable security measures.”)
Terms-of-Use

9) International Users
Data may be processed in the U.S. and other countries. Where required, we use appropriate safeguards
(e.g., DPAs, SCCs).

10) Your Rights
Depending on your jurisdiction, you may request access, correction, deletion, portability, restriction, or
objection to processing.
● California: We do not sell/share personal information as defined by the CPRA. You may exercise
rights via the contact below.
● EEA/UK: You may contact us or your local authority; you can withdraw consent any time where
processing is based on consent.

11) Children’s Privacy
The Services are not directed to children under 13 (or under the minimum age in your jurisdiction). Do
not use the Services if you are under that age.

12) Third-Party Sites & Government Portals
Links to third-party or government websites are subject to their own terms and privacy policies; we are
not responsible for their practices.

13) Changes
We will post any privacy changes here and update the effective date. Material changes will be highlighted
in-app or by email (if you’ve provided one).

14) Contact
Verastro, Inc. — Privacy
Email: privacy@verastro.com
Address: 651 N Broad St,STE 201,Middletown,DE,19709.
What changed vs your older Verastro terms (at a glance)
● Explicit no-trademark claim for the product name and government non-affiliation disclaimers.
● Product scope & data sources (public USCIS case tools, informational only).
● Modern privacy (notifications, analytics, GDPR/CPRA hooks, deletion/retention).
● Governing law set to Delaware (you can switch back to Texas to match prior venue if desired).
● Clear AUP (anti-scraping/rate-limit, security bypass, misrepresentation).