Privacy Policy — Veil Management

1

Information We Collect

Account information

When you register, we collect your username, email address, and a hashed password. We do not store your password in plain text.

Server data

Veil collects data from your FiveM servers via the Veil Agent and veil-monitor resource — including CPU and RAM usage, player session information, resource performance metrics, and server logs. This data is associated with your account and used to power the dashboard.

Player data

Player identifiers (license, Discord ID, Steam ID, FiveM ID, IP address), session history, and ban records are collected from your server and stored on your behalf. You are the data controller for your players' data; we process it on your instruction.

Billing information

Payment processing is handled by Stripe. We do not store your full card number. We store the last four digits, card brand, and expiry date for display purposes only.

Usage data

We log which dashboard pages you visit, actions taken, and general interaction patterns to improve the product. We do not sell this data.

Technical data

IP address, browser type, and device information are collected when you access the dashboard. This is used for security monitoring and session management.

2

How We Use Your Information

To operate, maintain, and improve the Veil platform
To authenticate your account and protect against unauthorized access
To process payments and manage your subscription
To send transactional emails (receipts, password resets, security alerts)
To monitor for abuse, fraud, and security threats
To generate aggregated, anonymized analytics about platform usage
To contact you about important service changes or new features — you can opt out of non-essential communications at any time

3

Data Sharing

We do not sell your data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Service providers

We share data with trusted vendors who help operate Veil — including Neon (database hosting), Railway (hosting infrastructure), Stripe (payments), and Resend (transactional email). These providers process data only as necessary to provide their services and are bound by data processing agreements.

Discord bot

If you link a Discord server to Veil, your Discord guild ID and selected channel IDs are stored and used to send notifications you have explicitly configured. We do not access your Discord server's messages or members.

Legal requirements

We may disclose information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights, property, or safety of Veil, our users, or the public.

Business transfers

If Veil is acquired or merges with another company, your information may be transferred as part of that transaction. You will be notified in advance.

4

Data Security

We use industry-standard measures to protect your data: all connections are encrypted in transit via HTTPS/TLS, passwords are hashed using bcrypt, and database access is restricted by IP allowlist. Session tokens are rotated regularly. Despite these measures, no internet service is completely secure — we cannot guarantee absolute protection against all threats.

5

Data Retention

We retain your account data for as long as your account is active. Server metrics and logs are retained for 90 days by default. Ban records are retained indefinitely as they are necessary for server moderation. If you delete your account, we delete your personal information within 30 days, except where retention is required by law or legitimate business interests (e.g. billing records required for tax purposes, which are retained for 7 years).

6

Your Rights

Access — request a copy of the personal data we hold about you
Rectification — ask us to correct inaccurate or incomplete information
Erasure — request deletion of your account and associated data
Restriction — ask us to limit how we process your data
Portability — receive your data in a structured, machine-readable format
Objection — object to processing based on legitimate interests
Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at privacy@veilmgmt.com. We will respond within 30 days.

7

Cookies

We use a single session cookie to keep you logged in. We do not use third-party advertising cookies or tracking pixels. The session cookie is HTTP-only, SameSite=Strict, and expires when you sign out or after 30 days of inactivity.

8

Children's Privacy

Veil is not directed to individuals under 18. We do not knowingly collect data from minors. If you believe we have inadvertently collected such data, contact us immediately and we will delete it.

9

Changes to This Policy

We may update this policy to reflect changes in our practices or for legal reasons. For material changes, we will notify active users by email at least 14 days before the change takes effect. The "Last updated" date at the top of this page always reflects the current version.

10

Contact

For privacy-related questions or requests, email privacy@veilmgmt.com. For general support, visit veilmgmt.com/support or join our Discord at discord.gg/C5bnVTU7tw.