Veyro - One API. Every payment provider.
HomeLegalCookie Policy

Cookie Policy

Details regarding what cookies and local storage technologies Veyro deploys, their functional purposes, and how you can manage tracking preferences.

Veyro
Version: 1.0 (Production)
Last updated: October 30, 2026
Entity: Veyro Labs Private Limited
Registered Country: India

1. Introduction

Veyro (“Veyro”, “we”, “our”, or “us”) uses cookies and similar technologies to operate, secure, maintain, and improve its website, dashboard, APIs, and related digital services.

This Cookie Policy explains what cookies and similar tracking technologies are, how we use them, why we use them, and how you can manage your preferences. It applies to individuals who visit or interact with:

  • The Veyro website and landing pages.
  • The Veyro merchant operations dashboard.
  • Our documentation, API reference, and developer portals.
  • Account registration and authentication endpoints.
  • Other websites or applications operated by Veyro that link to this policy.

This policy should be read together with our Privacy Policy and Terms of Service. We comply with applicable electronic communications and cookie legislation across operating territories, including the EU ePrivacy Directive, GDPR, UK PECR, US state privacy laws, and India's Digital Personal Data Protection Act, 2023.

2. What Are Cookies?

Cookies are small data files placed on your browser or device when you visit a website. They allow websites to recognise devices, remember preferences, maintain secure login sessions, and support website functionality:

2.1 First-Party Cookies

Set directly by Veyro. Used to maintain secure authenticated dashboard sessions, protect against CSRF attacks, and store essential interface preferences.

2.2 Third-Party Cookies

Placed by external service providers integrated into our platform for diagnostic performance monitoring, telemetry, or security verification.

2.3 Session Cookies

Temporary tokens that expire automatically as soon as you close your browser or log out of your Veyro account.

2.4 Persistent Cookies

Remain on your device for a pre-determined duration to preserve consent preferences or remember your workspace settings across visits.

3. Similar Tracking Technologies

3.1 Local Storage & 3.2 Session Storage

Browser-based key-value stores used to cache user interface layouts, documentation dark/light mode toggles, and client-side cookie consent status without transmitting redundant payload headers on every request.

3.3 Pixels & Web Beacons

Transparent micro-elements used strictly where permitted to measure documentation page interactions and transactional email delivery rates.

3.4 Device & Browser Identifiers

Technical headers (user-agent, screen resolution, IP subnet) processed exclusively to detect automated bot activity and defend against credential stuffing.

3.5 Application Performance Monitoring (APM)

Client-side telemetry to detect JavaScript rendering exceptions, gateway response latency bottlenecks, and network dropouts.

4. Categories of Cookies We Use

4.1 Strictly Necessary Cookies

Always Active

Essential for authentication, cryptographic session validation, CSRF token defense, routing load-balancing, and persisting cookie consent preferences. These cookies cannot be disabled without breaking core platform functionality.

4.2 Functional Cookies

Optional

Preserve non-sensitive UI preferences such as expanded sidebar menus, selected timezones in transaction dashboards, and code language selections in developer documentation.

4.3 Analytics & Performance Cookies

Consent Required

Aggregate telemetry measuring page visit duration, navigation patterns, API documentation adoption, and HTTP error frequencies. Deployed only upon receiving affirmative user consent where legally mandated.

4.4 Marketing & Advertising Cookies

Opt-In

Veyro does not deploy invasive cross-context advertising cookies. Any prospective marketing attribution technologies require explicit opt-in consent prior to placement.

4.5 Security & Fraud Prevention Technologies

Security Protected

Automated heuristics to recognize suspicious login velocity, abnormal API request headers, and prevent distributed denial-of-service attempts.

5. Why We Use Cookies

5.1 Platform FunctionalityEnsuring reliable operation of checkout routers and API portals.
5.2 AuthenticationMaintaining encrypted, secure session tokens for portal users.
5.3 Threat MitigationDefending against automated scrapers, brute force, and CSRF attacks.
5.4 User PreferencesRemembering interface settings and language configurations.
5.5 Performance DiagnosticsIsolating latency bottlenecks across regional network nodes.
5.6 Analytics & GrowthEvaluating developer documentation clarity and feature utility.

6. Cookie Consent and Preference Management

Transparent, Equal Choice Architecture

Where mandated by law, Veyro requires affirmative consent prior to placing non-essential cookies. We ensure equal prominence between accepting and rejecting non-essential cookies without manipulative dark patterns.

  • You can change or withdraw consent at any time without penalty.
  • Consent records (status, timestamp, category choice) are securely logged for compliance verification.
  • Withdrawing consent does not affect the lawfulness of processing carried out prior to withdrawal.

7. Regional Cookie and Tracking Requirements

7.1 European Union (EEA)Strict adherence to ePrivacy Directive and GDPR Article 7 for granular, affirmative consent.
7.2 United KingdomRegulated under PECR and UK GDPR with clear opt-in requirements for non-essential technologies.
7.3 United States & GPCHonoring statutory opt-out preference signals including Global Privacy Control (GPC).
7.4 IndiaAssessed under the Digital Personal Data Protection Act, 2023, and electronic communications norms.
7.5 Canada & 7.6 SingaporeCompliant with PIPEDA (and Quebec Law 25) and Singapore PDPA 2012 consent guidelines.
7.7 Australia & 7.8 Middle EastOperating in compliance with the Australian Privacy Act 1988, UAE PDPL, DIFC, and ADGM standards.

8. Third-Party Cookies and Service Providers

Certain integrated third-party infrastructure tools may deploy cookies to deliver operational telemetry on our behalf. For an itemized directory of third-party vendors and their processing locations, consult our Subprocessors Register.

9. Cookie Retention Periods

9.1 Session Cookies

Transient tokens that are automatically flushed upon browser termination or manual session logout.

9.2 Persistent Cookies

Persist on your local client for a period typically ranging from 30 days to 12 months, or until cleared via browser controls.

10. Managing Cookies Through Your Browser

Most web browsers allow you to inspect, filter, block, or delete cookies via client settings (e.g. Chrome, Firefox, Safari, Edge). Please note that disabling strictly necessary cookies will impair your ability to authenticate into the Veyro dashboard or interact with live APIs.

11. Global Privacy Control (GPC) and Similar Signals

Veyro recognizes Global Privacy Control (GPC) and universal opt-out signals where required by governing statutes. When detected, non-essential analytical and tracking cookies are automatically disabled for that browsing session.

12. Cookies in the Veyro Dashboard and APIs

Our developer APIs operate statelessly using cryptographic authorization bearer tokens (`Bearer veyro_sec_...`) rather than ambient browser cookies. Cookies within our web dashboard are restricted strictly to session management and security CSRF validation.

Merchant Customer Notice: Merchants utilizing Veyro client SDKs within their own consumer storefronts are responsible for publishing their own cookie notices and collecting consumer consents.

13. Data Collected Through Cookies

Telemetry gathered through cookies includes IP subnets, browser versions, operating system tags, session durations, referring URLs, and diagnostic error logs. All personal data derived through tracking technologies is protected under our Privacy Policy.

14. Security of Cookies

All session cookies issued by Veyro are configured with mandatory security flags:

HttpOnlyInaccessible to client-side scripts to mitigate XSS risks.
Secure FlagRestricted exclusively to encrypted HTTPS transmission.
SameSite=Lax/StrictDefending against cross-site request forgery attacks.

15. Changes to This Cookie Policy

We may update this policy periodically to reflect evolving technical implementations or regulatory directives. Material changes will be highlighted via in-platform notifications and updated revision dates.

16. Contact Information

Corporate EntityVeyro Labs Private Limited
Brand NameVeyro
Registered OfficeBangalore, Karnataka, India
Privacy & Cookie Inquiriesprivacy@veyro.com
Legal Departmentlegal@veyro.com
Platform URLhttps://veyro.com

17. Relationship With Other Legal Documents

This Cookie Policy supplements our Privacy Policy, Terms of Service, and Subprocessors Register. Where mandatory statutory protections impose stricter localized tracking rules, those mandatory laws prevail.

18. Final Statement

At Veyro, transparency and user control are fundamental to our payment technology platform. We use cookies and device storage responsibly, gather only telemetry necessary for reliable operations, and honor your privacy choices.

© 2026 Veyro Labs Private Limited. All rights reserved.One API. Every payment provider.