Terms of Service

These Terms of Service (“General Terms”) are a legal agreement between you (“you,” “your”) and Veil (“Veil,” “we,” “our” or “us”) and govern your use of Veil’s services, including mobile applications, websites, software, hardware, and other products and services (collectively, the “Services”). By using any of the Services you agree to these General Terms and any policies referenced within (“Policies”), including terms that limit our liability and require individual arbitration for disputes. You also agree to any additional terms specific to Services you use (“Additional Terms”), which become part of your agreement with us.

1. Products, Registration, and Verification

Veil provides virtual card services that allow you to shop online securely without revealing your personal financial information. We are not a bank and do not offer banking services. Banking services are provided by our partner financial institutions.

To use our Services, you must register for an account (“Veil Account”). During registration you must provide accurate and complete information and keep it updated. You are responsible for all activity under your Veil Account.

2. Cashback, Promotions, and Referrals

Your account may include cashback promotions (“Veil Credits”). These credits may be earned on eligible purchases and are subject to limits, eligibility rules, and expiration. Veil may also run referral programs where you and your referrals can earn credits. Credits are non-transferable and have no cash value.

3. Transaction and Account History

We provide digital statements and account activity records through our website or mobile app. You are responsible for reviewing your account history and reporting errors promptly.

4. Use Restrictions

You may not use Veil for illegal activities, prohibited industries, or any activity that could harm Veil or its partners. Prohibited uses include gambling, cash disbursements, prepaid cards, and money orders. We may set spending limits and decline transactions at our discretion.

5. Privacy and Security

By using our Services, you agree to Veil’s Privacy Policy. We use industry-standard security measures to protect your data but cannot guarantee absolute security. You are responsible for safeguarding your password and notifying us of unauthorized activity.

6. Communications

You agree to receive communications from Veil electronically, including email, text, and push notifications. You may opt out of marketing messages, but essential service communications will still apply.

7. Costs of Services

Some Veil services may require subscriptions. Subscription fees are billed monthly unless canceled. Certain transactions may incur additional fees, such as foreign transaction fees.

8. Content You Provide

Any content you upload (such as logos, feedback, or promotions) may be used by Veil for service and promotional purposes. You retain ownership but grant Veil a license to use the content as needed to provide the Services.

9. Termination

We may suspend or terminate your account at any time for violation of these Terms. You may terminate your account by contacting us at cc.veilcards@gmail.com.

10. Ownership and License

All intellectual property rights in the Services are owned by Veil. You are granted a limited, revocable license to use our Services.

11. Indemnity

You agree to indemnify and hold harmless Veil, its partners, and affiliates from any claims or damages arising from your use of the Services.

12. Disclaimers and Limitation of Liability

Veil provides its Services “as is” without warranties. We are not liable for any indirect, incidental, or consequential damages. Our total liability will not exceed the greater of $5 or the fees you paid us in the three months preceding the claim.

13. Arbitration and Dispute Resolution

You agree to resolve disputes with Veil through binding individual arbitration. Class actions and jury trials are waived. Arbitration will occur in your local jurisdiction or another mutually agreed location.

14. Miscellaneous

These Terms are governed by applicable law. We may revise these Terms at any time by posting updates on our website. Your continued use of the Services constitutes acceptance of revised terms. Notices will be sent to your last known email address.

Contact Us: If you have questions, contact us at cc.veilcards@gmail.com.

Veil Cardholder Agreement

Key Information About Your Veil Card

All charges made on this charge card are due and payable when your periodic statement is received.

Fees

Annual Fee:
• $0 for Personal tier
• $60 for Plus tier
• $120 for Pro tier
• $300 for Premium tier

Foreign Transaction Fees:
• Personal tier: 3% of the foreign transaction (minimum $0.50)
• Pro and Premium tiers: No foreign transaction fees

Your Veil Account

Your Veil account consists of charge cards issued by our banking partner and managed by Veil. Your Cards are charge cards, not debit or prepaid cards. They provide access to a line of credit secured by a reserve account held for your benefit.

How it Works

To use your Cards, you must link a personal bank account. Each time you make a purchase, you access your line of credit. Your credit limit is primarily based on funds in your linked account, and you must pay your balance in full by the due date after each billing cycle.

Credit Limit and Available Credit

Your Credit Limit is the maximum amount of credit Veil may extend. Your Available Credit equals your Credit Limit minus outstanding transactions. If we approve charges above these limits, you are responsible for immediate repayment.

Payments

Payments may be made automatically (AutoPay) or manually. At the end of each billing cycle, your secured funds are applied to your balance. Remaining balances are collected from your linked account.

Payment Methods

You must link a U.S.-based bank account. Payments can be made via AutoPay or ACH transfer. Cash payments are not accepted.

The Secured Account

Your secured account holds Daily Payments made during your billing cycle. These funds are applied to your outstanding balance at the end of each cycle. You may lose funds in the secured account if you default on payment obligations.

Security Agreement

By using Veil Cards, you grant Veil a security interest in your secured account to guarantee repayment of obligations. If you fail to pay, Veil may debit funds directly from your secured account without notice.

Billing Rights

If you believe there is an error on your statement, you must notify Veil within 60 days. While we investigate, you are not required to pay the disputed amount. If we find an error, it will be corrected; otherwise, you remain responsible for the charge.

Account Default

Your account will be considered in default if you fail to make a payment, exceed your credit limit, provide false information, declare bankruptcy, or use the card unlawfully. In default, Veil may suspend your account, reduce credit, demand full payment, or pursue legal remedies.

Communications and Notices

Veil may contact you by mail, email, text, or phone about your account. It is your responsibility to keep your contact information updated.

Closing Your Account

You may close your account if there are no pending transactions or outstanding balances. Veil may also close or restrict your account at any time.

Other Terms

By using Veil Cards, you agree not to use them for illegal activities, to comply with all laws, and to protect your account credentials. Additional terms regarding assignment, legal actions, and fees apply as outlined in this agreement.

Arbitration Agreement

Disputes between you and Veil will be resolved through binding arbitration, not in court. You waive the right to participate in class actions. Arbitration will be handled by the American Arbitration Association under its rules. Small claims court remains an option for qualifying disputes.

Last updated: May 6, 2024

Electronic Communication Disclosure (E-SIGN Consent)

This Electronic Communication Disclosure (“E-SIGN Consent”) applies to all communications and disclosures that Veil Cards (“Veil,” “we,” “our,” or “us”) are legally required to provide to you in writing in connection with your Account and related products and services (“Communications”).

This Consent supplements and should be read alongside Veil’s Terms of Service. “You” and “your” refer to the account holder. “Account” means the account you maintain with us.

1. Consent for Electronic Signatures, Records, and Disclosures

By activating your Veil Account, you consent to the use of electronic delivery for all required disclosures and records. If you are unable or unwilling to consent, please do not enroll for a Veil Account. You may later withdraw your consent as described below.

2. Scope of Electronic Communications

Your consent covers all Communications relating to your Account, including but not limited to:

• Legal and regulatory disclosures
• Veil’s Terms of Service and any changes
• Privacy policies and notices
• Error resolution and dispute notices
• Responses to claims regarding your Account
• Notices about insufficient funds or negative balances

3. Method of Delivery

All Communications will be provided electronically via our website, email, or other electronic means.

4. Updating Your Information

You are responsible for keeping your email address and other contact details accurate and up to date. Updates may be made by logging into your Veil Account and adjusting your profile.

5. Hardware and Software Requirements

To access and retain Communications, you must have:

• A device with internet access
• A modern web browser with 128-bit encryption
• A PDF reader for certain documents
• A printer or storage device to save copies

If these requirements change and may affect your ability to receive Communications, we will notify you.

6. Requesting Paper Copies

We may provide paper copies of Communications upon request. You can print them yourself or request delivery by contacting us at cc.veilcards@gmail.com. Requesting a paper copy does not withdraw your consent for electronic delivery.

7. Communications in Writing

All Communications in electronic or paper format will be considered “in writing.” You should print or save copies of this E-SIGN Consent and other important Communications for your records.

8. Federal Law

Your consent to electronic Communications is provided in connection with a transaction affecting interstate commerce and is subject to the federal Electronic Signatures in Global and National Commerce Act (E-SIGN Act).

9. Termination or Changes

Veil may discontinue or change how we deliver Communications electronically. If we do, we will provide notice as required by law.

10. Withdrawing Consent

You may withdraw your consent to electronic Communications at any time by contacting us at cc.veilcards@gmail.com. Withdrawing consent will result in closure of your Account and Cards, and subsequent Communications will be sent by mail to your last known address. Withdrawal will not affect the validity of prior electronic Communications.

Last Updated: August 2025

Privacy Policy

This Privacy Policy describes how Veil Cards (“Veil,” “we,” “our,” or “us”) protects and manages your personal data when you sign up for, use, or engage with our applications, products, services, or websites (collectively, “Services”).

Please read this Policy carefully. By using our Services, you agree to the practices described below.

Our Commitment to User Privacy

We collect and use only the minimum amount of personal data required to comply with banking and payment industry rules and to provide the best possible user experience. We do not sell user information for advertising or marketing purposes.

We Limit Use of Your Personal Data To:

• Verifying your identity
• Protecting the legal rights, property, and safety of our Services and users
• Providing, maintaining, and improving our Services
• Sharing data with merchants during a payment dispute

We Collect and Use Data:

Provided by you for identity and eligibility:

• Name, email address, phone number, and date of birth
• Government-issued identification number
• Payment card and bank account information
• Other information needed during account setup or identity verification

For anti-fraud and payment protection purposes:

• Transaction data (time, place, amount, device, and payment method)
• Device data (hardware model, OS, unique identifiers, mobile network, browser type, IP address)

To improve your experience:

• Cookies and similar technologies (see below)
• Data from third parties to help verify identity, prevent fraud, and comply with law

We Share Personal Data Only When Necessary:

• With service providers and partners helping us operate the Services
• With financial institutions, processors, and payment networks
• With government and law enforcement where legally required
• To protect the security or integrity of Veil or our users
• In connection with a merger, acquisition, or sale of assets
• With your explicit consent

We may also share aggregated, anonymized information that cannot identify you.

Security

We use industry-leading technologies and practices, including encryption, firewalls, and multi-factor authentication, to protect your data. Access to your data is restricted to authorized personnel only, and third-party providers must follow the same standards.

Your Choices

• Personal Data: You can update your account details anytime by logging in or emailing us at cc.veilcards@gmail.com.
• Email & SMS: You may opt out of marketing emails or texts, but we may still send service-related notices.
• Notifications: Our apps may request permission to send push notifications, which you can decline.
• Do Not Track: Our Services do not currently respond to browser-based “Do Not Track” signals.

Cookies

We and our partners use cookies to enhance your experience, analyze usage, and improve Services. Cookies help with authentication, remembering preferences, and analytics. Third-party cookies may also be used.

How to Control Cookies:

You can block or delete cookies in your browser settings. Some Services may not function properly if cookies are disabled. For more details, visit www.aboutcookies.org or www.allaboutcookies.org.

Third-Party Websites

Our Services may link to third-party websites. This Privacy Policy does not cover those sites, and we are not responsible for their policies or practices.

Data Retention

We retain personal data as required by financial regulations, even after account closure:

• Identity verification data: 5 years
• Payment card data: 5 years
• Bank account data: 6 years
• Audit logs: 3 years
• ACH transaction data: 6 years

Changes to this Policy

We may update this Privacy Policy from time to time. If changes are significant, we will notify you by email (if provided) before they take effect. Continued use of the Services after updates means you accept the revised Policy.

Last Updated: August 2025

Vulnerability Disclosure Policy

Introduction

Veil Cards welcomes feedback from security researchers and the public to help improve our security. If you believe you have discovered a vulnerability, privacy issue, exposed data, or other security-related issue in any of our resources, we want to hear from you. This policy outlines steps for reporting vulnerabilities to us, what we expect from you, and what you can expect from us.

Systems in Scope

This policy applies to all digital resources owned, operated, or maintained by Veil Cards. The most pertinent subdomains include:

• api.veil.cards
• demo.veil.cards
• sandbox.veil.cards

Out of Scope

The following are out of scope for this policy:

• Resources or systems not owned or operated by Veil Cards
• Denial of Service (DoS) attacks
• Phishing attacks targeting Veil employees or users
• Rate limiting or brute force issues on non-authentication endpoints
• Reports of spam
• Self-XSS attacks
• Social engineering of Veil employees or customers
• Zero-impact clickjacking issues

Any vulnerabilities discovered in out-of-scope systems should be reported to the relevant vendor or authority.

Our Commitments

If you work with us under this policy, you can expect Veil to:

• Respond promptly to your report and work with you to validate the issue
• Keep you informed of the status of your report
• Remediate vulnerabilities in a timely manner, within operational limits
• Provide Safe Harbor for security research conducted in good faith under this policy

Our Expectations

When participating in our vulnerability disclosure program, we ask that you:

• Follow this policy and act in good faith
• Report vulnerabilities promptly
• Avoid violating the privacy of others, disrupting systems, destroying data, or harming user experience
• Use only our official reporting channels
• Allow us at least 90 days to resolve issues before public disclosure
• Test only in-scope systems and respect out-of-scope boundaries
• Limit data access to what is strictly necessary for demonstrating the issue
• Cease testing immediately if you encounter sensitive user data (PII, PHI, payment information, etc.)
• Use only accounts you own or accounts where you have explicit permission
• Do not attempt extortion

Submission Expectations

Reports should include:

• Detailed instructions to reproduce the issue
• Description of the potential impact to systems and/or users

Official Channels

Please report vulnerabilities by emailing security@veil.cards with all relevant information. The more detail you provide, the faster we can address the issue.

Safe Harbor

Research conducted in accordance with this policy is considered:

• Authorized under anti-hacking laws — we will not initiate or support legal action for good-faith research
• Authorized under anti-circumvention laws — we will not bring claims for bypassing technological safeguards
• Exempt from any restrictions in our Terms of Service or Acceptable Use Policy that would otherwise interfere with research
• Helpful to the overall security of our platform and conducted in good faith

If legal action is initiated by a third party against you, and you have complied with this policy, we will make it clear that your actions were conducted in compliance with our policy.

Note: Safe Harbor applies only to legal claims under Veil’s control. This policy does not bind third parties.

Last Updated: August 2025