The service is operated by Verand (“Verand”, “we”, “us”), a trading name of Brussel Investments, Inc., a Wyoming corporation. Questions, requests and deletion requests: support@verand.ai.
Our customers are businesses. When a customer connects a third-party account to Verand, we process data belonging to that customer’s business. We do not buy, scrape or assemble personal data about members of the public, and we do not operate a consumer service.
- Account data — name, work email address, and the organisation and sites you add. Used to authenticate you and to scope your data to your organisation.
- Content you provide — the websites you ask us to analyse, briefs, drafts, author profiles, brand and voice settings, and the material you add to your knowledge base. Used to produce and check your content.
- Billing data — handled by our payment processor. We store a customer identifier, plan and invoice history. We never receive or store full card numbers.
- Product and diagnostic data — log entries, error reports and aggregate usage events, used to operate, secure and debug the service.
Verand connects to Google services only on your instruction, only after you grant access through Google’s own consent screen, and only within the scopes below. We request the narrowest scope that supports the feature.
Read-only. We read search performance data for the properties you select: queries, impressions, clicks, click-through rate, average position, and the pages those relate to. We use it to display your search performance in your dashboard, to identify pages and queries worth improving, and to track whether a change moved that page. We cannot and do not modify anything in your Search Console account.
Read-only. We read aggregate traffic and engagement metrics for the properties you select — sessions, engagement, conversions and the landing pages they relate to — and join them to the Search Console data above so a page can be assessed from query through to outcome. We cannot and do not modify anything in your Analytics account.
Where you connect a business listing you control, we read the listing, its reviews and its questions in order to audit it, and we write only the items you have explicitly approved: posts, replies to genuine reviews, and answers to questions. We do not automatically change a listing’s name, address, phone number, categories or hours. We do not generate, solicit or post fake reviews, and we respond only to genuine reviews.
- It is used only to provide and improve the user-facing features described above, for the account that granted access.
- It is stored in our production database (see §5), scoped to your organisation and isolated from other customers by row-level access rules.
- Search performance figures may be passed to our AI subprocessor when generating recommendations for you — for example, when explaining why a page is underperforming. That processing happens under contractual terms that prohibit the subprocessor from using the data to train its models.
- We do not sell it, transfer it to data brokers, use it for advertising or credit purposes, or use it to train generalised AI or machine-learning models.
- Humans do not read it, except where you ask us to investigate a specific problem, or where access is strictly necessary for security or to comply with the law.
Limited Use. Verand’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect a Google integration at any time in Verand under Settings → Integrations, and you can revoke Verand’s access directly at myaccount.google.com/permissions. On disconnection we stop all further access immediately and delete the stored credentials. Data already retrieved is deleted within 30 days, or immediately on request to support@verand.ai.
Where you connect a content management system or code repository, we access only what is needed to read the pages you ask us to analyse and to submit drafts for your approval. Nothing is published to a live site without an explicit human action in Verand.
We use a small set of vendors to run the service. Each is bound by contract to protect the data they process on our behalf.
| Purpose | Vendor | Touches Google user data |
|---|---|---|
| Database, authentication, file storage | Supabase | Yes |
| Application hosting | Vercel | Yes (in transit) |
| Object storage and DNS | Cloudflare | No |
| AI model provider | Anthropic | Yes, for recommendations (no model training) |
| Text embeddings | OpenAI | No |
| Article images and image descriptions | Google (Gemini) | No |
| Background job orchestration | Inngest | Yes (in transit) |
| Payments | Stripe | No |
| Transactional email | Resend | No |
| Error monitoring | Sentry | Incidentally, in error reports |
| Product analytics | PostHog | No |
| Website analytics (verand.ai pages only) | Google Analytics / Tag Manager | No |
| Search and SEO market data | Third-party data providers | No |
We will update this list before adding a subprocessor that processes Google user data.
Data is held on managed cloud infrastructure in the United States, encrypted in transit with TLS and encrypted at rest. Access to production systems is restricted to personnel who need it. Third-party credentials and OAuth tokens are stored encrypted and are never exposed in the browser.
We operate from the United States and store data with providers located in the United States. If you are outside the United States, using the service transfers your personal data there, where it may be subject to lawful access requests by United States authorities. Where that transfer requires a legal mechanism — for customers in the UK, the EEA or Switzerland — we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum, available on request at support@verand.ai.
- Account and content data is retained while your account is active.
- On cancellation, data is deleted within 30 days, other than records we must keep for tax and accounting purposes.
- Disconnecting an integration deletes its credentials immediately and its retrieved data within 30 days.
- You can request deletion at any time at support@verand.ai. We respond within 30 days.
Depending on where you are, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a supervisory authority. Contact support@verand.ai to exercise any of these. We do not sell or share personal information for cross-context behavioural advertising, and we do not discriminate against anyone who exercises these rights. In the UK, the EEA or Switzerland you may complain to your local supervisory authority; in California, to the California Privacy Protection Agency; in Canada, to the Office of the Privacy Commissioner of Canada.
These pages (verand.ai). We use Google Tag Manager to load Google Analytics, and we use PostHog, our product-analytics provider. Both set first-party cookies so we can see how many people visit and which sources bring them here, and so that if you later create an account we can understand which pages you read first. We use this only to understand demand for the product and to improve it. We do not use it to build advertising profiles, and we do not sell it.
The application. Signed-in use of Verand relies on cookies that are strictly necessary to keep you signed in, plus first-party product analytics used to understand how the application is used. No advertising or cross-site tracking cookies are set in the application.
Verand is a business tool and is not directed to anyone under 18. We do not knowingly collect data from children.
We will post any change to this policy on this page and update the date above. Material changes affecting how Google user data is handled will also be notified by email to account owners before they take effect.
Brussel Investments, Inc., d/b/a Verand
1718 Capitol Ave, Cheyenne, WY 82001, USA
support@verand.ai