Privacy Policy

Effective 28 July 2026. Last updated 28 July 2026.

This policy explains what data Verand collects, why, how it is stored, who it is shared with, and how to delete it. It applies to the Verand application at verand.ai and to this website.

The service is operated by Verand (“Verand”, “we”, “us”), based in Ontario, Canada. Questions, requests and deletion requests: support@verand.ai.

1. Who this policy covers

Our customers are businesses. When a customer connects a third-party account to Verand, we process data belonging to that customer’s business. We do not buy, scrape or assemble personal data about members of the public, and we do not operate a consumer service.

2. Data we collect directly

• Account data — name, work email address, and the organisation and sites you add. Used to authenticate you and to scope your data to your organisation.
• Content you provide — the websites you ask us to analyse, briefs, drafts, author profiles, brand and voice settings, and the material you add to your knowledge base. Used to produce and check your content.
• Billing data — handled by our payment processor. We store a customer identifier, plan and invoice history. We never receive or store full card numbers.
• Product and diagnostic data — log entries, error reports and aggregate usage events, used to operate, secure and debug the service.

3. Google user data

Verand connects to Google services only on your instruction, only after you grant access through Google’s own consent screen, and only within the scopes below. We request the narrowest scope that supports the feature.

3.1 Google Search Console — webmasters.readonly

Read-only. We read search performance data for the properties you select: queries, impressions, clicks, click-through rate, average position, and the pages those relate to. We use it to display your search performance in your dashboard, to identify pages and queries worth improving, and to track whether a change moved that page. We cannot and do not modify anything in your Search Console account.

3.2 Google Analytics 4 — analytics.readonly

Read-only. We read aggregate traffic and engagement metrics for the properties you select — sessions, engagement, conversions and the landing pages they relate to — and join them to the Search Console data above so a page can be assessed from query through to outcome. We cannot and do not modify anything in your Analytics account.

3.3 Google Business Profile (planned)

Where you connect a business listing you control, we read the listing, its reviews and its questions in order to audit it, and we write only the items you have explicitly approved: posts, replies to genuine reviews, and answers to questions. We do not automatically change a listing’s name, address, phone number, categories or hours. We do not generate, solicit or post fake reviews, and we respond only to genuine reviews.

3.4 How Google user data is handled

• It is used only to provide and improve the user-facing features described above, for the account that granted access.
• It is stored in our production database (see §5), scoped to your organisation and isolated from other customers by row-level access rules.
• Search performance figures may be passed to our AI subprocessor when generating recommendations for you — for example, when explaining why a page is underperforming. That processing happens under contractual terms that prohibit the subprocessor from using the data to train its models.
• We do not sell it, transfer it to data brokers, use it for advertising or credit purposes, or use it to train generalised AI or machine-learning models.
• Humans do not read it, except where you ask us to investigate a specific problem, or where access is strictly necessary for security or to comply with the law.

Limited Use. Verand’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3.5 Withdrawing access

You can disconnect a Google integration at any time in Verand under Settings → Integrations, and you can revoke Verand’s access directly at myaccount.google.com/permissions. On disconnection we stop all further access immediately and delete the stored credentials. Data already retrieved is deleted within 30 days, or immediately on request to support@verand.ai.

4. Other third-party connections

Where you connect a content management system or code repository, we access only what is needed to read the pages you ask us to analyse and to submit drafts for your approval. Nothing is published to a live site without an explicit human action in Verand.

5. Subprocessors

We use a small set of vendors to run the service. Each is bound by contract to protect the data they process on our behalf.

We will update this list before adding a subprocessor that processes Google user data.

6. Storage, location and security

Data is held on managed cloud infrastructure in the United States, encrypted in transit with TLS and encrypted at rest. Access to production systems is restricted to personnel who need it. Third-party credentials and OAuth tokens are stored encrypted and are never exposed in the browser.

We operate from Canada and store data with providers located in the United States. Data held there may be subject to lawful access requests by United States authorities. By using the service you consent to this transfer.

7. Retention and deletion

• Account and content data is retained while your account is active.
• On cancellation, data is deleted within 30 days, other than records we must keep for tax and accounting purposes.
• Disconnecting an integration deletes its credentials immediately and its retrieved data within 30 days.
• You can request deletion at any time at support@verand.ai. We respond within 30 days.

8. Your rights

Depending on where you are, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a supervisory authority. Contact support@verand.ai to exercise any of these. We do not sell personal information. In Canada you may also complain to the Office of the Privacy Commissioner of Canada.

9. Cookies

This website uses no advertising or cross-site tracking cookies. The application uses cookies that are strictly necessary to keep you signed in, plus first-party product analytics used to understand how the application is used.

10. Children

Verand is a business tool and is not directed to anyone under 18. We do not knowingly collect data from children.

11. Changes

We will post any change to this policy on this page and update the date above. Material changes affecting how Google user data is handled will also be notified by email to account owners before they take effect.

12. Contact

Verand — Ontario, Canada
support@verand.ai