Privacy Policy

This Privacy Policy explains what information Verdolo ("we", "us") collects, how we use it, and the choices you have. Verdolo is operated by Kasey Farren, trading as Verdolo, a sole trader based in the United Kingdom. This Policy applies to the Verdolo marketing website (verdolo.com) and the Verdolo web application (app.verdolo.com), and covers both your account information and the Customer Data your organization stores in the Service.

1. Information we collect

• Account information: email address, password (hashed), display name, profile picture.
• Customer Data you enter: client records, notes, tasks, calendar entries, and time entries you or your team create.
• Billing information: handled directly by Stripe - we store your subscription status and plan, not your card details.
• Usage data: basic log/analytics data (e.g. request timestamps, IP address, browser type) used for security and reliability.
• Marketing website analytics and advertising data: when you visit verdolo.com, we may use tools such as Google Tag Manager and Meta Pixel to understand how visitors find and use the site and to measure the effectiveness of our advertising. These tools can collect information like pages viewed, referring website, and device/browser identifiers, and may set cookies or use similar technology. Where the law requires it, these tags are only loaded after you consent (e.g. via a cookie banner). See Section 7 (Cookies) below.

2. How we use it

We use this information to operate the Service: authenticate you, sync and display your organization's data, generate AI client messages (via Anthropic - your prompts and client context are sent to Anthropic to generate that message, subject to a monthly usage limit included with your plan), process payments and subscription billing through Stripe, provide customer support, and measure and improve our advertising and understand how visitors use this site.

3. Who we share it with

We don't sell your data. We share it only with the service providers that power Verdolo, each acting on our instructions to provide the Service: Supabase (database, authentication, file storage), Vercel (hosting), Anthropic (AI message generation), Stripe (payments and subscription billing), and - where enabled on this site - Google (Tag Manager) and Meta (Pixel) for site analytics and advertising measurement. Other members of your organization can see Customer Data according to their role's permissions, as described in-app. Some of these providers are based outside the UK/EEA (including in the United States); where that's the case, we rely on appropriate safeguards such as Standard Contractual Clauses to protect your data when it's transferred internationally.

4. Data retention and deletion

We retain your data for as long as your account is active. You can export your organization's data at any time from Settings. If you cancel your subscription or close your account, we retain data for a reasonable period to allow recovery/export, then delete it.

5. Security

Data is stored with row-level security so one organization cannot access another's data. Sensitive secrets are never exposed to the browser and are only readable by trusted server-side code. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

6. Your rights

If you're in the UK or EEA, we act as data controller for your account information and data protection law (including the UK GDPR) gives you rights to access, correct, export, delete, or restrict use of your personal information, and to object to certain processing. You can do most of this yourself in Settings, or contact us and we'll help. If you're not satisfied with how we've handled a request, you have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority. If you live outside the UK/EEA, you may have similar rights under your local law.

7. Cookies

Within the Verdolo application, we use essential cookies to keep you signed in and maintain your session - we don't use advertising cookies there. On this marketing website, we may additionally use non-essential cookies or similar technology set by Google Tag Manager and Meta Pixel for analytics and advertising, as described in Section 1. Where required by law, we only set these non-essential cookies with your consent, which you can manage via the cookie controls on the site.

8. Children

Verdolo is a business tool and is not directed at, or intended for use by, children.

9. Changes to this policy

We may update this Policy from time to time. We'll notify the organization owner of material changes.

10. Contact

Questions about this Policy or your data? Contact us at team@verdolo.com.

See also our Terms of Service.