Account data: When you register or sign in, we collect your email address, name, and authentication identifiers. We support Google OAuth and passwordless email sign-in, and this account data is processed and stored via Supabase.

Usage data: We collect information generated as you interact with the Service, such as the queries you submit, the analyses you run, the pages you visit, timestamps, and basic technical information about your device and browser.

Datasets: Customer-provided or provisioned datasets are stored in a private analysis service and are used solely to fulfill your analysis requests.

Business profile & uploads: When you complete your business profile, we collect your company intro, industry, and any product catalog you upload (PDF, Excel, Word, CSV, or image). Uploaded files are converted to text for matching and generation; the original file is not retained.

Payment information: When you buy credits, payments are processed by Stripe. We do not collect or store your full card number — only limited information such as transaction identifiers and credit records.

We use your information to provide, maintain, and improve the Service, including authenticating you, running the analyses you request, securing your account, and sending you important service-related notices.

We also analyze usage data in aggregated or de-identified form to understand product usage, troubleshoot issues, and improve features. We do not sell your personal information.

To provide features such as Buyer Match and outreach drafts, we send the relevant content (for example, your product intro and catalog text, and the publicly available website content of target buyers) to a trusted third-party AI model provider (Anthropic) for processing, in order to produce fit scores and draft text.

This content is used only to generate results for you; we do not use your content to train AI models. AI-generated results may not be fully accurate — please review them before use (see our Terms of Service).

We use cookies and browser local storage to keep you signed in and to remember your language preference.

These items are necessary for core functionality. You can clear or block them through your browser settings, but doing so may affect sign-in and the proper operation of certain features.

We rely on a small number of trusted third-party providers to operate the product: Supabase (authentication and database), Stripe (payment processing), Anthropic (AI processing), Google (OAuth sign-in and website analytics), Render (hosting), and Zoho (email delivery).

These providers process your information only as needed to provide services to us and are governed by their own respective privacy policies.

We apply reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and isolating customer datasets within a private analysis service.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

We retain your account and usage information for as long as your account remains active or as needed to provide the Service. When the information is no longer needed, we delete or anonymize it.

You may request deletion of your account; we may retain certain information where permitted or required by applicable law for legal, accounting, or compliance purposes.

Subject to applicable law, you have the right to access, correct, or delete your personal information, to object to or restrict certain processing, and to request a copy of your data.

To exercise any of these rights, please contact us at general@vervegroup.ca. We may need to verify your identity before acting on your request in order to protect your account.

We and our service providers may process and store your information in countries other than the one in which you reside. Data protection laws in those countries may differ from those in your jurisdiction.

When we make such transfers, we take appropriate safeguards to ensure your information remains protected in accordance with this policy.

The Service is intended for business users and is not designed for or directed at children. We do not knowingly collect personal information from children under the age of 14.

If you believe we may have inadvertently collected information from a child, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. For material changes, we will update the 'Last updated' date at the top of this page and, where appropriate, provide a more prominent notice.

Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

If you have any questions, comments, or requests regarding this Privacy Policy or our data practices, please email us at general@vervegroup.ca or visit goldrute.com.