Privacy policy
What Verte collects, why, who we share it with, and the choices you have. In short: our own first-party analytics, Google Analytics and Google Ads measurement on our public website, no raw IPs kept by us, and nothing sold.
Who we are
Verte is operated by DH DIGITAL LLC, 9108 N St, Sacramento, CA 95816 (“Verte”, “we”). For anything in this policy, write to privacy@useverte.com. Verte is offered only to businesses located in the United States. We decide how the personal information described here is used, except the information our customers put into the service, which we process on their behalf as their service provider.
What we collect
- Account details: your name, email, password (handled by our sign-in provider), workspace name and role.
- Billing details: your plan, billing interval and invoices. Card details are taken and stored by Stripe; we never see the full number. Stripe, our payment processor, loads its payment form on our sign-up page for payment processing and fraud prevention, and sets its own cookies there. The email address, company name and website you give on the sign-up form are sent to Stripe when you continue to payment, and stay with Stripe even if you do not pay. Stripe collects your billing address, an optional company name and an optional tax ID itself. Apart from Google’s tags on our public website, nothing else on our site loads from a third party.
- What you put into Verte: company names and websites, competitors, goals, subcategories, prompts, Engine conversations and report settings.
- Site analytics: only if you accept analytics in the cookie banner: the pages you view and your clicks on our public site and sign-up pages, a country derived from the request, and the page and campaign that first brought you. Until you accept, and if you decline or your browser sends Do Not Track or Global Privacy Control, none of this is recorded. We never store your raw IP address.
- Google Analytics: on our public website and blog only, unless you decline in the cookie banner or your browser sends Do Not Track or Global Privacy Control: Google records the pages you view, your device and browser, an approximate location and a random id kept in Google’s cookies. Google signals and ad personalisation are off.
- Google Ads measurement: under the same conditions, if you reach our site from one of our Google ads, Google keeps the ad click in its cookie, and when you finish signing up we tell Google a sign-up happened, with a one-way hash of your checkout as its reference (never your name, email or payment details).
- Newsletter: if you subscribe on our blog, your email address and when you asked (see The newsletter).
- Referrals: the referral code of a partner link you followed.
- Operational records: onboarding steps and billing events on your own account, and error reports when something breaks.
How we use it
- To run the service: research your company, write and check prompts, build dashboards and reports, and send the emails you ask for.
- To bill you, including free trials and their reminder 3 days before a trial ends.
- To understand and improve our website and sign-up flow, using our first-party analytics and Google Analytics.
- To measure which of our Google ads lead to sign-ups.
- To send the blog’s newsletter to the people who asked for it and confirmed.
- To credit the partner whose link you followed.
- To keep the service secure and fix errors.
We do not sell personal data. We share limited data with Google only to measure our own ads, and we don’t use remarketing or ad personalisation. Google’s tags are the only third-party analytics or advertising on our site, as described above.
AI processing
Verte sends the prompts you track to AI answer engines through a data provider, and uses AI models to read answers, research companies, write prompts and power the Verte Engine. The text sent is about the companies and topics you track, not about you. We do not use your data to train AI models, and our AI provider processes it under its commercial terms.
Who we share it with
We use these service providers, who process data only on our instructions:
| Provider | What for |
|---|---|
| Supabase | Sign-in, database and file storage |
| Render | Hosting our API and background jobs |
| Render | Hosting our website and web app |
| Stripe | Payments and invoices, payment processing and fraud prevention. Its payment form loads on our sign-up page, where Stripe sets its own cookies. The email, company name and website from the sign-up form are sent to Stripe when you continue to payment, and stay there even if you do not pay. |
| Resend | Account and report emails, and the newsletter’s emails |
| Sentry | Error monitoring |
| Google (Google Analytics and Google Ads) | Analytics on our public website and blog, not in the app: the pages you view, your device and browser, an approximate location and a random id in Google’s cookies. Ads measurement: the click on one of our Google ads that brought you, and that you signed up, with a one-way hash of your checkout as its reference. Not loaded if you decline or your browser sends Do Not Track or Global Privacy Control. Google signals, remarketing and ad personalisation are off. |
| Anthropic (Claude API) | AI processing described above |
| DataForSEO | Fetching AI engine answers for your prompts |
| Tolt | Our partner programme. For a visitor who followed a partner link and allows analytics: the referral code, the page they landed on (with any private token removed from its address), the referrer site, the country and the device type. For a workspace created after following a partner link, even if the visitor did not allow analytics: a click with the referral code (and those same details only where analytics the visitor allowed already gave them, otherwise just our home page address), then a customer record with the owner’s email, the workspace id and Tolt’s own partner and click ids. When the workspace is deleted, 7 days after it closes, we ask Tolt to delete that record; where Tolt can’t because a commission has been paid, it keeps the record with a placeholder email and no name. When a person deletes their account but the workspace goes on, their email in the record is replaced with a placeholder and the name removed, and the record stays. Never an IP address, a user agent or a visitor id. |
No Tolt script. Verte loads no Tolt script on its site (its only third-party scripts are Google’s tags, above): our own servers contact Tolt, and only for referred traffic.
Where your data is stored. Verte’s API, background jobs and database run in the United States (Render in Oregon, and Supabase in its US West region). Our other providers process data mainly in the United States.
United States only. Verte is built for, and offered to, businesses in the United States, and we store your data in the US. If you visit our website from somewhere else, the information described here is processed in the United States.
Our providers are bound by contracts that let them use personal information only to provide their service to us, and never to sell or share it.
How long we keep it
| Data | Kept for |
|---|---|
| Site analytics events and sessions | 13 months |
| Analytics visitor records not linked to an account | 13 months after last seen |
| Engine conversations | 12 months after the last message |
| Setup sessions | 30 days after they finish or expire |
| Pitch projects | 30 days after they expire (a pitch project expires 30 days after it is made) |
| Account and workspace data | While your account is open. A closed organization is kept 7 days so it can be reopened, then deleted; a deleted account’s data goes within 7 days |
| Invoices and payment records | Billing records: 7 years. Invoices and payment records at our payment provider: as long as tax and accounting law requires |
| Referral attribution | For the life of the workspace, then deleted with it; the partner programme’s record is described below |
Closing an organization. When an owner or admin closes an organization (your workspace), access ends at once and its subscription is cancelled. We keep its data for 7 days so an owner or admin it had can reopen it, and we email its owners and admins the date it will be deleted and a link to reopen it. After that we delete it, normally within minutes and in any case within 2 days of the end of that period.
Deleting your account. When you delete your account, you are deleted at once and your user id is removed from analytics events. The workspace data of any organization that closes with it (one you alone were in) is deleted within minutes, and never later than 7 days after you delete your account. A deleted account gets no recovery period.
Referral records. If a partner’s link brought your organization to us, our partner programme provider, Tolt, holds a customer record for it. While a closed organization is kept for reopening, we send Tolt nothing. When it is deleted after that, we ask Tolt to delete the record. Where Tolt refuses because a commission has been paid, the record is kept with a placeholder email and no name, and marked cancelled. A record that another of our organizations still holds is deleted when the last of them is. If instead you delete your account and your organization goes on, we do not delete or cancel the record: your email in it is replaced with a placeholder and your name removed. The record stays, because the organization still pays and the record is how the partner is credited.
Invoices and payment records. We keep our billing records of a deleted organization (Stripe ids, plan and dates, with no name or email) for 7 years. Invoices and payment records at our payment provider are kept as long as tax and accounting law requires.
Newsletter records are kept as described in The newsletter.
Your rights
If you live in a state with a consumer privacy law, such as California, Colorado, Connecticut, Virginia or Texas, you can ask to know what personal information we hold about you, and to access, correct, delete or get a copy of it. You can also opt out of the sale of your personal information, its sharing for targeted advertising, and profiling.
We don’t sell personal information. Our Google Ads measurement may count as “sharing” under California law; you can opt out of it by pressing Decline in the cookie banner or on our Cookie settings page, and we treat a Global Privacy Control signal from your browser as a request to opt out: with it, Google’s tags do not load. We won’t treat you differently for using any of these rights.
These rights cover your newsletter record too. To make a request, write to privacy@useverte.com. We’ll verify your identity before acting on it and reply within 45 days. You can also ask someone to make the request for you as your authorized agent. If we turn down your request, you can appeal by replying to our answer.
Security
Data is encrypted in transit, access is limited to the people and systems that need it, and secrets are never logged.
Children
Verte is a business service and is not meant for anyone under 16.
Changes to this policy
We may update this policy from time to time, for example as our service, our providers or the law change. We’ll update the date above whenever we do. If we make a material change, we’ll also tell account owners by email before it takes effect. Please check this page now and then; using Verte after a change takes effect means you accept the updated policy.