Privacy Policy

Veridict is operated by Alexander Jarlenäs (sole trader), trading as "Veridict" ("we", "us"). For the personal data we collect from you as a user of the Veridict service, Alexander Jarlenäs is the data controller. You can contact us at hello@veridict.app for any privacy-related question.

Account data: email address, authentication identifier, and any name you provide.
Content data: the text of proposals you submit for review, and, on the Pro plan, the company context documents you upload.
Usage data: basic product telemetry (pages viewed, actions taken, device/browser type, IP address) needed to operate and secure the service.
Support data: messages you send us at hello@veridict.app.
Billing data: collected and processed by our payment provider Paddle (see "Sharing" below); we receive only limited billing metadata (plan, status, country, last four digits of the card).

We use your data to: (a) provide the service you signed up for — generating Decision Reviews and Context Reviews (legal basis: performance of a contract); (b) operate, secure and improve the service, prevent fraud and abuse (legitimate interests); (c) process payments and comply with tax and accounting obligations (legal obligation, via Paddle); (d) send service and account emails (performance of a contract). We do not use your content to train AI models and we do not sell your data.

Only you can see your proposals, reviews and company context inside the app. No other Veridict user or organisation can see your data. Our staff do not access your content except where strictly necessary to operate the service or where required by law.

We share personal data only with the service providers we need to run Veridict:

• Paddle.com Market Ltd — our Merchant of Record and payment processor. Paddle handles checkout, billing, tax, invoicing, refunds and related customer service, and receives your name, email, billing address, IP address and payment details.
• Supabase — database, authentication and file storage (EU region).
• AI model providers — proposal and context text is sent for the sole purpose of generating your review; it is not retained for training.
• Email delivery provider — transactional emails (account, billing).
• Authorities and professional advisers — where required by law.

Data is stored in the European Union and encrypted at rest and in transit. Some subprocessors (e.g. Paddle, certain AI providers) may process data outside the EU/EEA; in that case transfers are covered by Standard Contractual Clauses or an equivalent safeguard. We apply appropriate technical and organisational measures (encryption, access controls, least-privilege) to protect your data.

Account and content data are kept for as long as your account is active. If you delete your account, all associated data is deleted immediately and permanently, except: billing records that we (and Paddle) must keep for up to 7 years to comply with tax and accounting law; and backup copies that are overwritten within 30 days. Support emails are kept for up to 2 years.

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, to withdraw consent where processing is based on consent, and to lodge a complaint with your local data protection authority. Most rights can be exercised directly from your settings page (export, deletion). For anything else, email hello@veridict.app and we will respond within one month.

We use only cookies necessary to operate the service (session authentication). We do not use tracking or advertising cookies.

Alexander Jarlenäs — hello@veridict.app