1. Who we are
This Privacy Policy explains how Verd AI Technologies Ltd ("VERD AI", "we", "us", "our") collects, uses, and protects personal data when you use the website and application at verdai.pro (the "Service").
We are the data controller. We are a private company limited by shares, registered in the Federal Republic of Nigeria.
We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA). Where users are in the European Economic Area or the United Kingdom, we also aim to honour the rights and principles of the EU/UK General Data Protection Regulation (GDPR).
For any privacy question or request, contact privacy@verdai.pro.
2. The information we collect
Information you give us:
- Your email address, used to create your account and sign you in with a magic link.
- The content you submit, the product or business ideas, questions, and market topics you enter to generate a verdict.
- Payment information: when you pay, our payment provider (Flutterwave) collects and processes your card or payment details. We do not receive or store your full card number; we receive confirmation of payment and limited transaction details.
- Anything you send us, for example, when you email support.
Information we generate or collect automatically:
- Your verdicts and market memory, the reports we produce for you and the accumulated market context tied to your account.
- Usage and technical data, basic information such as device and browser type, approximate location derived from your IP address, log data, and how you interact with the Service, collected to keep it secure and working. The IP address associated with a free search, used specifically for abuse detection, is kept for 30 days and then deleted.
- Cookies and similar technologies, described in Section 9.
Public market data: To produce a verdict, the Service collects publicly available content about a market, for example, public posts, reviews, and comments. This is about markets and products, not about you. Occasionally such public content may itself contain personal data that other people chose to post publicly (for example, a username on a public forum). We process this limited public information only to analyse market signal, on the basis of our legitimate interest in providing the Service. If you believe public content about you has been processed and you want it addressed, contact privacy@verdai.pro.
3. How we use your information
We use personal data to:
- create and operate your account and sign you in;
- generate your verdicts and run weekly monitoring of your tracked markets;
- take payment and manage your subscription;
- send you service and transactional emails (for example, magic-link sign-in, payment receipts, and monitoring alerts);
- provide support and respond to your requests;
- keep the Service secure, prevent abuse and fraud, and debug problems; and
- comply with our legal obligations.
We do not sell your personal data.
4. Our legal bases (NDPA / GDPR)
We rely on the following legal bases:
- Performance of a contract: to provide the Service you have signed up for, including generating verdicts and processing payments.
- Consent: for example, where you opt in to certain communications. You can withdraw consent at any time.
- Legitimate interests: to secure, maintain, and improve the Service, to prevent fraud and abuse, and to analyse publicly available market data. We balance these interests against your rights.
- Legal obligation: where we must process data to comply with the law.
5. Who we share it with (our processors)
We use trusted third-party providers to run the Service. Each receives only the data it needs for its function, and is required to protect it. Our main processors are:
| Provider | What it does | What it handles |
|---|---|---|
| Supabase | Database, storage, and authentication | Your account, email, submitted content, verdicts, and market memory |
| Flutterwave | Payment processing | Your payment and transaction details |
| Resend | Transactional email delivery | Your email address and the contents of service emails we send you |
| Vercel | Application hosting and delivery | Technical and log data needed to serve the app |
| Anthropic | AI analysis that produces verdicts | The market content and your question that are analysed for a run |
| Apify | Collection of publicly available market data | Search terms and topics used to collect public signal |
We may also disclose personal data if required by law, to enforce our Terms, or to protect the rights, safety, and property of VERD AI, our users, or others. If we are ever involved in a merger, acquisition, or sale of assets, data may be transferred as part of that transaction, and we will notify you of any change.
Each provider has its own privacy practices. We recommend reviewing the privacy policies of Supabase, Flutterwave, Resend, Vercel, Anthropic, and Apify for details on how they handle data.
6. International transfers
Some of our providers (for example, Anthropic, Vercel, Resend, and Apify) process data on servers outside Nigeria, including in the United States and other countries. This means your data may be transferred and processed outside your country of residence.
When we transfer data internationally, we take steps to ensure it remains protected in line with the NDPA's cross-border transfer rules and, where relevant, GDPR safeguards such as Standard Contractual Clauses or transfers to providers in countries with adequate protection.
7. How long we keep it
- Account data is kept while your account is active.
- Verdicts and market memory are kept indefinitely so they remain available to you, including across subscription cancellation, until you delete them. You can delete individual verdicts, or your whole account, from your dashboard.
- Payment records are kept as long as needed for accounting, tax, and legal obligations.
- When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep certain records to meet legal obligations or resolve disputes.
8. How we protect your data
We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and reputable infrastructure providers, to protect personal data against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to notify you and the relevant authority of a breach where the law requires it.
9. Cookies
We use cookies and similar technologies that are necessary to run the Service (for example, to keep you signed in and to keep the Service secure), and we may use limited analytics to understand and improve how the Service is used. You can control cookies through your browser settings, though disabling essential cookies may stop parts of the Service from working.
10. Your rights
Subject to applicable law (NDPA, and GDPR where it applies), you have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- delete your data ("right to erasure");
- object to or restrict certain processing;
- withdraw consent where we rely on it; and
- data portability, receive your data in a portable format.
To exercise any of these, email privacy@verdai.pro. We will respond within the timeframe required by law. We may need to verify your identity first. You can use the Service free of charge to exercise these rights, and we will not discriminate against you for doing so.
11. Children
The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@verdai.pro and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. If we make a material change, we will take reasonable steps to notify you (for example, by email or an in-app notice). The "last updated" date at the top shows when it was last revised.
13. Contact and complaints
For any privacy question or to exercise your rights:
Verd AI Technologies Ltd Privacy and data-protection requests: privacy@verdai.pro General support: support@verdai.pro
If you are in Nigeria and believe we have not handled your data properly, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC). If you are in the EEA or UK, you may also complain to your local data protection authority. We would appreciate the chance to address your concern first.