Data we process
Business e-mail, organization and billing details, target URL, authorization evidence, review configuration, measurements, artifacts and audit events. We do not sell personal data.
Purposes and legal bases
We process data to answer your enquiry, enter into and perform the contract, secure the service and prevent abuse, provide support, meet accounting and tax duties and pursue legitimate interests in a reliable service. Acknowledging this policy on the contact form is not consent to marketing. Any marketing communication requires a separate appropriate legal basis.
Recipients and transfers
Reports are private. We use Bunny for hosting and execution, Stripe for payment, Brevo for transactional e-mail, Google CrUX for field performance data and OpenAI through the Node runtime for structured interpretation of redacted category digests. Providers receive only what their task requires. Where processing transfers data outside the EEA, we use an appropriate transfer mechanism and contractual safeguards.
Retention
Raw artifacts are generally retained for 30 days, or 90 days for active Monitor service. Normalized results and reports are retained for up to 24 months after the service ends. Authorization evidence and related audit records may be retained for five years. Law or a legal hold may extend these periods.
Your rights and contact
You may request access, correction, erasure, restriction or portability, or object to processing where applicable. You may complain to the Information Commissioner of the Republic of Slovenia. Contact privacy@verunel.com for privacy requests.