← Back to home

Privacy Policy

Last updated: May 25, 2026

Verol (“we”, “our”, “us”) operates the Verol browser extension and the website located at verol.app(the “Service”). This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your personal data. By using our Service, you agree to the collection and use of information as described in this Policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address, a hashed password, and any profile details you voluntarily provide. This information is required to provide you with access to the Service and to manage your subscription.

1.2 Billing & Subscription Data

We use third-party payment processors (such as LemonSqueezy) to handle billing. We do not directly store your full credit card number or payment instrument details. We retain a record of your subscription plan, payment history, and quota usage to manage your account.

1.3 Extension Usage Metrics

We collect anonymous, aggregated usage metrics to understand how the Service is used and to improve it. This may include: number of verifications performed, feature interaction counts, error rates, and session duration. This data is not linked to the content of your AI queries.

1.4 Analytics (Google Analytics)

Our website (verol.app) uses Google Analytics 4 (GA4) to collect anonymized, aggregate metrics. We deliberately limit what we measure to exactly two custom events:

  • Page visit — recorded when any page on verol.app is loaded. GA4 collects approximate geographic region, browser type, device type, and session duration. No personally identifiable information is attached.
  • Add to Chrome button click (cta_click) — recorded when a visitor clicks an “Add to Chrome” button on the landing page. Only the button location (hero section or bottom CTA) is logged.

Consent: GA4 is only loaded after you explicitly click “Accept” on the cookie banner shown on your first visit. If you click “Decline”, no analytics scripts are loaded or executed and no cookies are set. Your choice is saved in your browser's local storage. You can withdraw consent at any time by clearing your browser's local storage for verol.app.

We do not use Google Analytics within the browser extension itself. You may also opt out site-wide via the Google Analytics Opt-out Browser Add-on.

1.5 What We Do NOT Collect

We are explicit and unambiguous on this point:
  • We do not store, log, transmit to our servers, read, or retain any AI chat conversations, prompts, queries, or any content you input into or receive from any AI application (e.g., ChatGPT, Claude, Gemini, or similar).
  • We do not collect any AI-generated responses that the extension processes.
  • We do not collect browsing history, URLs, or content from web pages beyond what is strictly required to perform a specific, user-initiated verification action.
  • Verification claims processed by the extension are sent to our verification API solely for the purpose of fact-checking and are not persisted on our servers after the request completes.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service;
  • Process your subscription and manage your billing;
  • Send transactional emails (e.g., subscription confirmations, password resets);
  • Enforce our Terms of Service;
  • Detect, investigate, and prevent fraudulent or abusive activity;
  • Analyze aggregate, anonymized usage patterns to improve product features;
  • Comply with applicable legal obligations.

We do not sell your personal data to third parties, and we do not use your data for any form of behavioral advertising or profiling.

3. Data Retention

We retain your account information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain it for a longer period (e.g., financial records for tax purposes, typically 7 years).

Anonymized, aggregated analytics data may be retained indefinitely as it cannot be linked back to any individual.

4. Data Sharing and Third Parties

We may share your information with the following categories of service providers, solely to operate the Service:

  • Supabase — Authentication, database hosting, and account management.
  • LemonSqueezy — Payment processing and subscription management.
  • Google Analytics — Anonymized website traffic analytics (website only).
  • Vercel — Website hosting and CDN delivery.

We require all third-party processors to maintain appropriate security safeguards and prohibit them from using your data for any other purpose. We will not disclose your data to any other party without your consent, except as required by applicable law, a valid court order, or to protect our legal rights.

5. Security

We implement commercially reasonable technical and organizational security measures to protect your data from unauthorized access, alteration, disclosure, or destruction, including encrypted connections (HTTPS/TLS), password hashing, and strict access controls on our backend infrastructure.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request that we correct inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data (“right to be forgotten”).
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing of your personal data for direct marketing purposes.
  • Restriction: Request restriction of processing under certain circumstances.

To exercise any of these rights, contact us at privacy@verol.app. We will respond within 30 days.

7. California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the “sale” of personal information. We do not sell personal information. To exercise your California rights, contact us at privacy@verol.app.

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure all such transfers comply with applicable data protection laws, including using Standard Contractual Clauses (SCCs) approved by the European Commission where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the “Last updated” date above and, where appropriate, by notifying you via email or a prominent in-app notice. Your continued use of the Service after any update constitutes your acceptance of the revised Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Verol

Email: privacy@verol.app

Website: verol.app