Privacy Policy

Who We Are

VerifiedDR (verifieddr.com) is the controller of the personal data described in this policy. For any privacy request or question, contact contact@verifieddr.com.

Information We Collect

Account data: your name, email address, optional profile picture and X handle, password hash or the identity provided by Google/GitHub sign-in, and session metadata (IP address, browser user agent).

Product data: the websites you claim or submit, generated reports, keyword targets, growth runs, partnership messages you send, and the notification preferences you set. Website metrics themselves (DR, TrueDR, backlinks, traffic) describe websites, not people.

Billing data: orders and subscription state. Card details go directly to Stripe; we never see or store them.

Usage data: product events (pages viewed, features used), an analytics identifier stored in your browser, and rate-limiting counters keyed by IP address to prevent abuse.

Integrations you connect: if you connect Google Search Console or Google Analytics, we store the Google account email and OAuth tokens needed to read search analytics for your connected properties and traffic metrics for the Analytics property you select. If you set a Slack or Discord webhook, we store that URL to deliver your alerts.

How We Use Information And Legal Bases

To provide the service (contract, GDPR Art. 6(1)(b)): accounts, authentication, site verification, reports, alerts, partnerships, billing, and support.

To secure and improve the service (legitimate interest, Art. 6(1)(f)): abuse prevention, rate limiting, error monitoring, and product analytics.

To send product emails (legitimate interest with opt-out, Art. 6(1)(f)): product news, tips, and digests for account holders. Every such email carries a one-click unsubscribe link, and you can opt out any time in settings. Transactional email (verification, receipts, security) is sent as part of the contract.

To meet legal obligations (Art. 6(1)(c)): tax and accounting records for payments.

Google User Data And Limited Use

Connecting a Google integration is optional and always starts with you. VerifiedDR requests only read-only access, and only these scopes:

https://www.googleapis.com/auth/webmasters.readonly: reads Search Console performance data (clicks, impressions, positions, queries and pages) for the properties you connect, so your dashboard can show how your websites perform in Google Search.

https://www.googleapis.com/auth/analytics.readonly: lists your Google Analytics properties and their web data streams so the right property can be matched to your website, and reads that property's aggregated reports (sessions, users, engagement, and the top channels, pages, countries and devices), so your dashboard can show your measured traffic.

https://www.googleapis.com/auth/userinfo.email: reads the email address of the Google account you connect, so we can show you which account an integration is using.

We never write to, modify, or delete anything in your Search Console or Analytics account. The data we read is shown only to you in your own private dashboard and in reports you generate for your own websites. It is never published, never shown on a public page, never sold, never shared with other users, and never used for advertising or to train any AI or machine learning model.

VerifiedDR's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect an integration at any time from your dashboard, which revokes our access token with Google. Metrics already synced into your dashboard stay there so your history does not disappear; deleting your account erases them, and you can ask us to remove them sooner at contact@verifieddr.com. You can also revoke access directly at myaccount.google.com/permissions.

Cookies

We set first-party cookies that are necessary to run the service (the authentication session cookie and a currency preference cookie) and first-party analytics cookies and local storage from PostHog, our EU-hosted analytics, which recognize your browser across visits so we can measure how the product is used. There is no advertising and no cross-site tracking, and we never share analytics data with ad networks.

When you are signed in, product events are tied to your account so we can understand and improve how the product is used. You can block or clear cookies in your browser at any time; the service keeps working, you just may need to sign in again.

Service Providers

We share personal data only with the processors needed to run VerifiedDR: Cloudflare (hosting, storage, email delivery), InstantDB (database), Stripe (payments), PostHog (EU-hosted analytics), Upstash (rate limiting), Resend (email delivery), and Google/GitHub (sign-in and the Search Console and Analytics integrations you connect). Vendors that only receive domain names, never personal data, power the metrics themselves. A current list, with regions and safeguards, is available on request at contact@verifieddr.com. We do not sell personal information.

International Transfers

Some processors are located in the United States. Where personal data leaves the EEA, transfers rely on the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

Data Retention

Account and product data is kept while your account exists and deleted when you delete your account. Sessions expire and are removed automatically. Email send logs are kept to honor unsubscribe choices and audit delivery. Payment records are retained by Stripe for as long as tax law requires. Rate-limiting counters expire automatically within days. Backups roll over on a fixed schedule, so deleted data also leaves backups within weeks.

Your Rights

Under the GDPR you can access, correct, delete, export, restrict, or object to the processing of your personal data. Two of these are self-service in settings: "Export your data" downloads everything we store about you as JSON, and "Delete account" permanently erases your account and personal data, cancels active subscriptions, and revokes any connected Google access.

For anything else, email contact@verifieddr.com and we respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

Business Customers

Using VerifiedDR on behalf of an agency or company? Our Data Processing Addendum covers processing we do on your behalf.

Contact

For privacy requests, contact contact@verifieddr.com.