Privacy Policy
This Privacy Policy explains how Verpetas ("we", "our", "the Service") collects, uses, and protects your information when you use our AI-powered business document management platform at verpetas.com.
1. Information We Collect
We collect the following types of information:
- Account information — email address, business name, company registration details provided during registration.
- Uploaded documents — PDF files, invoices, receipts, and images you upload for AI processing.
- Google Drive files — when you choose to import files from Google Drive, we access only the specific files you select. We do not access, store, or scan your entire Drive.
- Usage data — feature usage, AI query counts, and technical logs for service improvement.
2. Google Drive Integration
We only access files you explicitly select — Verpetas never scans, reads, or stores your Google Drive contents beyond the specific documents you choose to import.
When you use the Google Drive import feature:
- You authenticate directly with Google via OAuth 2.0 — Verpetas never sees your Google password.
- We request read-only access (
drive.readonly) solely to let you browse and select files through the Google Picker interface. - Only the files you explicitly select are downloaded to your browser and sent to our servers for AI processing.
- We do not store your Google OAuth tokens on our servers — authentication is browser-session only.
- You can revoke Verpetas access to your Google account at any time at myaccount.google.com/permissions.
Our use of Google user data obtained through Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
3. How We Use Your Data
- To provide AI-powered document digitization, classification, and analytics.
- To generate accounting exports (i.SAF, Rivile, Pragma formats).
- To send document expiry alerts and notifications you configure.
- To improve our AI models and service quality (anonymized aggregate data only).
We do not sell your data to third parties. We do not use your documents to train AI models without your explicit consent.
4. Data Storage & Security
- Documents are stored in Google Firebase (EU region — europe-west1).
- All data is encrypted in transit (TLS) and at rest.
- Access is restricted by organisation — users can only see their own organisation's data.
- AI processing is performed via Google Gemini API. Document contents are sent to Gemini for analysis and are not retained by Google beyond the API call.
5. Data Retention
Your documents and account data are retained as long as your account is active. You may delete individual documents at any time. To delete your entire account and all associated data, contact us at info@verpetas.com.
6. Your Rights
Under GDPR you have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at info@verpetas.com.
7. Cookies
We use only essential cookies required for authentication (Firebase Auth session). We do not use advertising or tracking cookies.
8. Third-Party Services
- Google Firebase — authentication and data storage (Privacy Policy)
- Google Gemini API — AI document analysis (Terms)
- Paddle — payment processing (Privacy Policy)
- Postmark — inbound email processing (Privacy Policy)
9. Contact
For privacy-related questions or data requests:
MB Verpetas
Email: info@verpetas.com
Website: verpetas.com