Privacy Policy

1. Introduction

Verabro ("we", "us") respects your privacy. This policy explains what personal data we collect, how we use it, and what rights you have over it. By using our website and services, you agree to the practices described below, without prejudice to the rights recognised by the General Data Protection Regulation (GDPR) and applicable Spanish legislation (LOPDGDD).

Our services are intended for people over the age of 18 acting on behalf of a company. We do not knowingly collect data from minors.

2. Data we collect

• Account data: name, work email, company, role.
• Usage data: pages visited, features used, IP address, device and browser information.
• Content you submit: company profile, fundraising details, CRM entries.
• Technical cookies required for authentication and basic operational analytics. With your consent where required, we also use Google Ads to measure the performance of our own advertising: ad clicks and impressions, limited cookieless measurement signals for visitors who decline, and conversion events such as account sign-ups. See Google's privacy notice at https://business.safety.google/privacy/.

3. How we use it

We use your data to operate the platform, match you with relevant investors, provide customer support, send service-related emails, improve our product, and meet legal obligations.

4. Legal basis

We process personal data under the GDPR on the following bases: performance of a contract (to deliver the service you subscribed to), legitimate interest (to improve and secure the platform), consent (where required), and legal obligation.

5. Sharing

We do not sell personal data. We share it only with trusted processors who help us run the service: cloud hosting, email delivery, payment processing, analytics, and advertising measurement (Google Ads). All processors are bound by data protection agreements under Article 28 GDPR.

6. Google user data (Gmail)

If you connect your Gmail account, Verabro asks Google for permission to send email on your behalf (scope gmail.send) and for your basic Google account details (name, email address and profile picture).

• What we access: your Google account name and email address, and an access token that lets us send email from your Gmail address. We do not read, list, search, modify or delete the emails, contacts, labels or settings in your Gmail account.
• How we use it: only to send the emails you write or approve in Verabro (including follow-ups in sequences you activate) from your own address, and to show which Google account is connected. We do not use Google user data for advertising, and we do not use it to develop, improve or train generalised AI or machine-learning models.
• Sharing: we do not sell Google user data and do not transfer it to third parties. The exceptions are where needed to provide this feature (our cloud hosting provider stores the token on our behalf), to comply with the law, or as part of a merger or acquisition with notice to you.
• Storage and protection: tokens are stored encrypted at rest. Only your account and our backend can access them.
• Retention and deletion: tokens are kept while Gmail is connected. When you disconnect Gmail (My Profile > Gmail > Disconnect) or delete your account, we revoke the permission with Google and delete the tokens. You can also revoke access at any time at https://myaccount.google.com/permissions.

Verabro's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data retention

We retain personal data for as long as your account is active. After cancellation:

• Account data and CRM content are kept for an additional 12 months, in case you wish to reactivate your account, and are then deleted or anonymised.
• Billing data is kept for the period required by applicable tax and accounting legislation (generally 6 years under the Spanish Commercial Code).
• You may request early deletion of your data at any time, subject to our legal retention obligations, by writing to support@verabro.com.

8. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, and to data portability. To exercise any of these rights, write to support@verabro.com.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) ( www.aepd.es) or with the data protection authority of your country of residence, if you consider that the processing of your data infringes applicable law.

9. International transfers

Some of our processors are located outside the European Economic Area. When this happens, we rely on Standard Contractual Clauses approved by the European Commission or other equivalent safeguards recognised by the GDPR.

10. Security

We apply technical and organisational measures to protect your data, including encryption in transit, restricted access, and regular security reviews. No system is fully immune, so we encourage strong passwords and good account hygiene.

11. Use of your name and logo

If you accept the marketing licence described in section 6.1 of our Terms and Conditions, your trade name and logo may be displayed publicly on our website and promotional materials. You may revoke this consent at any time by writing to support@verabro.com; we will remove your name and logo within 10 business days of receiving your request.

12. Changes

We may update this policy from time to time. Material changes will be notified through the platform or by email with reasonable notice before they take effect.