What we collect, and what we never do
The short version
We collect what each form asks for and nothing else. We use it to run your scan, send you the result, and reply to you. Your name and email never go to an AI provider.
What each part of the site collects
- Instant Scan: your brand name and website. Your IP address is used for an hour to stop one person running hundreds of scans.
- Unlocking a scan: your work email, so we can send you the private link.
- Full Verdict request: your name, work email, company, website, and anything you add in the notes.
Who handles it for us
These are the services we rely on. Each sees only what it needs for its job.
- Vercel. Hosts the site, runs the scan, and counts page views (Web Analytics, no cookies). Sees: Every request to the site, including your IP address. Analytics sees pages and anonymous funnel steps, never what you type.
- OpenAI (ChatGPT). Answers the buyer questions we ask about your brand, and judges which claims are for or against you. Sees: Your brand name and the public pages that rank for it. Not your name or email.
- Perplexity. Answers the same buyer questions. Sees: Your brand name. Not your name or email.
- Google (Gemini). Answers the same buyer questions, when enabled. Sees: Your brand name. Not your name or email.
- DataForSEO. Google rankings and search volume for your brand. Sees: Your brand name and search terms built from it.
- Firecrawl. A backup web search, used only if Google rankings are unavailable. Sees: Search terms built from your brand name.
- Upstash. Stores scan results, rate limits and requests. Sees: Your scan, your IP address (for an hour, as a rate limit), and your email and details if you give them.
- Resend. Sends the email with your scan link. Sees: Your email address and the link.
- Telegram. Tells us a scan was unlocked or a Full Verdict was requested. Sees: Your brand, website, and the details you sent us.
Several of these companies are based in the United States, so some of this data is processed outside the EU.
What we never do
- We don’t sell, rent, or share your details with anyone outside the list above.
- We don’t add you to marketing lists.
- We don’t run advertising trackers on this site.
- We don’t take card details.
How long we keep things
- Scan results and their private links: 30 days, then they expire.
- A cached copy of a brand’s scan, so a repeat scan doesn’t re-run: 24 hours.
- Rate-limit records tied to your IP address: 1 hour.
- Emails and Full Verdict requests: up to 12 months, unless you ask us to delete them sooner.
Ask us to delete your details and we will, within one working day. If you become a client, we keep the working records a client needs, and we’ll show you exactly what those are.
Who we are
VerdictDeck is operated from Dublin, Ireland. For any privacy request, including access, correction, or deletion, email hello@verdictdeck.com and a person will answer.
Changes
If this policy materially changes, we’ll change the date below and keep the plain language. Last updated: 22 October 2026.