Privacy Policy
Effective July 31, 2026. Last updated September 10, 2026.
Verdeer is a private job-search workspace. This policy explains what it collects, what it does with it, and what it will never do. It is written to be read, not to be survived, so it is specific about mechanics rather than broad about intentions.
Verdeer is currently operated as an individual project by its author, based in the United States. Throughout this policy, “Verdeer,” “we,” and “us” refer to that operator.
1. The short version
- Your career record and your email data are yours. They are used to operate Verdeer for you, and for a few other purposes, each listed with its limits in section 4.
- We may contact you about Verdeer, and you can turn that off at any time. We never contact the people in your records.
- We do not sell your data, we do not share it for advertising, and we do not use it to train generalized AI or machine-learning models.
- Connecting Gmail is optional and revocable by you at any time. Verdeer reads your mail; the only thing it ever changes is adding its own label to messages it has captured, so you can see its work in your inbox.
- Verdeer proposes; you confirm. Information detected from your email does not become part of your record until you accept it.
2. What Verdeer collects
2.1 Information you provide
Your account details, and the material you put into the product: work history, stories and accomplishments, target roles and preferences, job opportunities you are tracking, application materials such as resumes and cover letters, notes, and the content of your conversations with the product's coaching features.
2.2 Information from Google, if you connect Gmail
Connecting Gmail is optional. Verdeer requests two Google scopes:
gmail.readonly, to read your mail, and
gmail.modify, which it uses for exactly one operation
— adding one label, Verdeer/Tracked, to a message it has captured.
It creates that label the first time it captures something, and it uses no other.
That label is there so you can see what Verdeer has picked up without leaving Gmail,
and just as importantly, what it has not: job mail with no
Verdeer/Tracked label is something Verdeer missed, and that is how you
can tell.
Verdeer never sends, replies to, forwards, archives, marks read or unread,
moves, deletes, or otherwise alters your mail. The gmail.modify
scope Google grants would permit those; Verdeer does not use it for them, and that
restriction is enforced by an automated test that fails the build if any other
mailbox-changing call is added.
| What we access | Why |
|---|---|
| Messages matching job-application patterns — application confirmations, rejections, interview and recruiter-scheduling mail | To determine what changed for which application, so your tracker stays accurate without manual upkeep |
| For those messages: sender, recipient, subject, date, message and thread identifiers, and the message body | The body is what distinguishes a rejection from an interview invitation; the identifiers prevent the same message being counted twice |
Verdeer does not download or open attachments. It does not read your mailbox for any purpose other than the one described above.
2.3 Technical information
Standard server and security logs, including IP address, timestamps, and error diagnostics, retained for a limited period to keep the service running and secure. This public website sets no cookies and runs no analytics or tracking scripts.
3. How Google user data is used, stored, and shared
This section is the detailed disclosure required by Google. It is the part to read closely.
3.1 How it is used
Message content is evaluated by deterministic rules running on Verdeer's own infrastructure — pattern matching, not a language model — to classify a message as a confirmation, rejection, interview invitation, role cancellation, or none of these, and to associate it with an application you are already tracking.
The result is presented to you as a suggestion you must accept or dismiss. Nothing detected from your email is written into your career record automatically.
When a message becomes a suggestion, Verdeer adds its Verdeer/Tracked label to that message in Gmail. It never adds any other label, and it never touches a label you created. This is the only change Verdeer makes to your mailbox, it happens only for messages it captured — never for the messages it read and set aside — and it happens when the suggestion is created, not when you accept it, so a suggestion waiting for you is already visible in Gmail. Nothing else about the message changes: it stays in the same place, with the same read state, and keeps every label it already had.
3.2 What is retained, and what is not
- Message bodies are not retained. Body text is held in memory only for as long as it takes to classify the message, and is then discarded. It is not written to the database.
- For every message a scan reads, whether or not it turns out to be about a job application: the Google message and thread identifiers, the message date, when Verdeer processed it, and the outcome — that is, whether it produced a suggestion, and if it did not, the reason. Most messages a scan reads are not about job applications, and this record is what stops the next scan from reading them again. No sender address, subject line, or body text is retained for these.
- Additionally, for a pending or accepted suggestion: the sender address and the subject line, and whether Verdeer's label was successfully applied to that message. The identifiers are retained after you act on a suggestion so that a message you have already dismissed does not resurface.
- If you accept a suggestion that creates or updates an application record, the information you accepted — which may include text derived from the subject line — becomes part of your Verdeer record and is retained with it.
3.3 Sharing, and the one case where processing involves a third party
Google user data is not sold, rented, or shared for advertising, and is not transferred to third parties except as described here.
Verdeer uses Anthropic's Claude API as a service provider for drafting and analysis features. Email classification does not use it: as described in 3.1, that runs on deterministic rules and no email content is sent to any AI provider as part of it.
There is one indirect path, and we would rather state it plainly than let you discover it. If you accept a suggestion that creates or updates an application record, the accepted information becomes ordinary content in your Verdeer record. If you then use a feature that reasons over your records — asking the product to draft a cover letter for that role, for example — that record content, which may include text derived from an email subject line, can be included in the request sent to Anthropic on your behalf. Anthropic processes it to return your result. Under Anthropic's commercial terms, inputs submitted through the API are not used to train their models.
We may also disclose information where the law requires it, or where it is necessary to investigate a security incident or a violation of our terms.
3.4 Limited Use
Verdeer's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, Verdeer does not:
- use Google user data to serve advertisements of any kind;
- sell or transfer Google user data to data brokers, information resellers, or any other party for advertising, credit assessment, or similar purposes;
- use Google user data to develop, improve, or train generalized artificial intelligence or machine-learning models;
- permit humans to read Google user data, unless we have your affirmative agreement for a specific message (for example, when you send it to us to resolve a support problem), it is necessary for security purposes such as investigating abuse, or we are required to by law.
4. Other uses of your information, and their limits
Apart from operating Verdeer for you, these are the only things we do with your information. None of them uses the Google user data described in section 3; section 4.4 says what happens to that data if Verdeer changes hands.
4.1 Contacting you about Verdeer
We may contact you about Verdeer itself: new features, invitations to take part in research, and offers. We do this by email, or through the LinkedIn profile you have given Verdeer. Every such email has an unsubscribe link, and turning these messages off changes nothing about how Verdeer works for you. If you ask us to stop, we stop on every channel, LinkedIn included. Messages about your account or the service itself, such as a security notice, are not marketing and are not affected.
We only ever use your own contact details. We never contact the people in your records, such as recruiters or other contacts you have added. When you delete your account, we stop contacting you and delete the contact details we held for it, along with everything else (section 5).
4.2 Statistics that cannot identify anyone
We may combine information across accounts into statistics that cannot identify you or anyone else, such as the kinds of roles people are looking for, and use them to improve Verdeer and to describe it publicly. These statistics are built only from what people enter into Verdeer themselves, never from Google user data or anything derived from it (section 3). We do not sell them.
4.3 The companies that run Verdeer with us
A few service providers process information on our behalf, only to provide their service to us and never for their own purposes: Fly.io hosts the application and its database; Anthropic's Claude API powers the drafting and analysis features, as described in section 3.3; and Netlify serves this public website. We will keep this list current.
4.4 If Verdeer changes hands
If Verdeer is sold, merged with another company, or transfers its assets, account information may pass to the new owner, who will be bound by the promises in this policy, and we will tell account holders before it happens. Google user data (section 3) is treated differently: it passes to a new owner only with your explicit permission, asked for before the transfer, as Google's policy requires.
5. Your controls
- Disconnect Gmail at any time. Disconnecting inside Verdeer revokes the grant with Google, deletes the stored access and refresh tokens, and deletes the record of which of your messages Verdeer has read (3.2). You can also revoke access yourself from your Google Account's third-party access page, which takes effect immediately and stops all further access. Labels Verdeer already added stay on your messages — revoking access ends Verdeer's ability to touch your mailbox at all, including to tidy up after itself. The Verdeer/Tracked label is yours; delete it in Gmail whenever you like, and every message it was on is otherwise untouched.
- Delete your data. Write to hello@verdeer.com and we will delete your account and its contents, including everything derived from your email, within 30 days, and confirm when it is done.
- Get a copy, or ask what is held. Same address. We will respond within 30 days.
- Stop hearing from us. Use the unsubscribe link in any email about Verdeer, or write to the same address, and we will stop on every channel (4.1).
Depending on where you live, you may have additional rights over your personal information, including access, correction, deletion, and the right to complain to a supervisory authority. Write to us and we will honor them.
6. Retention
Your Verdeer record is retained for as long as your account is active, because the product's whole purpose is that the record compounds over time. Message bodies are never retained (3.2). Server logs are retained for a limited period. When you delete your account, its contents are deleted within 30 days, except where we are required to keep something to comply with a legal obligation.
7. Security
Access to your data requires authentication. Data is encrypted in transit, and stored on encrypted volumes. Google OAuth tokens are stored encrypted, are used only to perform the access described in this policy, and are destroyed when you disconnect or delete your account. No system is perfect, and we will not claim otherwise; if a breach affects your data we will tell you.
8. Children
Verdeer is built for experienced professionals and is not directed to anyone under 18. We do not knowingly collect information from children.
9. International users
Verdeer is operated from the United States, and information is processed there. If you use it from elsewhere, you are transferring your information to the United States.
10. Changes
If this policy changes in a way that materially affects how your data is handled, we will update the date at the top and notify account holders before the change takes effect. We will not apply a materially different use to data already collected without asking you first.
11. Contact
Questions, requests, or complaints: hello@verdeer.com.