Privacy

Public pricing records: source URLs, observation dates, plan scope, regions, and verification history. These records are about companies and their public pages, not about you.

Your email address and the domain concerned, when you report a correction, save your order details while checkout is closed, or leave your email with us.

Your email address, acceptance record, API key details, usage counts and coverage requests, when you open an agent account (see Agent access below).

When you run a preview, we fetch the pricing page for the domain you enter, and its robots.txt, with the VerifiedPricingPreview user agent. The fetched pages are not stored. We store the domain, the page addresses, the signals and their evidence, and a pseudonymous keyed hash of your network address block (not the address itself), which we use to apply daily limits. Preview results are deleted after 30 days. A result is shareable by anyone who has its link, and anyone can run a preview for any domain. Each preview is started by a person, not run on a schedule; it reads robots.txt to report the rules for named crawlers and does not apply those rules to its own requests. When the machine read runs, the page text is sent to our AI model provider to read plans and prices, and is not stored by us.

When you order a verified pricing record, we store your email address, the company domain, the pricing page address, the market, the request type and your notes so a person can check the page. Payment is handled by Stripe, which receives your email address as the checkout email; we do not receive your card details. Your notes are cleared 180 days after the order is published, cancelled or refunded. The order record is kept as an accounting record for 6 years, and your email address is removed from it 24 months after the order is published, cancelled or refunded. The published record never shows your email, your notes, the amount or who ordered it; it shows only that a paid check was ordered and when.

When you order an AI pricing accuracy report, alone or in a bundle, we store your email address and the company domain. To sample answers, questions about that company's pricing are sent to the sampled AI assistants through a provider's API; the questions name the company and its domain and do not include your email address. We store the sampled answers with their dates, the first-party facts they were compared with, and the finished report. The report is reached through a private link that we email to you; anyone who has the link can open it. Payment is handled by Stripe, which receives your email address as the checkout email; we do not receive your card details.

Reports, the working data of a report order and the sampled answers are kept for 24 months. Accounting records are kept for 6 years, as Finnish law requires.

This section is revision vp-agent-privacy-2026-10-23.

When you ask for a sign-in link, we store your email address, the link as a one-way hash, the time of the request, the terms and privacy revisions shown to you, and a pseudonymous keyed hash of your network address (not the address itself), which we use to limit requests. Resend delivers the email. The link works once and expires 15 minutes after it is sent.

When you finish signing in, we open your account under that email address and record which revisions you accepted and when, with the same kind of keyed network hash. A later acceptance of a new revision is added to that record; earlier entries are not changed.

For each API key we store its name, its first characters, a one-way hash of the key (never the key itself), its scopes, and when it was created, last used, revoked and set to expire. We count the units your account uses per UTC day and month.

When you use a key with the coverage:request scope to ask us to cover a product, we store the product ID or domain you sent, the category and product name you gave, if any, the link to your account, when you asked, and the request ID with its status, revisions and the product and domain it resolved to. The crawl that researches the request receives the product details and a request receipt, not your email address, account or key. Prices it publishes become public pricing records with their sources, like any others.

The sign-in page keeps the link token in the open page only, removes it from the address bar as soon as the page opens, and sends no referrer. A new key is shown once in your browser and is not stored by this site or sent to analytics.

A sign-in request that is never used carries no acceptance and is kept only as long as we need it to limit abuse. Your account, its keys, usage counts and acceptance records are deleted together once the account has had no sign-in, key activity or acceptance for 24 months, unless a paid order or audit still needs it. You can ask for deletion sooner at the address under Your rights. When an account is deleted, its coverage requests stay part of the crawl records without the link to the account.

If you accept the consent banner, we record first-party attribution (such as UTM parameters, landing path, and referrer host) and load Google Analytics, which measures visits to this site. If you decline, we store no attribution and Google Analytics is not loaded.

You can change your choice at any time by clearing the vp_consent_v1 cookie and answering the banner again.

Companies that process personal data for us: Stripe (payments), Resend (email delivery), Google Analytics (only after consent), Anthropic (AI model provider), DataForSEO (sampling of AI assistant answers).

The AI model provider and the assistant sampling provider receive page text or pricing questions as described above, never your email address.

Pricing records are kept as point-in-time observations, including superseded versions, so the history of a record stays inspectable.

Reports, the working data of an order, correction reports, saved order details and email addresses you leave with us are kept for 24 months. Accounting records are kept for 6 years, as Finnish law requires.

Anyone can report a correction, and a company can ask for a record about its own product to be removed. Removal requests are reviewed, and history is not rewritten silently.

Write to [email protected] to access, correct, export, or delete the personal data we hold about you. We answer within one month.