Privacy Policy
Effective April 2026 · Verdi · United States
1. Information We Collect
We collect the following categories of information when you use Verdi:
- Account information — your name, email address, and password when you register.
- Work email addresses — submitted for employment verification. These are verified by sending a confirmation link to the address provided.
- Peer review content — numeric ratings and written feedback you submit about colleagues.
- Usage data — pages visited, features used, and general interaction patterns on the platform.
2. How We Use Your Information
We use the information we collect to:
- Verify your employment through your work email address
- Display anonymous peer reviews on your profile, once you have explicitly consented
- Generate AI-powered hire scores from aggregated review data
- Moderate review content for quality, accuracy, and policy compliance
- Send transactional emails such as verification links and review notifications
- Detect email bounces to maintain the accuracy of employment verification records
We do not sell your personal data to third parties.
3. Consent and Your Reviews
Your visibility on Verdi is governed by explicit, per-employer consent:
- Reviews are only visible on your profile after you explicitly grant consent for a specific employer (company domain).
- Consent is specific — granting consent for one company does not extend to others.
- Once granted, consent is permanent and cannot be revoked. This ensures the integrity of the review record.
- You may request full account deletion at any time by contacting privacy@verdi360.com.
4. How We Protect Your Information
- All data is encrypted in transit using HTTPS and encrypted at rest in our database.
- Row-level security policies are enforced on all database tables, so users can only access data they are authorized to see.
- API keys, service credentials, and secrets are stored server-side only and never exposed to the client.
- Rate limiting is applied to all sensitive endpoints to prevent abuse.
5. Third-Party Services
Verdi uses the following third-party services to operate the platform:
- Supabase — database storage and user authentication.
- OpenAI — AI-powered review moderation and hire score generation. Review text is processed by OpenAI's API but is not stored by OpenAI per their data usage policies.
- Resend — transactional email delivery (verification links, notifications).
- Vercel — application hosting and infrastructure.
Each provider maintains their own privacy practices. We encourage you to review their policies if you have questions about how they handle data.
6. Reviewer Anonymity
- Reviewer identities are never revealed to the person being reviewed.
- Only the reviewer's company domain (e.g.,
@company.com) is displayed on the profile. - Verdi staff may access reviewer identity only in cases of active dispute resolution or when required by law.
7. Data Retention
- Account data is retained until you request deletion.
- Reviews are retained as long as the reviewer's account remains active.
- Work email verification records that have bounced are expired and marked inactive, but the underlying record is retained for audit purposes.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request deletion of your account and associated data
- Dispute any review on your profile that you believe is inaccurate or unfair
To exercise any of these rights, contact us at privacy@verdi360.com.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify users via email or a prominent notice on the platform. Your continued use of Verdi after changes are posted constitutes your acceptance of the updated policy.