Privacy Policy

Last updated: July 26, 2026

1. Introduction

Welcome to Verza Technologies, Inc. ("Verza", "we", "us", or "our"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and when using our services (the "Service").

This Privacy Policy explains how we collect, use, and safeguard your information, including data obtained through third-party Social Media API services, optional browser extensions such as the Verza Optic Scout Chrome extension, and communication providers. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information, including:

• Email address
• First and last name
• Phone number
• Professional information (e.g., brand name, agency details)
• Financial information for processing payments (handled via secure third-party processors like Stripe)

2.2 Social Media Data (The "Verified Metrics")

To provide our verified marketplace features, you may choose to connect your social media accounts. When you do, we collect:

• YouTube: Channel statistics (subscriber count, view counts, video metadata) via YouTube API Services.
• Instagram/Facebook: Profile metrics (follower count, engagement rates, reach) via the Instagram Graph API.
• TikTok: Account performance data (followers, likes, video stats) via the TikTok for Business API.

2.3 Optic Scout Chrome Extension

Verza Optic Scout is an optional Chrome extension used with Verza Optic to help brands and agencies discover Instagram creators for campaigns. It is not a standalone scraper—it runs only as part of an Optic mission you start in the Verza Optic web app while signed in to your Verza account.

When data is collected

The extension collects data only when you start an Instagram discovery mission in Verza Optic while signed in to Verza and, typically, signed in to Instagram in the same Chrome browser session. It does not run in the background or collect data outside an active mission you initiated.

What we collect via the extension

• Public Instagram website content visible on creator profile pages in your signed-in browser session, including profile username, display name, bio text, follower and post counts as shown on the profile, public external or profile links, and the profile URL.
• Personally identifiable information that appears in that public content—for example, a name, email address, or phone number if a creator published it in their bio or linked profile.
• Verza session credentials used only to authenticate API calls to Verza (claim mission, submit leads, report progress). We do not collect or store Instagram passwords through the extension.

What we do not collect via the extension

• Instagram passwords
• Private direct messages
• Full browsing history
• Keystrokes, clicks, or scroll activity logging
• Health information or payment card data from your browser
• Website content outside Instagram and Verza Optic hosts during a mission

The extension does not post, comment, follow, or send direct messages on Instagram.

How we use extension data

Data collected through Optic Scout is used for a single purpose: to run your Optic mission—evaluate creator fit against your brief, save matching creators to your Optic vault, and support AI-generated outreach drafts. We do not sell this data. We do not use it for creditworthiness or lending decisions. We do not use it for unrelated advertising.

Where data is stored and transmitted

Extension data is transmitted over HTTPS to Verza's backends (including Cloud Functions and Firestore associated with your Verza account or agency workspace). Locally, the extension may store temporary session flags—such as whether a mission is running and the associated job identifier—in chrome.storage.session. These flags are cleared when the mission ends or when the browser session ends.

Host access

The extension requests access only to Instagram (instagram.com), Verza Optic web app hosts (including app.tryverza.com and applicable staging environments), and Verza API hosts required to run Optic missions—not the open web.

Optic Scout does not access Instagram through the Instagram Graph API. It reads public profile pages in your signed-in Chrome browser session as described above. This is separate from the Instagram Graph API integrations described in Section 2.2 for verified creator metrics.

For how Optic vault leads are shared within your account and retained, see Sections 4, 5, and 8 below.

3. Social Media API Integrations

4. How We Use Your Data

Verza uses your data for the following core purposes:

• Verification: To display "Verified Metrics" (reach, engagement, growth) on creator profiles for brands to see.
• Marketplace Operations: To facilitate campaign postings, applications, and Campaign Vault-based payments.
• Creator discovery (Optic): To find and save public Instagram creator profiles to a brand's Optic vault when using Optic Scout, and to draft outreach for those creators.
• System Notifications: To send time-sensitive alerts, campaign updates, and security notifications via SMS or voice calls using third-party providers (e.g., Twilio).
• Communication: To send updates regarding your campaigns, payouts, or security alerts.
• Performance Analysis: To calculate your Verza Score and provide insights into content performance.

5. Data Sharing & Disclosure

6. Cookies and Tracking

We use cookies to track activity and hold certain information to improve your experience.

• Session Cookies: We use Session Cookies to operate our Service.

• Preference Cookies: We use Preference Cookies to remember your preferences and settings.

• Security Cookies: We use Security Cookies for security purposes.

7. Your Data Protection Rights (GDPR/CCPA)

Depending on your location, you have rights regarding your personal data. Verza aims to provide these rights to all users globally:

• The right to access, update or delete your information
• The right of rectification if your information is inaccurate
• The right to object to our processing of your Personal Data
• The right to request restriction of processing
• The right to data portability
• The right to withdraw consent

8. Data Retention & Deletion

We retain your information only as long as necessary for the purposes set out in this policy. If you disconnect a social media account or phone number, we stop fetching new data and will delete previously stored metrics within 30 days, unless a campaign is active and requires that data for legal/financial record-keeping.

Optic vault leads (public creator profile information saved via Optic Scout) are retained with your customer account until you delete them, until your account is deleted, or until you request removal by contacting support@tryverza.com.

To request full account deletion, please contact us at support@tryverza.com.

9. Security

We implement industry-standard technical and organizational security measures, including AES-256 encryption for data at rest and TLS for data in transit. However, no system is 100% secure.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please reach out:

• support@tryverza.com
• https://tryverza.com