Privacy policy
Last updated: 9 November 2026
This policy explains what personal information Proking Solutions (Pty) Ltd ("Verdict", "we", "us") collects when you use verdictgeo.com and the Verdict app, why we collect it, and what you can ask us to do with it. We're the responsible party (the controller) for the information described here.
Who we are
Verdict is run by Proking Solutions (Pty) Ltd, a company registered in South Africa. For anything about privacy, email admin@proking.solutions. Our information officer is Ashley Kapaso.
What we collect
- When you book a demo: your name, work email, agency name and website, how many clients you look after, and anything you write in the message box.
- When you use the app: your name and email address, the agency workspace you belong to, and your role in it. We sign you in with a one-time code sent to your email, so we don't store a password.
- What you add for your clients: client names, websites and countries, competitors, the questions you track, notes on fixes, and your agency's logo. This is business information, but it can include people's names.
- If you connect Google Analytics: the Google account's email address and daily totals from the property, described in Google Analytics below.
- Technical information: the logs our hosting providers keep to run and secure the service, such as IP address, browser and the pages requested, and how you use the website and app, such as the pages you visit, the features you use and any errors you run into.
We don't use advertising cookies. The app sets the cookies it needs to keep you signed in, and PostHog sets analytics cookies so we can see how Verdict is used and fix problems.
Why we use it
- To arrange and hold the demo you asked for, and follow up about it.
- To run Verdict: sign you in, check your clients' questions with AI assistants, and show and email you the results.
- To keep the service secure, fix problems, see how Verdict is used so we can improve it, and meet our legal obligations.
- To bill you, once you're on a paid plan.
We rely on your request (for a demo), our contract with you (for the app), and our legitimate interest in running and improving a secure service. We don't sell personal information, and we don't use it to train AI models.
Who processes it for us
We use these providers, each under a contract that limits what they can do with it:
| Provider | What for | Where |
|---|---|---|
| Convex | Database and backend hosting | United States |
| Vercel | Website hosting, and routing requests to AI assistants | United States |
| Resend | Sign-in codes, invitations and the weekly email | United States |
| OpenAI, Anthropic, Google, xAI and Perplexity | Answering the buyer questions you track, and reading the answers | United States |
| SerpApi | Reading Google AI Overviews for the questions you track | United States |
| PostHog | Understanding how Verdict is used, and finding errors | United States |
| Google (Analytics Data and Admin APIs) | Reading the Google Analytics properties you connect | United States |
The AI assistants receive the buyer questions you track, not your account details. Because these providers are in the United States, your information is transferred there. Each provider is bound by its data processing terms to protect it to a standard comparable to South Africa's Protection of Personal Information Act (POPIA).
Google Analytics
An agency's owner or admin can connect a client's Google Analytics, so Verdict can show the visits and leads that came from AI assistants. Verdict asks Google for read-only access and never changes anything in Google Analytics.
- What we read: the Google Analytics accounts and properties the Google account can see, the chosen property's website address and key events, and aggregate reports of its visits and key events by traffic source, landing page and day.
- What we store: the Google account's email address and ID, the property's name and settings, daily totals of visits and key events from AI assistants (by source and landing page), daily totals for Organic Search, Direct and all visits, and a Google refresh token, encrypted, so we can update the totals each night. We don't store any visitor-level data: no individual visits, visitor IDs, IP addresses or demographics.
- Who sees it: the people in the agency's workspace, people at the client whom the agency invites to that client in Verdict, and anyone the agency shares the client's report with, unless the agency turns it off for that report. People at the client see the property and its totals, not which Google account connected it. When someone asks Analyst, Verdict's built-in assistant, about these visits, the totals it needs are sent to the AI model answering, and the totals and its answer stay in that person's Analyst conversation.
- Disconnecting: owners and admins can disconnect at any time. Disconnecting a client deletes its saved Google Analytics data, apart from figures Analyst has already given in a conversation. Disconnecting the Google account, in Settings → Integrations, deletes its token and revokes Verdict's access at Google. When the person who connected it leaves the workspace, we delete the token and revoke it too, and their clients keep the chosen property and saved totals until someone reconnects or disconnects them. In both cases we don't revoke it while the same Google account is still connected to another Verdict workspace, because revoking ends access there too. You can also remove Verdict's access from your Google Account settings.
We use this information only to show these figures in Verdict. We don't sell it, use it for advertising, or use it to train AI models, and our team only looks at it when you ask us to, to fix a problem or keep the service secure, or when the law requires it. Verdict's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How long we keep it
Account and workspace information for as long as your account is open, and 90 days after you delete it or close your account. Google Analytics data until the client is disconnected or deleted, except figures Analyst has given in a conversation, which stay in that conversation until the workspace is deleted or you ask us to delete it (archiving a conversation only hides it). Demo requests for 12 months unless you become a customer. Billing records for as long as tax law requires.
Your rights
You can ask to see the personal information we hold about you, correct it, delete it, or receive a copy. You can object to how we use it, or withdraw consent where we relied on it. Email admin@proking.solutions and we'll reply within 30 days. You can also complain to South Africa's Information Regulator (inforegulator.org.za), or to the data protection authority where you live.
Security
Information is encrypted in transit and at rest by our providers. Access to each agency's workspace is limited to the people it invites, and our team only looks at workspace data when you ask us to, or to fix a problem.
Changes
If we change this policy in a way that matters, we'll email account owners before it takes effect. The date at the top shows the latest version.