Veranda

Privacy policy

Last updated 10 November 2026

Veranda is an SEO and AI-search visibility service operated by Brand Surge (“we”, “us”). This policy explains what we collect when you use Veranda at app-veranda.brandsurge.ae, why, and the choices you have. Questions: info@brandsurge.io.

What we collect

  • Account details — your name, email address and sign-in information.
  • Your website — the public pages of the sites you add, which Veranda crawls to find and fix issues.
  • Connected accounts, only when you connect them — Google Search Console, Google Analytics 4, Google Business Profile, Facebook Pages, and your website platform (for example WordPress or Shopify). We store the access tokens these services give us, encrypted.
  • Business details you confirm — name, address, phone, hours, descriptions and similar details used to check and keep your listings consistent.
  • Public data about your market — search results, map listings, directory pages and AI-assistant answers about your industry and competitors.
  • Usage and cost records — what Veranda ran for your sites and what it cost, so we can show it to you and stay within your budget.

Facebook data

If you connect Facebook, we ask for permission to see the Pages you manage and to manage their details (pages_show_list, pages_read_engagement, pages_manage_metadata). We read the chosen Page’s name, about text, phone, website, opening hours and address, show you where they differ from your confirmed business details, and update those details only when you click to do so. We never post, message, read your personal profile or friends, or sell Facebook data.

Google data

Veranda’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Search Console, Analytics and Business Profile data is used only to report on and improve your own sites and listings.

How we use data

  • To run the service: find issues, prepare fixes, apply the ones you approve or allow, and measure the results.
  • To keep your business details consistent across Google, Facebook and directories, on your instruction.
  • To contact you about your account, alerts and reports.

We don’t sell personal data and don’t use it for advertising.

Service providers

We use these providers to run Veranda, each only for its part of the service: Supabase (database, hosted in Europe), Vercel (hosting), Anthropic, OpenAI, Google (Gemini) and Perplexity (AI analysis and writing, and checking how AI assistants answer questions about your market), DataForSEO (search and map data), and Square (card payments for paid plans: Square receives your card details directly from the payment form, and Veranda keeps only the card brand, last four digits and expiry). Each receives only what its task needs.

Security and retention

Access tokens for connected accounts are encrypted at rest. We keep your data while your account is active. When you disconnect a service, its tokens are removed; when you delete your account, we delete your data, except records we must keep by law.

Your choices

  • Disconnect any connected account from Veranda at any time; you can also remove Veranda’s access from the provider’s own settings (Google Account → Security → Third-party access; Facebook → Settings → Business integrations).
  • Ask for a copy of your data, a correction, or deletion — see Data deletion or email info@brandsurge.io.

Changes

We’ll update this page when our practices change and show the date at the top.