Privacy Policy

Last updated: July 9, 2026

Verkview ("we," "us," "our") is operated by Verkview – Marco Simioni (Inhaber/Owner/Titolare: Marco Simioni), Landsberger Allee 62b, 10249 Berlin, Germany. We are the data controller for the personal data described in this policy. You can reach us at info@verkview.eu for any privacy question or to exercise the rights listed below.

This policy explains what data Verkview collects when you use our website (verkview.eu) and app (app.verkview.eu), why we collect it, and what rights you have over it under the EU General Data Protection Regulation (GDPR).

1. Data we collect

Account data

When you register, we store your email address, your name (if provided), a securely hashed password (we never store your password in plain text), and your account role. We record when your account was created, last logged in, and updated.

Your content

Everything you create in Verkview — projects, tasks, task descriptions, due dates, labels, and time-tracking data — is stored so the app can function. This is your content; we do not use it for any purpose beyond providing the service to you, except where noted under "AI features" below.

Google Calendar integration (optional)

If you choose to connect Google Calendar, we request two scopes from Google: read-only calendar access and calendar event access, only to sync your tasks with your calendar. Specifically:

  • Your OAuth access and refresh tokens are encrypted at rest (AES-256-GCM) and are never stored or transmitted in plain text.
  • Depending on the sync direction you choose, event titles, descriptions, and times from your connected calendar may be copied into Verkview as tasks. We do not store event attendees or event locations.
  • You can disconnect your calendar at any time from Settings, which revokes our access at Google and deletes the stored tokens.

AI features (optional)

If you use Verkview's AI task suggestions or AI chat assistant, the text you type (a goal description or chat message) is sent to a third-party AI model provider (Google Gemini, and in some cases Anthropic Claude) to generate a response. We do not automatically include your other tasks or projects in this request — only what you type. We log which model was used and token/cost counts for billing purposes, not the content of your prompts.

Technical and security data

To keep your account secure, we log sign-in sessions (IP address, browser/device information, and expiry), and security-relevant events (such as password changes) in an audit log. This data is used only for security, fraud prevention, and to help you if you report an account issue.

Push notifications (optional)

If you enable browser push notifications for task reminders, we store the technical subscription details needed to deliver a notification to your device. We do not use this for anything beyond sending reminders you've configured.

Analytics

We use PostHog, hosted in the EU, to understand how Verkview is used (e.g. which features are used, error tracking) and to improve the product. This includes standard web analytics and, on some pages, masked session recording (all text input fields are masked and never recorded). If you visit our website and later create an app account, we may link your earlier anonymous visit to your account so we can understand the full journey from visitor to user.

2. Why we process your data (legal basis)

  • Performance of a contract — account data and your content, to provide the service you signed up for.
  • Legitimate interest — security logging, fraud prevention, and product analytics, balanced against your right to privacy.
  • Your consent — optional features you explicitly enable, such as Google Calendar sync, AI features, and push notifications. You can withdraw consent at any time by disabling the feature in Settings.

3. Who we share data with

We do not sell your personal data. We share data only with service providers who help us run Verkview, under contracts that require them to protect your data:

  • Fly.io — hosts our application servers and database (United States).
  • Vercel — hosts our website and app frontend.
  • Google — Calendar API (if you connect it) and Gemini AI API (for AI features).
  • Anthropic — Claude AI API, used for some AI features.
  • PostHog — product analytics (EU-hosted).
  • Brevo — sends transactional emails (e.g. password reset, account notices, waitlist confirmation).
  • Supabase — stores waitlist sign-up submissions from our website.

We may also disclose data if required by law, or to protect the rights, property, or safety of Verkview, our users, or others.

4. International data transfers

Our application servers are currently hosted in the United States (Fly.io, San Jose, California). Because we operate from Germany and serve users across the EU, this means your data may be transferred outside the European Economic Area. Where this happens, we rely on appropriate safeguards under GDPR (such as Standard Contractual Clauses with our providers) to protect your data to an equivalent standard.

5. How long we keep your data

  • While your account is active, we keep your data for as long as you use Verkview.
  • If you delete your account, it is deactivated immediately and you have 30 days to recover it by contacting us or logging back in. After 30 days, your account and associated data (projects, tasks, labels, calendar connections, sessions) are permanently deleted.
  • Security and audit logs are retained for a limited period for security purposes, after which they are deleted or anonymized.

6. Your rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Export your data in a portable format — available directly from Settings in the app.
  • Correct inaccurate data.
  • Delete your account and data (subject to the 30-day recovery window above).
  • Object to or restrict certain processing, including withdrawing consent for optional features at any time.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at info@verkview.eu.

7. Cookies

Our website and app use cookies and similar technologies for authentication (keeping you signed in) and for analytics (see "Analytics" above). Authentication cookies are essential to the service. Analytics cookies help us understand and improve Verkview.

8. Children's privacy

Verkview is intended for business and professional use and is not directed at children. We do not knowingly collect personal data from anyone under 16.

9. Changes to this policy

We may update this policy as Verkview evolves. We'll update the "Last updated" date above when we do, and for significant changes we'll make reasonable efforts to notify you directly.

10. Contact

Verkview – Marco Simioni
Landsberger Allee 62b
10249 Berlin, Germany
info@verkview.eu