This Privacy Policy explains how Verrow LLC ("Verrow," "we," "us," or "our") collects, uses, processes, shares, and protects information through verrow.org, Verrow customer workspaces, public application pages, demo requests, communications, and related services.
1. Information We Process
Business and Customer Information may include business and display names, contact names, email addresses, phone numbers, account and workspace information, job-role information, hiring-workflow settings, team-member information, integration settings, demo requests, onboarding information, billing and subscription records, and communications with Verrow.
Applicant Information may include name, email address, phone number, role applied for, location supplied by the applicant, availability, employment experience, qualifications, licenses or certifications, work-authorization responses, resume information, uploaded application documents, custom application-question responses, follow-up responses, interview information, application and candidate status, and other information submitted through the hiring workflow.
AI-Assisted Screening Information may include applicant summaries, fit scores, fit levels, identified strengths, identified concerns, suggested next steps, and structured interpretations of application responses.
These outputs support employer review and do not represent final employment decisions by Verrow.
Technical Information may include device and browser information, IP addresses or derived identifiers, login and security events, pages and features used, request timestamps, error and diagnostic information, referral information, and information used for rate limiting, abuse prevention, and security.
2. How We Use Information
Verrow may use information to operate Verrow, receive and organize applications, provide AI-assisted screening and summaries, display applicant information to authorized hiring teams, support candidate follow-up workflows, schedule and manage interviews, send operational communications, authenticate users and protect workspaces, configure customer hiring workflows, process payments and subscriptions, provide support, troubleshoot problems, monitor reliability and security, prevent fraud and unauthorized access, maintain business and legal records, enforce agreements, and comply with applicable law.
3. AI and Automated Processing
Verrow uses automated and AI-assisted systems to help employers organize, summarize, and assess applicant information against job-related criteria configured or approved by the employer.
These systems may generate fit scores, fit levels, summaries, strengths, concerns, and suggested next steps.
Verrow does not make an employer's final hiring decision.
Employers remain responsible for reviewing applicant information and making employment decisions.
4. Business Clients and Applicant Data
Verrow generally processes applicant information to provide services to the business receiving the application.
The employer controls its hiring process and is responsible for its job criteria, employment decisions, applicant communications, and any additional notices or procedures required by laws applicable to that employer.
Applicants with questions about a specific hiring decision should normally contact the employer to which they applied.
5. Service Providers
Verrow may use service providers supporting cloud infrastructure and hosting, database and storage services, authentication, email delivery, automation, AI/model processing, payment processing, calendar and scheduling services, website infrastructure, security and monitoring, and customer support.
These providers may process information as needed to provide their services to Verrow, subject to applicable agreements and legal obligations.
6. Connected Integrations
Customers may connect third-party services such as Google Calendar or Calendly. Information exchanged through these integrations is used to provide the requested scheduling functionality. Third-party providers maintain their own privacy practices.
Google user data we access. When a customer connects a Google account, Verrow accesses the account identifier and email address to identify the connection; calendar list information (calendar IDs, names, access roles, and time zones) so the customer can choose a calendar; and calendar event details (such as times, titles, attendees, and conferencing links) as needed to check for scheduling conflicts and to create, update, and manage interview events, including Google Meet links.
How we use and store it. Google user data is used only to provide the interview-scheduling features the customer has requested. Authorization tokens are held server-side and, with integration settings, are stored in Verrow's backend database. Interview records, such as event identifiers, dates, times, and meeting or calendar links, are stored as needed to display scheduling and interview history in the workspace.
With whom we share Google user data. Google receives the requests and event content needed to provide Calendar, Meet, and invitations. Authorized users in the customer's hiring workspace can see the connected account, calendar configuration, and interview records. Invited candidates and other interview participants receive only the relevant interview details; they do not receive access to unrelated calendar contents or authorization tokens. Supabase, Verrow's backend and database provider, processes Google integration data to store it and run Verrow. Resend, Verrow's email delivery provider, processes only interview notification content, recipient information, and meeting or calendar links to send confirmation and rescheduling emails; authorization tokens are never sent to it. Infrastructure, hosting, and security service providers may process the minimum information needed to operate and protect these features. We transfer Google user data only to provide or improve user-facing features the customer has requested, with consent, for security purposes, to comply with applicable law, or as part of a merger, acquisition, or sale of assets after obtaining any required prior explicit consent.
What we do not do. Verrow does not sell Google user data and does not use it for advertising, data brokerage, credit decisions, or training generalized artificial intelligence or machine-learning models. People at Verrow do not read Google user data unless the customer gives affirmative consent for specific data, it is needed for security investigation, it is required by law, or it is used in aggregated form for lawful internal operations.
Verrow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Disconnecting. Customers can disconnect Google in Settings → Integrations, or revoke Verrow's access from their Google Account permissions. Disconnecting stops future access and clears the authorization tokens Verrow holds. Retained interview records and deletion requests are handled as described in the data retention section of this policy and by contacting support@verrow.org.
7. Payments
Payment-card information is processed through Verrow's payment provider.
Verrow may receive and store billing identifiers, subscription status, invoices, payment status, billing dates, and related transaction information but does not need to store complete payment-card numbers.
8. We Do Not Sell Applicant Data
Verrow does not sell applicant personal information.
Verrow does not use applicant information for unrelated advertising to applicants.
9. Data Security
Verrow uses administrative, technical, and organizational safeguards designed to protect information.
These safeguards may include authenticated workspace access, tenant-level data controls, private document storage, limited-duration document links, server-side integration credentials, access controls, and operational monitoring.
No system can be guaranteed completely secure.
10. Data Retention
Verrow retains information for as long as reasonably necessary to provide and support the service, maintain business and billing records, resolve disputes, protect security, enforce agreements, and comply with legal obligations.
Retention may vary depending on the type of information and the customer's relationship with Verrow.
Deletion from backups, logs, or third-party systems may take additional time.
11. Data Requests
Depending on the user's relationship with Verrow and applicable law, users may have rights relating to access, correction, deletion, or other handling of personal information.
Applicants may contact the employer responsible for their application or Verrow at support@verrow.org.
Verrow may need to coordinate applicant requests with the applicable business client.
12. Sensitive Information
Verrow is not designed to collect Social Security numbers, medical records, credit reports, background-check reports, government identification scans, or similarly sensitive information through ordinary application workflows unless an appropriate separate process has been established.
Customers must not configure screening criteria that unlawfully rely on protected characteristics.
13. Children
Verrow's services are not directed to children under 13, and Verrow does not knowingly seek personal information from children under 13.
14. Changes to This Policy
Verrow may update this Privacy Policy as its services, practices, or legal obligations change.
The current version will be posted on verrow.org with the applicable effective date.
15. Contact
Verrow LLC
support@verrow.org