Join the waitlist

Privacy policy

Legal

Privacy policy

Last updated: 25 September 2026

Verploy is a service of EM Hosting & Design, a sole proprietorship (eenmanszaak) under Dutch law, established at Oesterstraat 50, 4691 KT Tholen, the Netherlands, registered with the Dutch Chamber of Commerce (KVK) under number 56914792, VAT number NL001735443B26 (“Verploy”, “we”). Questions about privacy: privacy@verploy.com.

1. This website (verploy.com)

  • Visitor statistics. We count page visits with Independent Analytics. It runs on our own server and doesn’t use cookies. The data stays on our server and isn’t shared with third parties. We keep these statistics for 24 months.
  • Sign-up statistics. We count, per day and per plan, how often the plan page is opened and “Create account” is clicked. These are anonymous totals: no cookies, no IP addresses.
  • Server logs. Our hosting provider keeps standard technical logs, such as IP address, time and requested page, for security and troubleshooting. These are kept for 30 days.
  • We don’t use advertising or tracking cookies.

2. The Verploy service (app.verploy.com)

Account data. We process the following to provide your account:

  • name, email address, company name and team members;
  • billing details.

Payments. Payments are processed by Stripe. We don’t store full card details.

Email. We send service emails, such as notifications and reports, through Resend.

Data about connected WordPress sites. Verploy processes technical data to maintain your sites:

  • plugin, theme and WordPress versions;
  • health data: PHP version, SSL, domain expiry, memory, disk space and uptime;
  • update runs and check results;
  • screenshots made during checks, kept in private storage.

Verploy doesn’t need WordPress passwords.

AI diagnosis. When an update fails, we send error messages, failed checks and version information to Anthropic (Claude) to explain the problem in plain language. We never send site content or visitor data.

Where the data is stored. Your data is stored within the European Union: with Supabase (West EU, Ireland) and Railway (EU West). We do not transfer your personal data outside the EU/EEA.

3. Our role

For your account data, we are the controller.

For data on your clients’ websites that Verploy may come across, such as content visible in screenshots, you or your agency are the controller and we act as your processor. A data processing agreement (DPA) is available on request.

4. Legal bases

We rely on the following legal bases:

  • Performance of the contract: providing the service and billing.
  • Legitimate interest: security, preventing abuse and anonymous website statistics.
  • Legal obligation: keeping financial records for tax purposes (7 years).

5. Retention

We keep account data while your account is active. After you cancel, we delete it within 90 days, except where the law requires us to keep it longer. Screenshots and check results are deleted after 90 days.

6. Your rights

You can ask us to access, correct, delete or transfer your data, or object to its processing: privacy@verploy.com. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Changes

We will announce important changes on this page and, where appropriate, by email.