Who we are
Conpass is a product of Verne Ltd. (“Verne”, “we”, “us”). Verne is the controller of the personal data described in this policy. You can reach us at privacy@vernesystems.com about anything here.
This policy covers this website, the Conpass early-access list, and the Conpass service: the web app, Android app, browser extension, email digest, Telegram bot, calendar feed and API.
What we collect, why, and on what basis
| Data | Why we use it | Legal basis |
|---|---|---|
| Website technical data: IP address, browser user agent, pages requested, timestamps | Delivering the site, preventing abuse and keeping it secure. Processed by our hosting provider. | Legitimate interests |
| Website demo: text you paste or pick in the demo and ask Conpass to read, the language and time zone hints sent with it, and your IP address | Showing you what Conpass reads from a post. The text goes to the Conpass server, is read there by our own rules (no AI, and no links in it are followed), and the result is sent straight back to your browser. The text is not stored or logged. Your IP address is held in memory for up to 10 minutes to limit how often one visitor can use the demo, then forgotten. | Legitimate interests |
| Early-access sign-up: email, and optionally your home base and what you are building | Inviting you when Conpass opens in your city and deciding which cities to open first. | Consent |
| Account and settings: email, optional name, home base, reach, goals, budgets, workday value, delivery channels | Providing Conpass and ranking events for you. | Contract |
| What you send us: what you select with the browser extension (text, the part of the page you picked, a cropped screenshot or image, links and QR codes inside it), shares from your phone, forwarded emails, links sent to the bot | Reading the event details out of them, following public links for missing details (never on sites whose terms forbid automated access; those you open yourself), and tracking those events for you. We keep only event facts: comments, reactions and names unrelated to the event are discarded. From forwarded emails we drop sender and recipient addresses, forwarded headers and tracking links, and keep only a fingerprint of the message ID so the same email is never read twice. | Contract |
| Your decisions: interested, skipped, attended, post-event ratings | Making your ranking more personal over time. | Contract and legitimate interests |
| Delivery identifiers: digest email address, Telegram chat ID, device push tokens | Sending the digest and alerts you asked for. | Contract |
| Public event information: organisers’ public business contact details and speaker names in public agendas | Describing events accurately. Collected from public pages only. | Legitimate interests |
| Public social posts: event announcements from Bluesky organisation accounts you choose and Mastodon posts whose authors opted into search | Finding events. Only event facts and a link to the post are kept; the names and handles of individual authors, replies and likes are not stored. | Legitimate interests |
| Search leads: links to event posts on LinkedIn, Facebook, Instagram or X found through a search engine. Only the link is kept, never the search result’s title or snippet | Showing you event posts to open and capture yourself. Our servers never open these pages. | Legitimate interests |
What we never do
- Sell personal data, or share it for advertising.
- Use advertising trackers or analytics cookies on this website.
- Ask for your passwords, or use your LinkedIn, Facebook, Instagram or other platform sessions on our servers. The browser extension only reads pages in your browser when you ask it to.
- Collect attendee lists, scrape individual profiles or build profiles of private people.
- Make decisions about you with legal or similarly significant effects. Rankings are recommendations; you decide what to attend.
AI processing
AI is the last step, not the first. Conpass reads structured data, its own rules, QR codes and recognised text on our servers first. Only when those cannot read an event, and AI reading is switched on, does it send the relevant event text (never a whole page) or the crop you selected to an AI model, through OpenRouter, which forwards it to the model host named on our subprocessors page. Personal details that are not part of the event are removed before anything is sent. Every request requires a host that does not collect the content for training and keeps no copy of it (zero data retention), and daily and monthly spending caps stop AI reading altogether when reached. Results are checked against the source before they are used, and anything uncertain is shown to you to confirm.
Your goals, written in plain words, are matched against events on infrastructure we control. They are not sent to an AI provider. The website demo never uses AI: text you paste there is read by rules only.
Who we share data with
Only the service providers that help us run Conpass, listed on our subprocessors page, under contracts that limit their use of the data to providing their service to us. We may also disclose data where the law requires it, or to a successor if Verne’s business is reorganised, with this policy continuing to apply.
International transfers
Conpass serves founders worldwide, so your data may be processed in countries other than your own, including Singapore (where the Conpass server runs), Bangladesh, the European Union and the United States. Where the law requires it, we use appropriate safeguards such as standard contractual clauses.
How long we keep it
- Early-access sign-ups: until early access ends plus 12 months, or sooner if you ask.
- Account data and settings: while your account is open, then deleted within 30 days.
- Raw captured content (selected text, screenshots, images, recognised text) and page snapshots: up to 180 days, then only extracted event facts remain.
- Search leads: 7 days, or sooner if you dismiss them.
- Encrypted backups: copied off the main server nightly. Data you delete, or that expires, can remain in these backups for up to 35 days (raw captured files up to 7) until the backups rotate out.
- Hosting logs: as long as our hosting provider retains them for security, typically days to weeks.
Your rights
Depending on where you live, you can ask to access, correct, delete, restrict or object to our use of your personal data, receive a copy in a portable format, and withdraw consent at any time. Email privacy@vernesystems.com; we reply within 30 days. You can also complain to your local data protection authority.
- EEA and UK: these rights come from the GDPR and UK GDPR.
- California: we do not sell or share personal information for cross-context behavioural advertising, and you will not be discriminated against for exercising your rights.
- India, Bangladesh and elsewhere: we honour the rights your local data protection law gives you, and the requests above even where it does not.
Children
Conpass is for people aged 18 and over. We do not knowingly collect data from children.
Cookies and local storage
This website sets no tracking cookies. It stores your day/night preference, and if you try the demo your demo settings, in your browser’s local storage. Details are in our cookie policy.
Security
We protect data with encryption in transit, least-privilege access and other measures described on our security page.
Changes
We will update this page when our practices change and, for material changes, tell early-access members and account holders by email before they take effect.