Privacy Policy

• Account details: your name (shown on your slides), email address, and a securely hashed password. We never store your password in plain text.
• Content you provide: links you submit, the text we retrieve from those links (such as an article or YouTube captions), text you paste, voice samples you add in settings, your brand color and template choice, and the drafts we generate and you edit.
• Billing information: your plan, subscription status, and Stripe customer and subscription IDs. Card details are entered on Stripe’s checkout page and handled by Stripe; we never see or store your full card number.
• Usage and technical data: how many generations you have used this month, and standard server logs from our hosting provider (such as IP address, browser type, and request times) used for security and troubleshooting.

• To provide the service: create your account, generate and save drafts, export PDFs, and enforce plan limits.
• To take payments and manage your subscription through Stripe.
• To keep Verbatim secure, prevent abuse, and fix problems.
• To contact you about your account, billing, and important changes to the service or these policies.
• To meet legal, tax, and accounting obligations.

We do not sell or rent personal information, we do not share it for cross-context behavioral advertising, and we do not use your content to train AI models. Where the GDPR applies, our legal bases are performing our contract with you, our legitimate interests in running a secure service, and legal obligations.

We share information only with providers that help us run Verbatim, and only what each one needs:

• OpenAI receives the source text, your voice samples, and instructions so it can write drafts. Under OpenAI’s API terms, data sent through its API is not used to train its models by default and may be retained by OpenAI for a limited period for abuse monitoring.
• Stripe processes payments, stores payment methods, and hosts the checkout page and customer portal.
• Vercel hosts the website and app and keeps operational logs.
• Neon hosts our PostgreSQL database, where your account and drafts are stored.

When you submit a link, our servers fetch that public page or the video’s captions from the site that hosts it (for example YouTube). We may also disclose information if the law requires it, to protect rights and safety, or as part of a sale or transfer of the business, in which case this policy continues to apply to it.

We use a strictly necessary cookie to keep you signed in. We do not use advertising or third-party tracking cookies. Stripe sets its own cookies on its checkout and portal pages for payment processing and fraud prevention.

• Account and drafts: kept while your account is open. You can delete individual drafts at any time from your history, and they are removed from our database.
• Account deletion: when you ask us to delete your account, we delete your profile, voice samples, and drafts within 30 days. Routine database backups held by our providers roll off on their own schedule.
• Billing records: invoices and payment records are kept by Stripe and by us as long as tax and accounting laws require, typically up to 7 years.
• Logs: hosting logs are kept for a limited period set by our hosting provider.

Data travels over HTTPS, passwords are hashed with bcrypt, and the database is reached over encrypted connections. No system is perfectly secure, so please use a unique password. If we learn of a breach that affects your personal information, we will notify you as the law requires.

You can view and update your name, voice samples, and brand settings in the app, and delete drafts at any time. You can also email support@verbatimcoach.com to:

• get a copy of the personal information we hold about you;
• correct it;
• delete your account and its data;
• object to or restrict certain processing, or withdraw consent where we rely on it.

Depending on where you live, including California (CCPA/CPRA), other U.S. states with privacy laws, and the EU, UK, or EEA (GDPR), you may have these rights by law. We will verify requests using your account email, answer within the time the law requires (generally 30 to 45 days), and we will not treat you differently for using them. If you are in the EU or UK and are unhappy with our response, you can complain to your local data protection authority.

Verbatim is run from the United States, and our providers may process data in the U.S. and other countries. If you use Verbatim from outside the U.S., your information will be transferred to and processed in the U.S., relying on the safeguards our providers offer, such as Standard Contractual Clauses.

Verbatim is for adults using it for work. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

If we make material changes, we will update the effective date above and notify account holders by email or in the app before they take effect.

Privacy questions or requests: support@verbatimcoach.com. See also our Terms of Service.