Privacy Policy

This Policy applies to personal information processed by VerseGPT for its own account, service operations and user-requested functions. For organizational workspaces, responsibility may be shared or allocated between VerseGPT and the organization according to their respective roles and applicable data-protection law. Our independent payment partners may issue separate privacy notices for the payment transaction they handle.

We may process the following categories of information:

• Account information: name or chosen identifier, email address, login and authentication records, preferences, account settings and organization or user role, where applicable.
• Workspace and AI content: prompts, conversations, uploaded files, images and documents, generated responses and deliverables, request settings, feedback and processing status. These may contain personal information that you choose to submit.
• Connected-account information: records, permissions, account identifiers and content retrieved from external sources only when you authorize a supported connection or request its use.
• Usage, security and device information: event timestamps, service requests, credit allocations and debits, approximate location derived from network information, device/browser attributes, IP addresses, essential cookies, access logs and incident-detection records.
• Billing information: purchase and plan identifiers, payment status, invoicing references, refunds, transaction metadata and related customer support information received from the payment partner. We do not require you to enter full payment-card numbers or card security codes into the VerseGPT application.
• Communications: the information you include in support requests, complaints, privacy inquiries and other direct correspondence. Optional referral or marketing data is processed only when the relevant feature is used and legally permitted.

We use information to establish and authenticate accounts; provide requested AI, document and workspace functions; maintain subscription entitlements and usage balances; fulfill purchases; answer inquiries; detect abuse and security incidents; diagnose faults; comply with legal obligations; and maintain lawful accounting and dispute records.

Where we offer optional product communications, analytics or similar activities that require consent, we will request it where required and provide applicable controls. We do not authorize use of uploaded private content for an unrelated purpose merely because you submitted it to a task.

Where the applicable law requires a legal basis, we rely on contract necessity to deliver requested services, compliance with legal obligations, legitimate interests where legally permitted to secure and maintain the service, and consent for activities requiring it. Where consent is the required basis, you may withdraw it for future processing through the relevant account control or by contacting us. Withdrawal does not invalidate earlier lawful processing.

Only submit personal information about others when you have an appropriate legal basis, permissions and notices to do so. Do not upload restricted or sensitive categories of information unless this is lawful and suitable for the offered service and the necessary protections are in place.

To answer a request, the Platform may transmit the prompt, relevant files and limited task information to the AI-model or infrastructure systems needed for the feature you select. Different functions and models may use different technical suppliers and processing locations. Only provide material you are authorized to share with the selected processing route.

AI responses are generated automatically. We do not represent that such output constitutes a binding decision about your legal rights or qualifies as human professional advice. If a decision with legal or similarly significant effect is made using information from the Platform, use available review or challenge mechanisms under applicable law.

Independent AI or cloud suppliers may maintain logs or retain submitted content under their governing arrangements; we do not promise zero retention or zero training by every supplier without a separately verified assurance for the selected feature. Where a provider-specific option or privacy setting is available, it will be described in the relevant interface.

Personal information may be shared, to the extent necessary, with categories of contracted service operators that provide cloud hosting, AI computation, storage, content processing, identity and security tools, customer communications, technical support, purchase processing and optional user-authorized integrations.

We may also disclose information when required by a valid legal process, needed to investigate security or fraud, necessary to protect legal rights, or as part of a genuine corporate restructuring subject to applicable notice and safeguarding requirements. We do not publish your private account files or make them available to unrelated customers by default.

We do not sell personal information to data brokers or use private prompts and uploaded documents for third-party behavioural advertising. Any material change to these practices will require a revision of this Policy and any consent required by law.

The Platform is operated by a company registered in Uzbekistan and may use infrastructure or technical suppliers in other countries. Cross-border access, storage or processing of personal information will be carried out only where legally permitted and subject to applicable transfer rules and safeguards.

For personal data subject to Uzbekistan’s legislation, we will apply the applicable requirements, including any data-localization, database-registration and safeguards required for a particular class of information. Where international rules also apply, we will use lawful transfer mechanisms or other required protections. The exact processing location may depend on the feature, chosen model and technical provider. We will not represent that all user data remains in a single country unless that is true for the selected service configuration.

Account and profile data is retained while an account is active and afterward only as needed to complete requested closure, handle outstanding payments or disputes, meet legal duties, or protect security. User-generated content, prompts, conversations and uploaded files are retained while needed to provide the associated feature and user workspace and until deleted through available controls or an eligible deletion request, subject to backups and legal preservation requirements.

Usage and security logs are held for the period reasonably required for reliability, billing reconciliation, fraud prevention and investigation. Transaction, financial and tax records are retained for the periods required by applicable recordkeeping laws. Backup data is deleted through scheduled rotation rather than necessarily at the same moment as a primary record; it remains protected and is not restored for unrelated use. Where we cannot fulfil deletion in full due to a lawful exception, we will explain the applicable reason when required.

These are purpose-based retention criteria, not a claim that all categories use the same number of days. The retention controls implemented by our systems must reflect these limits, and any stricter applicable deadline will take precedence.

We use administrative, technical and organizational safeguards appropriate to the nature of the information and the risk, such as access restrictions, account authentication, secure communications, logging and incident response practices. We restrict personnel and contractor access to authorized operational purposes. No internet service is completely risk-free, so users should avoid including unnecessary confidential or sensitive data in prompts.

If you connect an external account, the Platform accesses information only within the scope of the authorization and functions you enable. Access may be revoked through account or integration controls when offered, or through the external service. Revocation stops future authorized retrieval but may not automatically erase records already lawfully processed or retained for valid reasons.

When you leave our Platform or use a separate service directly, that service’s own privacy terms may apply. The names of individual technical suppliers are not incorporated into this general Privacy Policy because technical configurations may change; specific disclosures will be provided where required by applicable law or a particular feature.

Essential cookies and similar identifiers may be used to maintain login sessions, store security choices, balance traffic and operate core website functions. If optional analytics, advertising or personalization technologies are enabled, we will provide appropriate information and obtain consent or offer opt-out controls where legally required. You can also control some cookies through your browser, although disabling essential cookies may prevent the Platform from working.

Depending on applicable law and your location, you may have rights to know whether your personal data is processed; receive information about the purposes and recipients; obtain access to or a copy of your information; correct inaccurate records; withdraw consent where it is the basis; request deletion or restriction; object to certain processing; request portability when available; and complain to a competent supervisory authority.

To exercise a right, use the Contact or Support function on the VerseGPT website with the subject “Privacy Request”. We may verify your identity and the authority of any agent. We will respond in the manner and time required by applicable law and explain any lawful limits or exceptions.

The Platform is intended for adults aged 18 and over, and we do not intentionally offer it to children. If we become aware of a child’s personal information collected contrary to this policy or applicable law, we will investigate and take appropriate action. Users uploading information about others must have a lawful basis to do so.

If a security incident affects personal information, we will investigate, contain the incident, document relevant facts and notify affected people or competent authorities where and when applicable law requires it. Any notification will describe available relevant information and actions reasonably appropriate to the event.

We may revise this Policy when the law, services or actual processing changes. A revised version will state its revision date. Where required by law, we will give additional notice or obtain renewed consent before materially different processing begins. Continued use does not replace consent that the law requires to be explicit.

Data-handling operator: VERSEGPT LLC, registered in the Republic of Uzbekistan; company/tax identification number 313372227. To contact us regarding personal information, request deletion or access, or ask a question about this Policy, use the Contact or Support function on the VerseGPT website and identify the request as a privacy matter. We will make any additional contact particulars required by applicable law available through the website.

When you connect your Google account to our application, we may access certain Google user data only after you grant permission through Google's authorization process. The specific data we access depends on the permissions (OAuth scopes) you authorize and the features you choose to use.

Depending on the permissions granted, this data may include:

• Gmail: Email messages, message content, sender and recipient details, subject lines, labels, and other email metadata necessary to provide the requested functionality.
• Google Calendar: Calendar events, event details, schedules, and related information needed to provide calendar-related features.
• Google Docs: Document content and metadata required to provide document-related features.
• Google Sheets: Spreadsheet content, cell values, and relevant spreadsheet metadata required to provide spreadsheet-related features.
• Google Slides: Presentation content and metadata needed to provide presentation-related features.

We use Google user data solely to provide, maintain, secure, and improve the specific functionality requested by the user, consistent with the permissions granted and applicable Google policies.

We access only the categories of Google data necessary to provide the features you request and only to the extent permitted by the permissions you grant. Not every category listed above is necessarily accessed by every user or feature.

Depending on the enabled features, this may include:

• Retrieving and displaying authorized information from your Google account.
• Searching, organizing, summarizing, or analyzing information at your request.
• Processing emails, calendar events, documents, spreadsheets, or presentations to perform a task you initiate.
• Generating requested outputs, reports, summaries, or responses based on authorized information.
• Maintaining the security, reliability, and proper functioning of the application.

We retain Google user data only for as long as reasonably necessary to provide the requested functionality, fulfill the purposes described in this Privacy Policy, comply with applicable legal obligations, and protect the security of our services.

Where Google user data is stored, it is protected using appropriate technical and organizational safeguards designed to prevent unauthorized access, disclosure, alteration, or destruction. Access is restricted to authorized personnel and service providers who need the information to perform their assigned functions and are subject to appropriate confidentiality and data-protection obligations.

We do not retain Google user data indefinitely. Our retention practices depend on the type of data, the feature being used, and the user's settings and requests.

We do not use Google user data for purposes unrelated to the functionality you have authorized.

We do not sell Google user data or share it with third parties for their independent advertising purposes.

We may disclose or process Google user data through service providers that support our application, such as cloud hosting, storage, security, and AI processing providers, only where necessary to deliver the requested functionality. These service providers are bound by appropriate confidentiality and data-protection obligations and may only process Google user data as instructed by us for the purposes described in this Policy.