Back to Verse AI

Privacy Policy

Last updated: April 14, 2026

1. Introduction

Verse AI ("we", "our", "us") operates the website verse.horven.org (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Information you provide:

  • Account information: email address, name (optional), and a password (stored only as a bcrypt hash — we never store your password in plain text).
  • Chat data: messages you send and AI-generated responses, stored to provide your conversation history.

Information collected automatically:

  • Usage data: token consumption statistics used to manage your usage limits.
  • Technical data: IP address (used only for rate limiting and security), browser type, and access timestamps in server logs.

Information processed by third parties:

  • Payment information: credit card details are collected and processed exclusively by Stripe, Inc. We do not receive, store, or have access to your full card number. We only store your Stripe customer ID.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, we process your data based on:

  • Contract performance: to provide the Service you subscribed to (account, chat, billing).
  • Legitimate interest: to maintain security, prevent abuse, and improve the Service.
  • Consent: where required by law, such as for optional data collection.
  • Legal obligation: to comply with applicable laws and regulations.

4. How We Use Your Information

  • Provide, operate, and maintain the Service.
  • Process your subscription payments via Stripe.
  • Enforce usage limits and prevent abuse.
  • Ensure security and detect unauthorized access.
  • Respond to support requests.
  • Comply with legal obligations.

We do not use your data for advertising, profiling, or marketing purposes. We do not sell your data.

5. Data Sharing

We share your data only with the following categories of third parties, and only to the extent necessary:

  • Stripe, Inc. — payment processing. Stripe's privacy policy applies to payment data. See: stripe.com/privacy.
  • AI model provider (Anthropic) — your chat messages are sent to a third-party AI API to generate responses. Messages are processed per their API terms but are not used to train AI models.
  • Vercel, Inc. — hosting and serverless infrastructure.
  • Neon, Inc. — database hosting.

We may also disclose your data if required by law, court order, or governmental request, or if necessary to protect our rights, safety, or property.

6. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your data to countries outside your country of residence, which may have different data protection laws. We ensure that appropriate safeguards are in place with our service providers.

7. Data Retention

  • Account data: retained as long as your account is active.
  • Chat history: retained until you delete individual chats or your account. You can delete chats at any time from the interface.
  • Usage records: retained for billing and accounting purposes for up to 12 months after the billing period.
  • Server logs: automatically deleted after 30 days.
  • Upon account deletion, all personal data is permanently removed within 30 days, except where retention is required by law.

8. Data Security

We implement industry-standard security measures including:

  • Encrypted connections (HTTPS/TLS) for all data in transit.
  • Bcrypt-hashed passwords (we cannot read your password).
  • Secure, signed API authentication (JWT).
  • Stripe webhook signature verification.
  • Rate limiting on authentication endpoints.
  • Database hosted on encrypted, access-controlled infrastructure.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

9. Cookies

We use strictly necessary cookies only for authentication session management (keeping you logged in). We do not use analytics, tracking, advertising, or third-party cookies. Because these cookies are essential for the Service to function, they do not require separate consent.

10. Your Rights

Depending on your location, you may have the following rights:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: request correction of inaccurate data.
  • Deletion: request deletion of your data ("right to be forgotten"). You can delete chats yourself; for full account deletion, contact us.
  • Data portability: request your data in a machine-readable format.
  • Restriction: request that we limit processing of your data.
  • Objection: object to processing based on legitimate interest.
  • Withdraw consent: where processing is based on consent, you may withdraw it at any time.
  • Cancel subscription: at any time via the Stripe customer portal in Settings.

To exercise these rights, contact us at horven.socials@gmail.com. We will respond within 30 days. If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority.

11. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal data, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top. Where required by law, we will notify you of significant changes via email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: horven.socials@gmail.com