Privacy Policy

1. Introduction

vermarkty ("vermarkty," "we," "us," or "our") is an AI marketing-content platform. This Privacy Policy explains how we collect, use, share, and protect personal information when you use the vermarkty platform at vermarkty.com, including the dashboard (collectively, the "Service").

We handle two kinds of personal information, and they work differently:

• Information about you as an account holder — the details you give us when you sign up, and the operational data we generate as you use the Service (logs, audit trails, billing records). We decide how this information is used, as described in this policy.
• Information inside the material your company uploads — the brand guidelines, reference images, and other materials, including the likeness of any individual appearing in a reference image. Your company decides what goes in and what it is used for; we hold and process it on your company's behalf, in accordance with our Terms of Service, and we do not use it for our own purposes.

2. Information We Collect

2.1 Information you provide directly

• Account information: name, email address, phone number, password (stored as a one-way hash), preferred language, and country.
• Authentication credentials: WebAuthn/passkey public keys and trusted-device tokens you create.
• Company information you provide: company name, contact information, and configuration data.
• Brand Assets you upload: brand guidelines (voice and tone, colors, fonts, logos, dos and don'ts), reference images, and related materials. Reference images may contain the likeness of individuals; you are responsible for having the rights and consents needed to upload them.
• Generation data: the prompts you submit and the pictures and copy you generate through the Service.
• Support and contact-form communications: information you provide when you contact us.

2.2 Information collected automatically

• Log and device data: IP address, browser type, device identifiers, pages visited, timestamps, and similar technical information generated when you interact with the Service.
• Audit trail: changes to records in vermarkty are tracked in an internal history table for security, compliance, and customer-support purposes.
• Cookies and similar technologies: see Section 10.

2.3 Information from third parties

• Account-invite signals: when you accept an invite to join a company, we receive the inviter's identification of you.

3. How We Use Information

We use personal information to:

• Provide, maintain, and improve the Service.
• Authenticate users, secure accounts, prevent fraud, and enforce our Terms of Service.
• Generate the pictures and copy you request from your brand guidelines and reference images (see Section 11).
• Send transactional communications — security alerts, password resets, account invites, and similar — which are necessary to operate your account.
• Respond to support requests and communicate with you about the Service.
• Comply with legal, tax, and regulatory obligations.
• Develop and improve features, including AI-assisted generation and help responses (see Section 11).
• Generate aggregate or de-identified statistics that do not identify any individual.

We do not use customer-uploaded data to train AI models, and we do not authorize our subprocessors to do so on our behalf.

4. Marketing Communications and Your Choices

We may occasionally send product announcements, newsletters, feature updates, or other marketing communications to vermarkty account holders. Every marketing message will include a one-click unsubscribe link, and you may opt out at any time. Opting out of marketing does not affect transactional communications (security alerts, password resets, account invites, and similar) that are necessary to operate your account.

5. How We Share Information

We share personal information only as described below. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

5.1 Service providers and subprocessors

We share information with vendors who process data on our behalf under written agreements:

The categories above describe the types of vendors we engage. Other than the analytics provider named in Section 10, we do not list individual vendors by name in this policy. To request the current list of subprocessors, please contact us through our contact form (select "Privacy Request" as the subject).

5.2 Governmental authorities

We may disclose information to comply with valid legal process, court order, or governmental request.

5.3 Business transfers

If vermarkty is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to the protections of this Privacy Policy.

5.4 With your consent

We may share information for other purposes with your consent or at your direction.

6. Data Storage and Security

vermarkty is hosted in the United States with a third-party cloud infrastructure provider. We apply technical and organizational measures designed to protect personal information, including:

• TLS encryption for data in transit.
• Encryption at rest for stored data.
• Role-based access controls scoped to company membership (Admin, User).
• Mandatory object-level authorization checks before serving data or files.
• Short-lived signed URLs for access to uploaded reference images and generated assets.
• Optional WebAuthn/passkey two-factor authentication.
• Audit logging of material changes to records.

No system is perfectly secure. If we become aware of a security incident affecting your personal information, we will notify you as required by applicable law.

7. Data Retention

We retain personal information for as long as needed to provide the Service and to comply with legal, tax, and accounting obligations.

• Account data: retained while your account is active and for thirty (30) days following account closure, after which it is deleted or anonymized.
• Billing records: retained for the period required by applicable tax law.
• Brand Assets and generated assets: retained while your account is active; removed on account closure or earlier when you delete them, subject to backup cycles below.
• Audit trail (record-change history): retained for the life of the underlying record. Where the underlying record is itself subject to a legal retention obligation, the corresponding audit history is preserved for the same period.
• Files marked for deletion: permanently removed approximately seven (7) days after deletion is requested, except where retention is required by law or by ongoing legal process.
• Application and request logs: retained for approximately thirty (30) days.
• Backups: may persist for approximately thirty (30) days after deletion in primary systems.

You may request deletion of your information as described in Section 9, subject to the retention obligations above. Historical references to a deleted account may persist in audit records that are tied to business documents with their own legal retention.

8. International Data Transfers

The Service is operated from the United States, and our subprocessors process data in the United States. If you access the Service from outside the United States, your personal information will be transferred to, stored, and processed in the United States, which may have data-protection laws that differ from those of your country. By using the Service, you acknowledge this transfer.

9. Your Rights

9.1 All users

You may submit a request through our contact form (select "Privacy Request" as the subject) to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information (subject to the retention obligations in Section 7).
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Receive a portable copy of your information in a structured, machine-readable format.

We will respond within the time period required by applicable law. We may need to verify your identity before processing your request.

9.2 United States residents

Depending on your state of residence, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), and similar state laws, including the right to know, the right to delete, the right to correct, the right to opt out of "sale" or "sharing" (vermarkty does not sell or share for cross-context behavioral advertising), and the right to non-discrimination for exercising these rights.

10. Cookies and Similar Technologies

vermarkty uses strictly necessary, functional cookies and a third-party analytics cookie. We do not use advertising or cross-site tracking cookies, and we do not sell or share your information for cross-context behavioral advertising. The cookies we set fall into the following categories:

• Session management — maintains your authenticated session (up to 6 hours).
• Security — protects against cross-site request forgery for the duration of your session.
• Optional "trust this device" — a token used for two-factor authentication, set only when you opt in (up to 30 days).
• Analytics — we use Google Analytics (a service provided by Google) to understand how visitors find and use the Service, so we can improve it. Google Analytics sets cookies and collects usage data such as pages visited, approximate location, device and browser type, and referring source. This information is processed by Google on our behalf; see Google's Privacy Policy for details.

We also use your browser's local storage to remember UI preferences (for example, sidebar and panel state). This information is stored only in your browser and is not transmitted to our servers for tracking.

If we add advertising or marketing technologies in the future, we will update this policy and request your consent where required by law before any such cookie is set.

11. Third-Party AI Features

vermarkty uses a third-party AI service to power its generative and help features:

• Content generation: when you generate pictures or copy, your prompts, brand guidelines, and the relevant reference images are transmitted to that AI service.
• In-product help assistant: when you ask a question in the help panel, your question and relevant help-article context are transmitted to that AI service.

Under our agreement with the AI service provider, data submitted through its API is not used to train its models.

12. Children's Privacy

The Service is intended for business use by adults aged 18 or older. We do not knowingly collect personal information from children under 18. If you believe a child has provided information to us, submit a request through our contact form (select "Privacy Request") and we will take appropriate steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date and, for material changes, will provide notice by email and/or by a prominent notice within the Service before the change takes effect.

14. Contact Us

For any questions about this Privacy Policy, to exercise your rights, or to request the current list of subprocessors:

• Contact form: vermarkty.com/contact/ — select "Privacy Request" as the subject.