Privacy Policy

This Privacy Policy describes how VersoDocs collects, uses, and discloses personal data when you use the Service. It applies to all customers and visitors to versodocs.com.

Account data: name, email, profile photo (from your Clerk profile) and the organizations you create or are invited to.

Customer Content: documents, drafts, snapshots, published versions, comments, images, and metadata you create in the Service.

Billing data: handled by Polar as Merchant of Record; we receive plan tier, seat count, and renewal status, but not card or bank details.

Telemetry: request logs (path, status code, latency), error traces, and aggregate usage counters. We do not run third-party advertising or behavioral tracking.

To operate the Service: store and serve your documents, run version history, send transactional email (invites, notifications), and provide support.

To improve reliability: aggregated telemetry helps us find performance regressions and bugs. We do not read your document content for product analytics.

AI change summaries (Team and Pro): when you ask for a summary, or when a newly published version is announced by email, Slack or Teams, the relevant document content is sent to our hosted AI provider, solely to generate that summary. It is processed by Cloudflare Workers AI, which does not retain it. If Workers AI is unavailable, it falls back to Groq (United States, no retention by default), and only if both are unavailable and your organization has not turned this off, to DeepSeek (China). An organization admin can turn off the DeepSeek fallback in Organization settings. Apart from AI reviewers (below), these are the only times document content is sent to a third party for processing.

AI reviewers (Team and Pro, optional): when a workspace admin configures an AI reviewer, the proposal being reviewed (its title, description, changes and new text) is sent either to VersoDocs AI (processed the same way as AI change summaries: Cloudflare Workers AI, then Groq, then DeepSeek unless your organization turned that fallback off) or, with your organization's own API key, to the AI provider that admin chose, under that provider's terms. Nothing is sent unless an admin sets one up. We store your key encrypted.

We do not train AI models on your content. The AI features above send content to third-party model APIs only to produce the summary or review you asked for.

To meet legal obligations: respond to lawful requests, prevent abuse, and enforce our Terms.

Third-party service providers (sub-processors) that help us operate the Service, each bound to use your data only as needed to provide their service to us:

Clerk: authentication and user accounts.

Neon: managed PostgreSQL hosting (your account, organization, and document data).

Cloudflare: application hosting (Workers), document/image storage (R2), and cookieless web analytics.

Brevo: transactional email (invitations, notifications, digests).

Polar: billing and payments, as Merchant of Record.

Tawk.to: live chat support, loaded only if you open the chat widget.

Cloudflare Workers AI: processes AI change summaries and VersoDocs AI reviews (Team and Pro); receives the content being summarized or reviewed, only when that feature runs, and does not retain it.

Groq (United States): fallback for AI change summaries and VersoDocs AI reviews when Workers AI is unavailable; receives the same content, with no retention by default.

DeepSeek (China): last-resort fallback, used only if Workers AI and Groq are both unavailable and your organization has not turned the DeepSeek fallback off; receives the same content.

The AI provider a workspace admin picks for an AI reviewer (OpenAI, Anthropic, Google or another) receives the proposals that reviewer covers, under your own API key and contract with that provider.

Other org members: content you create inside an organization is visible to members of that org according to the permissions you set.

We do not sell or rent personal data.

API keys and connected apps (AI agents connected over OAuth, MCP clients, add-ins) can only do what their scopes allow: read published documents, propose changes, review proposals, and on Pro, opt-in scopes to manage documents or publish approved proposals. Nothing is published by an agent unless your workspace approval rules allow it.

Access is limited to one organization, and optionally one workspace. A connection made by a member acts as that member: it never sees a private workspace the member cannot open, and it stops working if the member leaves the organization.

Integrations you turn on (Slack, Microsoft Teams, GitHub, Zapier, n8n, Jira, Linear, email in) receive only the events and document details needed for the feature you configured.

Revoke any key, connected app or integration at any time in Settings. Revocation takes effect immediately.

Customer Content is retained for the life of your account. Version history is immutable by design: published versions cannot be deleted by users, only by deleting the parent document or organization.

When you delete an organization, its associated workspaces, documents, drafts, snapshots, versions, and uploaded files are deleted from our active systems. Residual copies may persist in routine backups for a limited period before being overwritten.

You may export your documents at any time on the Pro plan; lower tiers can request a one-time export via the chat widget.

We use industry-standard technical and organizational measures to protect personal data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. To report a vulnerability, contact us via the chat widget.

Depending on your location, you have the right to access, correct, port, or delete the personal data we hold about you, and to object to or restrict certain processing.

To exercise any of these rights, contact us via the chat widget. We will respond within the timeframe required by applicable law.

By using the Service you consent to your data being transferred to and processed in the jurisdictions where we and our service providers operate, which may differ from your own. Where required, we put in place appropriate safeguards for such transfers.

The Service is not intended for children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have, contact us and we will delete it.

We will post material changes to this policy on this page and, where appropriate, notify users by email before they take effect.

Questions about privacy or security? Contact us via the chat widget on any page.