Privacy Policy

Draft — to be dated upon publication. This is a starting template and has not been reviewed by a lawyer. Review with counsel familiar with GDPR (EU/UK) and U.S. state privacy law before publishing live.

Verselio ("we," "us") operates verselioai.com. This policy explains what personal data we collect when you use our site to create a personalized song, why we collect it, and the choices you have.

1. What we collect

• Story details you provide — names, relationships, occasions, and personal anecdotes you submit to generate your song's lyrics.
• Photos (optional) — if you choose to upload photos, we use them for your song's cover art and delivery page. You control whether to upload any.
• Contact information — your email address, collected before we generate your free preview, used to deliver your song and send order updates.
• Payment information — processed directly by Stripe, our payment processor. We do not store your full card number on our servers.
• Usage data — pages visited, device and browser type, and general location (country/region), collected automatically to understand how people use the site.
• Advertising identifiers — if you arrive via a Meta or Google ad, a pixel may record that visit for campaign measurement. See Section 7.

2. How we use it

• To turn your story into song lyrics using AI language technology, and into a produced, sung track using AI music generation technology.
• To generate cover art and your delivery page, using any photos you choose to upload.
• To deliver your preview and finished song by email and on a private page.
• To process payment and provide order support.
• To send you updates about your order (not marketing, unless you separately opt in).
• To improve the site and measure the performance of our advertising.

3. Who we share it with

We share the minimum necessary data with the vendors who help us operate:

• Stripe — payment processing.
• Our AI lyric-writing provider (Anthropic) — the story details you submit, to write your song's lyrics.
• Our AI music generation provider — your lyrics, style, and preferences, to produce the sung track.
• Our hosting and database provider (Supabase) — stores your order details and any uploaded photos.
• Email delivery provider — to send your preview, receipts, and finished song.
• Meta and Google — limited, pseudonymous advertising and analytics data, as described in Section 7.

We do not sell your personal data.

4. International data transfers

Verselio operates from Brazil and works with service providers based in the United States and elsewhere. If you are located in the EU/UK, this means your personal data may be transferred outside the European Economic Area or UK. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) with our providers to protect your data during these transfers.

5. How long we keep it

We retain your story details, uploaded photos, and order information for as long as your account or order is active, and for up to 24 months after your last order, to allow for support and revisions and to meet our legal and accounting obligations — unless you request earlier deletion (Section 8). Payment records are retained separately by Stripe under their own retention policy.

6. Security

We use industry-standard safeguards to protect your data, including encrypted connections (HTTPS), access controls on our database, and private storage for uploaded photos and generated audio that is not publicly accessible. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.

7. Cookies and advertising

We use the Meta Pixel and Google Ads/Analytics tags to measure which ads lead to visits and purchases, and to show you relevant ads on those platforms if you don't complete a purchase (remarketing). You can opt out of personalized advertising through Meta's ad preferences and Google's ad settings, or by using your browser's cookie controls.

8. Your rights

If you are in the EU/UK (GDPR): you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can also lodge a complaint with your local data protection authority.

If you are a California resident (CCPA/CPRA) or covered by another U.S. state privacy law: you have the right to know what personal data we hold, request deletion, and opt out of the sale or sharing of personal data (we do not sell personal data).

To exercise any of these rights, contact us at verselio.ai@gmail.com.

9. Children's privacy

Verselio is not directed at children under 16, and we do not knowingly collect personal data from them as users of the Service. If you submit a story or photo about a child (for example, as the gift recipient), you confirm you have the right to share that information and that doing so is appropriate — see also Section 8 of our Terms of Use. If you believe a child has provided us personal data directly, contact us and we will delete it.

10. Contact

Questions about this policy: verselio.ai@gmail.com.