Privacy Policy

From customers

• Account details: name, email address, company name, and a password (stored only as a secure hash by our sign-in provider).
• If you sign in with Google: your name and email address from your Google account.
• Your team: memberships, roles and invitations.
• What you enter: partners and their locations, contacts (name, and optionally phone, email, language and role), requests, templates, notes, tags and settings, including your logo and colors.
• Feedback you send us, with your browser’s name and version.

From contacts

• What they send: photos, videos, files, answers and questions, and their name if they give it.
• Details recorded with each file: when it was captured, whether it was recorded in the page or uploaded from the phone, its type and size, and a fingerprint (a SHA-256 hash) that shows whether the file changes later.
• When a request link was opened and when it was submitted.
• On a mailbox page: the sender’s email address, the code that confirms it, and the company name they give.

We don’t collect precise location (GPS), and we don’t use face recognition or any other biometric identification.

Technical data

• IP addresses, used only to limit how often public pages can be called, to prevent abuse. These counts are deleted daily.
• Server logs of errors, kept to find and fix problems.
• Page analytics (Vercel Web Analytics), which counts visits without cookies. The private part of request, report and mailbox links is removed before anything is counted.

We use only the cookies Verisling needs to work:

• Your sign-in session, and which organization you’re working in.
• Your light or dark appearance setting.
• For mailbox senders, a cookie that remembers their confirmed email on that device for 90 days.

We don’t use advertising or cross-site tracking cookies.

• To run Verisling: store and show requests and evidence, deliver links, and keep each organization’s data separate.
• To send email: submission and question alerts, invitations, sign-in and password emails, and mailbox confirmation codes.
• To keep it secure: prevent abuse, investigate problems, and protect our customers and contacts.
• To support you and improve Verisling, using feedback and aggregate usage.

We don’t sell personal information, we don’t use it for advertising, and we don’t use customers’ or contacts’ content to train AI models.

• The customer’s team. Everything sent in on a request is visible to the members of the organization that sent it, and to no other customer.
• People a customer shares a report with. Customers can create a read-only report link for a request. Anyone with that link can see the report until the customer turns it off.
• Our service providers, who process data for us under contract: Supabase (database, sign-in and file storage), Vercel (hosting and page analytics), Resend (email) and, if you choose Google sign-in, Google.
• Authorities, only when the law requires it, or to protect people’s safety or our rights.
• A buyer or successor, if Verisling is sold or reorganized, under this policy.

Data is stored in the United States. Contacts are often in other countries, such as China or Vietnam; what they send is transferred to and stored in the United States.

Connections are encrypted. Files are kept in private storage and shown only through links that expire after an hour. Each request link accepts one submission, and access within Verisling is limited by organization and role.

• Account and team data: while the account is open.
• Requests and evidence: until the customer deletes them or closes their account. Customers can delete requests that haven’t received anything, and can ask us to delete the rest.
• Mailbox submissions that were started but never sent: deleted the next day.
• Uploads that were never attached to a submission: deleted after 24 hours.
• Abuse-prevention counts based on IP address: deleted daily.

When an account is closed, or a valid deletion request is made, we delete the data within 30 days, unless the law requires us to keep it.

You can ask us for a copy of your personal information, or to correct or delete it, by emailing support@verisling.com. Depending on where you live (for example in the EU, the UK, California or China), you may have further rights, such as to object to or restrict some uses. We won’t treat you differently for using them.

If you’re a contact who sent something to a company through Verisling, that company decides what happens to it, so it’s usually quickest to ask them. You can also write to us: we’ll pass your request on, and help where we can.

Verisling is for businesses and isn’t meant for anyone under 16. We don’t knowingly collect information from children.

If we change this policy, we’ll update the date at the top. For significant changes, we’ll tell customers by email or in the app before they take effect.

Questions or requests: support@verisling.com. See also our Terms of Service.