Privacy Policy

Effective Date: January 1, 2025 Last Updated: January 1, 2025

Introduction

Welcome to verset, operated by zetta株式会社. verset is a hierarchical General Purpose AI Studio that integrates todo lists, note-taking, documentation, coding tools, console access, and other efficiency-related features. Our platform also offers token-based services where tokens can be purchased and used for various features. We understand that as a productivity platform handling sensitive information including code, API keys, personal notes, and payment information, privacy and data security are paramount.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at uni.verset.io.

1. Information We Collect

1.1 Information You Provide Directly

- Account Information: Email address, username, and password for account creation and authentication - User Content: Notes, todos, documents, code snippets, and any other content you create, store, or submit through our service - Payment and Transaction Information: When you purchase tokens or subscribe to paid features, we collect payment information (processed securely through third-party payment processors), transaction history, and token balance information - Sensitive Data: We acknowledge that users may store sensitive information including API keys, passwords, credentials, and proprietary code. We treat all user content as confidential. - Communication Data: Messages sent to our support team at [email protected] or [email protected]

1.2 Automatically Collected Information

- Usage Data: Information about how you interact with our service, including features used, actions taken, and time stamps - Device Information: Browser type, operating system, IP address, device identifiers - Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain sessions and improve user experience

1.3 AI Service Processing Data

When you use AI features powered by OpenAI, Claude (Anthropic), Gemini (Google), or other models through OpenRouter: - Your prompts and the content you choose to process with AI - AI-generated responses and suggestions - We only send the minimal necessary context to provide the AI functionality you request

2. How We Use Your Information

We collect and process your information solely to provide and improve our services:

2.1 Service Provision

- Authenticate your account and maintain your session - Store and sync your notes, todos, documents, and code across devices - Process your content through AI models when you explicitly use AI features - Enable collaboration features if you choose to share content - Process token purchases, manage your token balance, and facilitate token-based services - Generate invoices and maintain transaction records for purchased tokens

2.2 Service Improvement

- Analyze usage patterns to improve features and user experience - Debug technical issues and maintain service reliability - Develop new features based on aggregated usage insights

2.3 Communication

- Send service-related notifications and updates - Respond to your support requests - Notify you of changes to our terms or policies

2.4 Legal Compliance

- Comply with applicable laws and regulations - Protect against fraudulent, unauthorized, or illegal activity - Enforce our terms of service

3. How We Protect Sensitive Information

Given the sensitive nature of information you may store (API keys, passwords, credentials):

3.1 Security Measures

- Encryption: All data is encrypted in transit (TLS/HTTPS) and at rest - Access Controls: Strict internal access controls limit who can access user data - Secure Infrastructure: We use AWS infrastructure with industry-standard security practices - Regular Security Audits: Ongoing security assessments and updates

3.2 Best Practices Recommendations

- While we implement strong security measures, we recommend: - Using environment variables or secure vault services for production API keys - Rotating credentials regularly - Using our service's secure storage features rather than plain text for sensitive data - Enabling two-factor authentication when available

3.3 Data Isolation

- Your content is isolated and not accessible to other users - Your data is never used to train AI models without explicit consent - We do not mine your content for marketing or advertising purposes

4. Third-Party Services

We use the following third-party services to operate verset:

- AWS (Amazon Web Services): Cloud infrastructure and storage - OpenAI: AI language model processing - Claude (Anthropic): AI language model processing - Gemini (Google): AI language model processing - OpenRouter: Access to various open-source AI models - Payment Processors: Third-party payment processors for handling token purchases and subscriptions (payment card information is processed directly by these providers and not stored on our servers) - Google Analytics (GA): Anonymous usage analytics - Cloudflare: Content delivery and DDoS protection - Resend: Transactional email delivery

Each third-party service has its own privacy policy and data handling practices. When you use AI features, your content may be processed by the respective AI provider according to their terms. We recommend reviewing their policies: - OpenAI Privacy Policy - Anthropic Privacy Policy - Google Privacy Policy

Important: We configure these services to maximize your privacy, but data sent to AI providers is subject to their retention and processing policies.

5. Data Sharing and Disclosure

We do NOT sell, rent, or trade your personal information or content to third parties.

5.1 We Only Share Data When:

- You Direct Us To: When you explicitly share content with others or use collaboration features - Service Providers: With third-party providers listed above, only to the extent necessary to operate our service - Legal Requirements: When required by law, court order, or government request - Business Transfers: In the event of a merger, acquisition, or sale of assets (users will be notified) - Protection: To protect the rights, property, or safety of verset, our users, or the public

6. Data Retention

- Active Accounts: We retain your data for as long as your account is active - Deleted Content: When you delete content, it is removed from active systems within 30 days - Account Deletion: Upon account deletion, your data is permanently removed within 90 days, except where retention is required by law - Transaction Records: Payment and token purchase records are retained for at least 7 years to comply with tax and accounting regulations, even after account deletion - Backup Systems: Deleted data may persist in backup systems for up to 90 days before permanent deletion

7. Your Rights and Choices

You have the following rights regarding your data:

7.1 Access and Portability

- Access your personal information and content at any time through your account - Request a copy of your data in a portable format

7.2 Correction and Deletion

- Modify or correct your personal information through account settings - Delete specific content or your entire account at any time

7.3 Opt-Out Rights

- Opt out of non-essential cookies - Unsubscribe from marketing communications (we send very few) - Disable specific features that process data through third-party AI services

7.4 Data Processing Objection

- Object to certain processing activities - Request limitation of processing in certain circumstances

7.5 Exercising Your Rights

Contact us at [email protected] to exercise any of these rights. We will respond within 30 days.

8. International Data Transfers

verset currently operates primarily in Japan and the United States. Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

9. Children's Privacy

verset is not intended for users under the age of 13 (or equivalent minimum age in your jurisdiction). We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it promptly.

10. Cookie Policy

We use cookies and similar technologies to: - Maintain your authenticated session - Remember your preferences - Analyze service usage (Google Analytics) - Ensure security and prevent fraud

You can control cookies through your browser settings, but disabling cookies may limit service functionality.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights: - Right to know what personal information is collected - Right to know if personal information is sold or disclosed - Right to opt-out of the sale of personal information (we do not sell data) - Right to deletion of personal information - Right to non-discrimination for exercising privacy rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under GDPR including: - Right to access, rectification, and erasure - Right to data portability - Right to object to processing - Right to lodge a complaint with a supervisory authority

Our lawful basis for processing is primarily contract performance and legitimate interests.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will: - Notify you of material changes via email or in-app notification - Update the "Last Updated" date at the top of this policy - Request your consent if required by law

Continued use of verset after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

Email: [email protected] Business Inquiries: [email protected] Phone: 03-6555-5064 Address: zetta株式会社, 東京都新宿区西新宿八丁目11番10号 星野ビル327号室

We will respond to inquiries within 30 days.

15. Consent

By using verset, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.

---

Your Trust Matters: We built verset to be a trusted workspace for your most important work. We are committed to protecting your privacy and handling your data responsibly. If you ever have concerns, please reach out to us directly.