Privacy Policy

Who we are

Verdesk (“we”, “us”) is operated from Singapore. For questions about this policy or your data, email us at support@verdesk.chat.

What we collect

Your account

Your name and email address. If you sign in with Google, we also receive your basic Google profile (such as your name, email and profile picture).

Your business content

What you add for your chatbot to learn from: website pages, files, notes and the corrections you make to its answers.

Chatbot conversations

Conversations between your chatbot and the people who visit your website. This includes their messages, an email address if a visitor chooses to give one, and any ratings they leave. To recognise a returning visitor, the chatbot stores a random, anonymous ID in their browser's local storage.

Your team

The email addresses of the team members you invite.

If you connect Telegram, the chat IDs we need to send you notifications there.

Billing

Payments are handled by Stripe. We receive details such as your plan and payment status, but we never see your full card number.

Usage and logs

Information about how the service is used, and technical logs our systems produce while running it.

Your website visitors' data

When your chatbot talks to your website visitors, you — the business — decide what is collected and are responsible for it. Verdesk processes that information on your behalf, to provide the service to you. If you're a visitor with a question about a conversation, please contact the business whose website you were on.

How we use it

We use the information above to:

run the service, including generating your chatbot's replies;
manage your account, team and billing;
send you notifications and service emails;
keep the service secure and fix problems;
understand how the service is used so we can improve it.

We do not sell personal data. We don't use your content to train our own models. Where an AI provider offers the option, we choose settings that don't allow our API data to be used for training their models.

Service providers

We rely on these companies to run Verdesk:

Supabase — database, sign-in and file storage, hosted in Tokyo, Japan.
Vercel — website hosting, and Vercel Web Analytics, which doesn't use cookies.
Stripe — payments.
Resend — sending email.
OpenAI, Anthropic and OpenRouter — AI models that write replies and search your content. OpenRouter may route requests to other model providers, such as Google, xAI or DeepSeek.
Telegram — notifications, only if you connect it.
Google — “Sign in with Google”, and Google Analytics on our public website only (see Cookies).

Where your data is processed

Your data is processed in Japan, the United States and other countries where these providers operate. These countries may have different data protection laws from yours.

How long we keep it

We keep your data while your account is open. When an account is deleted, we delete its data within 30 days. Two exceptions: backups, which are removed on their normal cycle, and records we are required to keep, such as payment records.

Your rights

Under Singapore's Personal Data Protection Act (PDPA), you can ask to access or correct your personal data, ask us to delete it, and withdraw your consent.

If you're in the EU or UK, the GDPR also gives you the right to data portability, to object to how we process your data, and to complain to your local data protection authority.

To make a request, email us at support@verdesk.chat. We'll reply within 30 days.