Privacy Policy

Account data: your email address, optional name, and sign-in method. Your content: the writing, voice-note transcripts, brand profiles, and settings you create in the product. Usage and billing: which features run, AI usage counts and costs (so plan limits and our bills are honest), and subscription state from Stripe. Technical basics: logs and timezone needed to run and debug the service. We don’t run third-party advertising trackers.

Your writing is processed to provide the product — stored in our database, sent to the AI provider when you invoke an AI feature, and displayed back to you. We don’t use your private content to train AI models, and our AI subprocessor agreements don’t permit them to train on it either. Humans at Initial Finds LLC access your content only to support you when you ask, or to debug a problem affecting your account.

• Vercel — application hosting, serverless compute, and media storage for images, audio, and video you create or upload
• Neon — the database where your account and writing live
• Anthropic — AI text generation — your prompts and relevant writing context are sent when you invoke AI features
• OpenAI — voice transcription when you use Speak or tell a story in your own voice, and image generation when that provider is selected
• Google (Gemini / AI Studio) — image generation, narration voices, and scene motion for Living Stories — the relevant text, images, and direction are sent when you use those features
• Recraft — image generation, when that provider is selected
• fal.ai — motion clips for illustrations, when that provider is selected
• Stripe — payments and subscription billing — we never see your card number
• ThriveCart — checkout for partner-referred purchases — we never see your card number
• PayPal — partner commission payouts, for partners only
• Transactional email (SMTP) — sign-in links and team invitations
• Upstash (QStash) — background job queue for durable, long-running work
• Kit — product and lifecycle email for subscribers
• Google — optional sign-in with Google, if you choose it
• DataForSEO — search-demand data for the Authority Map (keyword queries, never your writing)

If you connect your own integrations (for example WordPress publishing or your own API keys), data flows to those services at your direction under their terms.

We send transactional email (magic links, receipts, run notifications) and, if you’re subscribed, product education you can leave with one click — every marketing email carries an unsubscribe link. We don’t sell or rent your address.

Wherever you live, we honor the core rights: access (see what we hold), export (take your writing with you), correction, and deletion — Settings → Account deletes your account, content, and personal data from production systems, and cancels any active subscription. We keep minimal records the law requires us to keep (for example, tax records of payments). For anything else: support@verbaria.com, and we’ll respond within 30 days.

We keep your data while your account exists and delete it from production systems when you delete your account, except the legally required minimum. Encrypted backups kept for disaster recovery expire on a rolling schedule, so deleted data can remain in a backup until it expires. Data is encrypted in transit; access to production systems is limited to what operating the service requires. No internet service can promise perfect security — if a breach affects your data, we’ll notify you as the law requires and plainly.

Verbaria isn’t directed at children under 16, and we don’t knowingly collect their data. If you believe a child has an account, contact us and we’ll delete it.

Material changes to this policy get the same treatment as the Terms: notice by email or in the product at least 14 days before they take effect.