PRIVACY POLICY
How Verri handles your information.
This notice explains what we collect, why we use it, who receives it and the choices available to you.Last updated: 12 September 20261. Who controls your information
Alaaeddin M. Ali, trading as Verri, is the data controller responsible for personal information processed to operate this service. The temporary correspondence address and monitored legal and privacy contact are published in the operator notice above.
2. Information we collect
- Account identity, email, authentication and onboarding profile details.
- Prompts, conversations, model selections and AI outputs.
- Model usage, token and credit records needed to operate balances and explain charges.
- Where an account has billing activity, subscription identifiers, invoice status and payment-event metadata from Stripe. Verri does not receive full card numbers.
- Device, diagnostic, security and access logs.
- Messages and records created when you ask for help.
3. Why we use it
We process information to provide your account and requested AI service, administer subscriptions and credits, keep Verri secure, diagnose faults, prevent abuse, meet legal duties and improve reliability. Our legal bases are performance of our contract, legitimate interests in operating and protecting the service, and compliance with legal obligations. Where consent is required, we will ask separately and you may withdraw it.
4. Who receives it
Information is shared only as needed with service providers, including Supabase for authentication and data services, Stripe for billing, Vercel for hosting, and the selected AI provider—currently OpenAI or Anthropic—to process your request. It may also be disclosed where law requires or to protect legal rights. Providers process data under their own contractual and privacy safeguards.
5. International transfers and security
Some providers may process information outside the UK. We use applicable contractual or adequacy safeguards where required. We use proportionate technical and organisational controls, but no online service can guarantee absolute security.
6. Retention and account deletion
While your account is open, Verri keeps account and conversation content so you can use the service and reopen your history. You can permanently delete your account from Account and data settings. Deletion removes your Verri login, conversations, prompts and AI responses and cancels future subscription renewals.
We retain only limited billing, credit, tax, refund, dispute, fraud-prevention and security evidence for as long as required for those purposes or by law. Retained records are detached from your Verri login where possible. We periodically review and remove records when their applicable purpose ends.
7. Your rights
Depending on where you live, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent. UK users may complain to the Information Commissioner’s Office at ico.org.uk. You may contact the monitored legal and privacy address identified above. For a request linked to your Verri account, use the authenticated support channel at app.verri.ai/support so account ownership can be verified and the request and replies remain together. Do not include passwords, authentication codes or full payment-card details.
8. Cookies and product analytics
Verri uses essential storage and cookies needed for authentication, security and core service operation. Current product analytics are first-party, server-side and limited to operational product milestones. They do not record prompt or response content, use advertising cookies, fingerprint devices or replay user sessions. We will request consent before introducing non-essential analytics or advertising cookies where required.
