Verzatio Privacy Policy

Effective date: October 28, 2026

Verzatio is a product operated by VResearchLab LLC, a Florida limited liability company doing business as Kavagy ("Kavagy," "we," "us," or "our"). This Privacy Policy explains how we collect, use, share and protect information when you visit verzatio.com, use the Verzatio application at app.verzatio.com, or interact with Verzatio forms, widgets, chat agents or customer portals (together, the "Service").

Contact: support@verzatio.com · VResearchLab LLC d/b/a Kavagy, 2548 Eagle Run Drive, Weston, FL 33327, USA · +1 754-287-7865

1. Two roles: our data and our customers' data

We play two different roles depending on the data.

Account and usage data. For information about the people who use Verzatio and visit our website, we decide how it is used. This policy governs it.
Customer Content. Businesses use Verzatio to process their own data, including information about their clients, leads and website visitors. For that data we act on our customer's instructions, as a service provider or processor. Content stored in a workspace belongs to that workspace, and the organization that owns it decides what goes into it. If you submitted information through a form, widget, chat agent or portal operated by a business that uses Verzatio, that business's privacy notice governs your data, and you should direct requests to them. We will help them respond.

2. Information we collect

Information you give us

Account details: name, email address, password (stored hashed), role, language and two-factor authentication setting, and your workspace's company name and address.
Workspace content ("Customer Content"): files you upload, agent instructions, prompts, chat messages, AI outputs, forms and their submissions, boards, cards, comments, customer and lead records, landing pages, skills and scripts.
Billing details: plan, subscription status and credit purchases. Payment card details are collected and stored by our payment processor, Stripe. We never see or store full card numbers.
Your own AI provider API keys, if you choose to bring them ("BYOK"). Keys are stored encrypted and used only to make requests on your behalf.
Support requests, feedback and survey answers.

Information from sign-in providers

Accounts are created by accepting an invitation to a workspace. If you sign in with a Google or Microsoft account, we receive only what that provider shares after you approve it. Signing in asks only for basic profile information (openid, email and profile) and gives us no access to your files.

Google: name, email address, whether the email is verified, and Google account ID.
Microsoft: name, email address, account ID and organization (tenant) ID and, for work or school accounts, whether the organization verified the email.

The provider may also send a profile photo, which we do not store. We use this information to create your account when you accept an invitation and to sign you in securely. Signing in with Google or Microsoft never links to an existing Verzatio account with the same email automatically. We do not receive your passwords for these services, and we do not post to them.

Information from integrations you connect

When you or a workspace admin connects an integration, we access only the data needed for the features you use, within the permissions you grant. A connection can belong to the workspace or be personal ("My connections", used only by you). We store the access tokens the service issues, encrypted, and the account email it reports.

Google Drive: only the files you select in Google's file picker, so agents and chats can read them, and the folder you select to save results to. We do not access the rest of your Drive.
Microsoft OneDrive and SharePoint: files, folders and sites you select, so agents and chats can read them (for a folder, we list its files so you can choose which ones to use), agents can read the Knowledge Base folders configured on them, and results can be saved to a folder you select.
Slack and Microsoft Teams: the channels you choose, to deliver the notifications you configure.
ClickUp: workspaces, spaces, lists, tasks and comments you authorize, to create, read and update tasks from Verzatio.

New integrations will be described here before they go live.

Knowledge Base folders from personal connections. If you add a folder from one of your personal OneDrive or SharePoint connections to an agent's Knowledge Base, anyone who can run that agent can read the files in that folder through the agent. You are warned when this applies, including when you share the agent. Removing the folder, disconnecting the account or deleting your Verzatio account stops this access.

Information collected automatically

Usage data: features used, agent runs, tokens and credits consumed, timestamps and errors.
Device and log data: IP address, browser type, operating system and pages viewed.
Audit records: who did what in a workspace and when, kept for security and accountability.
Cookies and local storage: see section 10.

Information submitted to our customers

People who use a Verzatio-powered form, widget, chat agent or portal may submit names, contact details, messages and files. An embedded form may also attach technical context about the page where it is submitted (browser, operating system and page address, with sensitive values removed) and, if the person chooses to, a screenshot of the visible page with form fields masked. We process this only for the business that collects it (see section 1).

3. How we use information

To provide the Service: run agents and chats, process files, route form submissions, sync integrations and show results.
To create, authenticate and secure accounts, including sign-in with Google or Microsoft and two-factor authentication.
To bill for subscriptions and credits and to prevent fraud.
To provide support and send service messages such as sign-in and verification codes, invitations, the notifications you configure, receipts, security alerts and changes to these terms.
To send product news, only if you opt in. You can unsubscribe at any time.
To monitor, debug and improve the reliability and performance of the Service.
To comply with law, enforce our Terms of Service and protect users and the Service.

We do not sell personal information. We do not use information from the Verzatio application, or data received from Google, Microsoft, Slack or ClickUp, for advertising. On our website, marketing cookies are used only if you accept them in the cookie banner (section 10).

4. AI processing

When you run an agent or chat, the relevant content (your prompt, instructions, and the files, Knowledge Base content or records the agent needs) is sent to the AI model you selected so it can produce an output. That model is provided by OpenAI or Anthropic. Under their commercial API terms, these providers process the content to return the result and do not use it to train their models. When web access is turned on for an agent, the searches it makes are sent to the model provider's web search tool, and the pages it reads are fetched from the internet.

If you use your own API key, your request goes to that provider under your own agreement with them, and their terms govern it.

AI outputs can be wrong, incomplete or out of date. Verzatio includes human review steps so a person can check outputs before they reach a client, and we recommend using them for anything client-facing.

5. Google user data and Limited Use

Verzatio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

We use Google user data only to provide and improve the user-facing features you see in Verzatio: signing in, letting agents and chats read files you select, and saving results to a folder you select in your Drive.
We transfer Google user data to third parties only as needed to provide those features (for example, sending a selected file to the AI model you chose to process your request), for security, to comply with law, or as part of a merger or acquisition with your prior consent.
We do not use Google user data for advertising, and we do not sell it or use it to assess creditworthiness.
People do not read your Google data unless you ask us to (for example, in a support request), it is needed for security or abuse investigation, or the law requires it.
We do not use raw or derived data received from Google Workspace APIs to develop, improve or train generalized or non-personalized AI or machine learning models, and we do not allow our AI providers to do so.

We apply the same restrictions to data received from Microsoft (sign-in, OneDrive, SharePoint and Teams), Slack and ClickUp.

You can revoke access at any time in Verzatio's integration settings, in your Google account permissions, in your Microsoft account (for a work or school account, ask your organization's administrator), or in your Slack or ClickUp settings.

Service providers (subprocessors) that host, store, process or support the Service, under contracts that limit their use of data to providing services to us:
- Render: hosting of the application and of this website (global network) and of our servers (Ohio, USA);
- MongoDB Atlas: database and file storage (Amazon Web Services, US East (Ohio), United States);
- Resend: email delivery (North Virginia, USA);
- Stripe: payments and billing;
- Google Maps Platform: address suggestions when you type an address in the workspace settings;
- LeadConnector (HighLevel), Vimeo and Google Fonts: the access request form, the demo video and the fonts of this website.
AI model providers (OpenAI and Anthropic), as described in section 4.
Integrations you connect, when you ask Verzatio to send data to them (for example, creating a ClickUp task or posting a notification to Slack).
Our team, including Kavagy employees and contractors in Brazil, under confidentiality obligations and only as needed to operate and support the Service.
Within your workspace, according to the roles and permissions your admin sets. Workspace admins can see the workspace's audit log.
Legal and safety: when required by law or to protect rights, safety and the Service.
Business transfers: in a merger, acquisition or sale of assets, subject to this policy.
With your consent or at your direction.

7. International transfers

Verzatio is operated from the United States, and our data is hosted in the United States. Members of our team in Brazil may access data to provide engineering and support. Where the law of your country requires it, including Brazil's LGPD and the GDPR, we rely on contractual safeguards such as standard contractual clauses for these transfers.

8. Retention

Data	How long we keep it
Account data	While your account exists. Deleted immediately when you delete your account (section 12).
Customer Content	While the workspace exists. A deleted workspace is blocked for 30 days, during which its owner can restore it, and is then permanently deleted. When a member deletes their account, the content they created stays in the workspace, shown as "Removed user".
Audit logs	While the workspace exists. When a member deletes their account, their entries stay, with their name and email replaced by "Removed user".
Backups	We take one backup a day and keep the last 8, so deleted data leaves our backups within 8 days.
Billing records	As long as tax and accounting law requires, typically 7 years.
Verification codes and sessions	Codes expire after 15 minutes. A sign-in session ends after 7 days without use.
Cookie choices on this website	Stored in your browser until you clear this site's data.

9. Security

We use administrative, technical and physical safeguards, including encryption in transit (HTTPS), passwords stored only as one-way hashes, encryption of stored access tokens and API keys, session cookies that scripts cannot read, workspace-level data separation, role-based permissions, optional two-factor authentication by email code and audit logs. No system is perfectly secure. If we learn of a breach affecting your personal information, we will notify you and authorities as the law requires.

10. Cookies

Verzatio application. We use only cookies that are strictly necessary to sign you in and keep your session secure: token and refreshToken, and a short-lived session cookie used while you sign in with Google or Microsoft or connect an integration. Your browser's local storage keeps preferences like language and theme. The application does not use analytics, advertising or cross-site tracking cookies.
This website. Essential cookies and local storage keep the site working and remember your language, theme and cookie choices. They are always active. Optional cookies are set only if you accept them in our cookie banner: analytics cookies, which help us understand how visitors use the website, and marketing cookies, which track visitors across websites to show relevant ads. In the banner you can accept all, reject all or choose by category, and rejecting optional cookies does not affect your use of the website or the Service. To change your choice, clear this site's data in your browser and the banner will appear again.
Third parties on this website. The access request form (LeadConnector), the demo video (Vimeo) and Google Fonts are provided by third parties that receive your IP address and may set their own cookies under their own policies.

11. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information; to object to or restrict certain processing; to withdraw consent; and to know how your information is used. This includes rights under U.S. state privacy laws, the EU and UK GDPR, and Brazil's LGPD.

To exercise a right, email support@verzatio.com from the address on your account. We respond within the time the applicable law requires, usually 30 days or less, and we will not discriminate against you for exercising a right. You may also complain to your local data protection authority, such as Brazil's ANPD.

Other choices:

Delete your account yourself at any time (section 12).
See and edit your name in Personal Settings.
Disconnect an integration in Verzatio's integration settings or in the provider's account settings.
Accept or reject analytics and marketing cookies on this website (section 10).
Unsubscribe from marketing emails with the link in any email.

12. Deleting your account and data

You can delete your account in Personal Settings > Security > Delete account, confirming with your password or, if you only sign in with Google or Microsoft, with a code sent to your email. If you cannot sign in, email support@verzatio.com with the subject "Delete my account" from the address on your account.

Deletion is immediate and permanent. It removes your profile, the Google or Microsoft sign-ins linked to your account, your personal connections and their access tokens, your private chats and your other personal data. Content you created in workspaces stays there, shown as "Removed user". If you own a workspace, you must delete it first: the workspace is blocked immediately, you can restore it for 30 days, and it is then permanently deleted. Step-by-step instructions are published at verzatio.com/data-deletion.

13. Children

Verzatio is a business service for people 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

14. Changes to this policy

We will post updates here and change the effective date. For material changes, we will notify account owners by email or in the app at least 30 days before they take effect.

15. Contact

support@verzatio.com
VResearchLab LLC d/b/a Kavagy (operator of Verzatio)
2548 Eagle Run Drive, Weston, FL 33327, USA