Privacy Policy

Overview

This Privacy Policy explains how Vesara, Inc. (“Vesara,” “we,” “us”), a Delaware corporation operating from California, collects, uses, and protects personal information when you visit our website, request access, subscribe to our newsletter, join our community, or use the Vesara work environment.

We are the business and controller of the information collected through our website and forms. For the customer content that our customers connect to the work environment, we act as a service provider and processor on their behalf and handle it under their instructions. We follow the principles of data minimization, least-privilege access, and traceability throughout.

Personal information we collect

Information you provide directly: your work email, company size, whether you run a company or startup, your organization size, and anything you include when you request access, subscribe, join our community, or contact us.

Information collected automatically: when you visit the site, we and our analytics provider collect internet and device activity such as your IP address, browser and device type, pages viewed, referring pages, and similar usage data, including through cookies and similar technologies described below. We also keep basic server logs (including IP address and user agent) with form submissions to operate and secure the service.

Customer content: meetings, messages, documents, and contracts that our customers connect to the work environment, processed on their behalf and under their instructions.

Under California law, the categories we collect are identifiers (such as work email and IP address), commercial information (such as company size), and internet or other electronic network activity (such as pages viewed and general usage). We do not intentionally collect sensitive personal information such as Social Security numbers, government identifiers, financial account details, precise geolocation, or account credentials, and we do not use personal information to build profiles that produce legal or similarly significant effects.

Cookies and analytics

Our website uses Google Analytics 4, a service provided by Google LLC, to understand how visitors use the site so we can improve it. Google Analytics sets cookies and processes information such as your IP address, device and browser details, and the pages you view. We use this for first-party analytics only. We do not use Google Analytics for advertising or cross-context behavioral advertising, and we do not combine it with advertising audiences.

You can opt out of analytics in several ways: decline or clear cookies in your browser settings, install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout, or send a Global Privacy Control (GPC) signal, which we honor as described below. You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

Sources of personal information

We collect personal information directly from you when you submit a form or contact us, automatically from your device and browser through cookies, analytics, and server logs, and from service providers that help us operate the site on our behalf.

How we use information

To provide, operate, secure, and improve our website and the Vesara work environment; to respond to access requests, newsletter signups, community signups, and inquiries; to measure and analyze site usage; to protect against fraud and abuse; and to comply with legal obligations.

We do not sell personal information. We use customer content only to deliver the service and as directed by the customer who controls that data.

How we share information

With service providers and subprocessors who help us operate the service under contractual confidentiality and security obligations. These currently include Vercel (website hosting), Neon (database hosting for form submissions), and Google (website analytics).

When required by law, to protect rights and safety, or in connection with a corporate transaction, subject to the protections in this policy. We do not sell your personal information, and we do not disclose it for cross-context behavioral advertising or targeted advertising.

Data retention

We retain personal information for as long as needed to provide the service and for legitimate business or legal purposes, then delete or de-identify it. Analytics data is retained according to our Google Analytics configuration. Customer content is retained and deleted according to customer instructions and applicable agreements.

Security

We protect information with encryption in transit and at rest, least-privilege access, and auditable, traceable handling. See our Security and trust page for more detail.

Your rights and choices

Depending on where you live, you may have rights to access or know, correct, delete, and obtain a portable copy of your personal information, as well as rights to opt out of the sale or sharing of personal information, targeted advertising, and certain profiling. For customer content, please direct requests to the customer who controls that data, and we will support them in responding.

To exercise rights related to information we control, email privacy@vesara.ai. We will take steps to verify your request, typically by confirming control of the email address associated with the information, and we will respond within the timeframes required by law. We will not discriminate against you for exercising your rights, and you may use an authorized agent to submit a request on your behalf with proof of authorization.

California privacy rights (CCPA and CPRA)

In the preceding 12 months, we collected the following categories of personal information: identifiers (such as work email and IP address), commercial information (such as company size), and internet or other electronic network activity (such as usage and pages viewed). We collected this information from the sources, and used it for the purposes, described above, and we disclosed these categories to our service providers for hosting, database, and analytics purposes.

California residents have the right to know and access the personal information we have collected, to delete it, to correct inaccurate information, to opt out of the sale or sharing of personal information, and to limit the use of sensitive personal information, along with the right not to be discriminated against for exercising these rights.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined by California law. We do not use or disclose sensitive personal information for purposes that would give rise to the right to limit. We honor Global Privacy Control (GPC) browser signals as a request to opt out of sale and sharing.

Because we operate exclusively online, you may submit requests, including through an authorized agent, by emailing privacy@vesara.ai. Under California’s Shine the Light law, California residents may also request information about disclosures of personal information to third parties for their direct marketing purposes; we do not disclose personal information for that purpose.

Delaware privacy rights (DPDPA)

Delaware residents have the right to confirm whether we process their personal data and to access it, to correct inaccuracies, to delete personal data, to obtain a portable copy, and to opt out of targeted advertising, the sale of personal data, and certain profiling.

We do not sell personal data, we do not use personal data for targeted advertising, and we do not profile individuals in ways that produce legal or similarly significant effects. We do not process sensitive data without consent, and we recognize Global Privacy Control and similar universal opt-out mechanisms.

To exercise these rights, email privacy@vesara.ai. If we decline to act on your request, you may appeal by replying to our decision or emailing privacy@vesara.ai. We will respond to an appeal within 45 days, and if we deny the appeal we will provide a way to contact the Delaware Department of Justice to submit a complaint.

Children’s privacy

Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact privacy@vesara.ai and we will delete it.

Changes and contact

We may update this policy from time to time and will revise the date above when we do, indicating material changes as appropriate. Questions about this policy, and privacy requests or appeals, can be sent to privacy@vesara.ai. Vesara, Inc. is a Delaware corporation.