Privacy Policy

1. Information we collect

• ▪Account and identity information: name, business email, organization, title, authentication identifiers, and account settings.
• ▪Commercial information: plan, subscription status, invoices, transaction identifiers, and billing contact details. Payment card details are generally processed by Stripe and should not be stored by VerSpecify unless stated.
• ▪Customer Content: construction documents, specifications, submittals, prompts, comments, reports, and metadata submitted through the Service.
• ▪Usage and device information: IP address, browser, device, operating system, timestamps, pages or features used, diagnostic events, and security logs.
• ▪Communications: support requests, feedback, sales communications, and records of consent or policy acceptance.
• ▪Cookies and similar technologies as described in the Cookie Policy.

2. How we use information

• ▪Provide, operate, authenticate, and personalize the Service.
• ▪Process documents and generate requested comparisons and reports.
• ▪Administer workspaces, permissions, subscriptions, support, and communications.
• ▪Secure the Service, prevent fraud and abuse, debug errors, and maintain audit logs.
• ▪Analyze and improve reliability and usability using data consistent with our commitments and contracts.
• ▪Comply with law, enforce agreements, and establish or defend legal claims.

3. AI processing and model training

To perform requested analysis, VerSpecify may send relevant Customer Content and instructions to Google Gemini API under the provider arrangement identified in the Subprocessor List. VerSpecify uses paid Gemini API services. Under Google's applicable Gemini API terms, Google does not use prompts, associated system instructions, cached content, uploaded files, or responses from paid services to improve its products. Google processes that content under its applicable data-processing terms. VerSpecify will not use Customer Content to train generalized models for other customers unless Customer expressly opts in through a separate, informed choice.

4. How we disclose information

VerSpecify does not sell personal information or share it for cross-context behavioral advertising. If practices change, this Policy and required choice mechanisms will be updated before the change.

• ▪Service providers and subprocessors that host, secure, analyze, authenticate, bill, monitor, or support the Service.
• ▪Customer workspace administrators and authorized users according to permissions.
• ▪Professional advisers, auditors, insurers, and financing or transaction parties under appropriate duties.
• ▪Government authorities or other parties when required by law or reasonably necessary to protect rights, safety, or security.
• ▪A successor in a merger, financing, acquisition, reorganization, or sale, subject to applicable protections.

5. Retention

We retain account information while an account is active and for 30 days afterward; Customer Content for 30 days after deletion or termination; security and audit logs for 30 days; billing and legal records as required by law; and backups for up to 90 days. We may retain information longer for legal holds, disputes, security investigations, or legal obligations.

6. Security

We use reasonable safeguards designed to protect information, including encryption in transit and at rest, access controls, tenant isolation, logging, backups, and vulnerability management. No security method is infallible. Customers are responsible for appropriate account permissions and credential security.

7. Choices and rights

Depending on location and applicable law, individuals may request access, correction, deletion, portability, restriction, objection, or information about disclosures, and may appeal certain decisions. Submit requests to support@verspecify.com. We will verify requests and may deny or limit them where permitted. Authorized agents must provide appropriate authorization. Individuals may opt out of marketing emails using the unsubscribe link, while essential service messages will continue.

8. Business-customer data

If your employer or another organization provides your account, that organization may administer the workspace and access, export, correct, or delete information associated with it. Direct requests concerning business-controlled Customer Content to the organization first.

9. International transfers

Information may be processed in the United States and other locations where we or our providers operate. If VerSpecify offers the Service in jurisdictions requiring transfer safeguards, the applicable DPA or supplemental terms will describe them. The Service is currently offered only in the United States.

10. Children

The Service is intended for business users and not for children under 18. We do not knowingly collect personal information from children. Contact support@verspecify.com if you believe a child provided information.

11. Changes and contact

We may update this Policy and will post the updated version with its effective date. Material changes will receive appropriate notice and consent where required. Contact VERSPECIFY, LLC, 29350 Lisa Lynn Drive, Livingston, LA 70754, support@verspecify.com.