privacy policy
Effective Date: May 28, 2026 | Last Updated: July 12, 2026
This Privacy Policy describes how Vertiso Corporation, a Delaware corporation ("Vertiso," "we," "us," or "our"), collects, uses, discloses, and protects information in connection with the Vertiso Memory AI memory service (the "Service"). By accessing or using the Service, you agree to the collection and use of information as described in this Policy.
This Privacy Policy is incorporated by reference into the Vertiso Memory Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.
This Privacy Policy applies to visitors to https://memory.vertiso.ai, registered account holders, API users, and subscribers worldwide. The Service is available worldwide except where prohibited by applicable law or unsupported by our service providers.
Vertiso Corporation is the data controller for personal information collected in connection with account registration, billing, and service administration. For Content and Memory Data that users store through the Service, Vertiso acts as a data processor on behalf of the user.
Important Notice Regarding Sensitive Information: Vertiso Memory is designed for AI context and workflow memory. It is not a vaulted or certified-secure storage system. Vertiso strongly advises users not to store passwords, API keys, authentication credentials, payment card or banking details, government ID numbers, medical or health information, or any other highly sensitive personal or financial information in the Service. Users should treat Vertiso Memory as they would any unvaulted system. See the Terms of Service Section 7.3 for the full sensitive data advisory.
For questions about this Policy or Vertiso's privacy practices, contact: privacy@vertiso.ai
We collect information you provide when you create an Account, subscribe to the Service, or contact us, including:
When you access or use the Service, we automatically collect certain technical and usage data, including:
We may receive limited information from Stripe in connection with payment processing, such as transaction identifiers, payment status, and billing address verification results. Our subprocessors otherwise process data on our behalf rather than supplying personal data to Vertiso. See Section 5 for the full subprocessor list.
We use the information we collect for the following purposes:
Vertiso does not use your Content or Memory Data to train, fine-tune, or otherwise develop AI or machine learning models. Your data is processed solely to deliver the Service to you.
To the extent applicable law requires a legal basis for processing personal data, Vertiso relies on the following:
Vertiso uses the following subprocessors to deliver the Service. Each is contractually required to process personal data only as directed by Vertiso and in a manner consistent with this Policy:
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Application hosting and database infrastructure | All account data, Content, and Memory Data | United States (US East 1, N. Virginia) |
| Cloudflare, Inc. (R2) | Object storage for data exports and uploaded files | Exported Memory Data and any files you upload | Cloudflare global network |
| Stripe, Inc. | Payment processing and billing | Payment card data, billing address, transaction records | United States |
| Resend, Inc. | Transactional email delivery | Email address and the contents of transactional emails | United States |
| Redis Ltd. (Redis Cloud) | Background job queue and ephemeral processing | Transient job payloads that may reference account data in transit | United States |
| Google LLC (Gemini) | AI/LLM processing for memory structuring, retrieval, and embeddings | Portions of Content and Memory Data submitted to AI-powered features. Google does not use data submitted through its paid API to train or improve its models. | United States |
| Functional Software, Inc. (Sentry) | Application error monitoring and diagnostics | Diagnostic and error data, which may include IP address and account identifiers | United States |
Vertiso will update this list when new subprocessors are added. Material changes to subprocessor arrangements will be reflected in an updated version of this Policy with notice provided in accordance with Section 13.
If Vertiso is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will provide notice of any such transfer and any changes to this Policy that may result.
We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Vertiso, our users, or the public.
We may share your information for other purposes with your explicit prior consent.
Vertiso does not sell, rent, or trade personal information to third parties for their own marketing or commercial purposes.
The Service's application and database infrastructure is operated in the United States on AWS (US East 1, N. Virginia), and object storage of data exports and uploaded files is provided by Cloudflare R2. All user data, including Content and Memory Data, is stored and processed in connection with United States-based operations. If you access the Service from outside the United States, your information is transferred to and processed in the United States and may be processed in other locations where the subprocessors listed in Section 5 operate.
Where applicable law requires safeguards for an international transfer, Vertiso uses a legally recognized transfer mechanism appropriate to the transfer and relationship. These mechanisms may include an adequacy decision or framework applicable to the recipient, contractual safeguards, or another mechanism permitted by applicable law. All subprocessors are contractually required to maintain appropriate security standards for data processed in connection with the Service.
Contact privacy@vertiso.ai for information about the safeguards applicable to a particular transfer or jurisdiction.
You may access, update, or request deletion of personal information associated with your Account by logging into your Account settings or by contacting us at privacy@vertiso.ai. We will respond to verifiable requests within a reasonable timeframe and as required by applicable law. Note that once account deletion begins, your data is no longer accessible; please export any data you wish to retain before initiating deletion.
Vertiso does not use your Content or Memory Data to train, fine-tune, or otherwise develop AI or machine learning models operated by Vertiso. This is an unconditional commitment that applies to all users and all subscription tiers and will not be changed without explicit prior notice and your affirmative consent. The Service uses Google's paid Gemini API for certain features; Google does not use data submitted through its paid API to train or improve its models.
You may opt out of non-essential marketing communications at any time from your account settings, by using the unsubscribe link in a recent marketing email (links expire after a period for security), or by contacting us at privacy@vertiso.ai. Transactional and account-related communications are not subject to opt-out as they are necessary to provide the Service.
You may configure your browser to refuse cookies or to alert you when cookies are being set. Note that disabling certain cookies may affect the functionality of the Service. See Section 9 for details.
California residents have the right to: (a) know what personal information is collected about them and how it is used and shared; (b) delete personal information held by Vertiso, subject to certain exceptions; (c) correct inaccurate personal information; (d) opt out of the sale or sharing of personal information (Vertiso does not sell or share personal information as defined under the CCPA/CPRA); and (e) non-discrimination for exercising privacy rights.
To exercise your California privacy rights, contact us at privacy@vertiso.ai with the subject line "California Privacy Request." We will respond within the timeframes required by applicable law.
A number of U.S. states have enacted or are enacting consumer privacy laws that may grant residents rights similar to those described above, including the right to access, correct, delete, and opt out of certain processing of personal data. These laws include, but are not limited to, those in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states.
Vertiso is committed to honoring verifiable privacy rights requests from residents of any U.S. state with an applicable privacy law, regardless of whether Vertiso currently meets the specific thresholds that trigger mandatory compliance under that state's law. As the Service grows, Vertiso will monitor applicable thresholds and update this Policy accordingly.
To submit a privacy rights request, contact privacy@vertiso.ai with your state of residence and the nature of your request. We will respond within a reasonable timeframe consistent with applicable law.
Subject to the conditions and exceptions in applicable law, residents of the European Economic Area, United Kingdom, and Switzerland may have the right to access and correct their personal data, the right to deletion, the right to data portability, the right to restrict processing, and the right to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting processing that occurred before withdrawal.
You may also have the right to lodge a complaint with the data protection supervisory authority where you live or work. To exercise a privacy right, contact privacy@vertiso.ai. Vertiso will respond within the period required by applicable law and may request information necessary to verify your identity and protect your Account.
Users in other jurisdictions may have additional rights under applicable local law. Vertiso honors verifiable privacy rights requests as required by the law applicable to the user and the processing. Contact privacy@vertiso.ai with the nature of your request and your jurisdiction.
Vertiso retains different categories of data for different periods depending on the nature of the data and applicable legal requirements:
| Data Category | Retention During Active Account | Retention After Account Ends |
|---|---|---|
| Account and profile data | While the Account exists | Deleted within 30 days after you confirm Account deletion, except where retention is required by applicable law, regulation, court order, or legal process. Data is inaccessible once deletion begins. |
| Content and Memory Data | While the Account exists (retained on the Free plan after a paid subscription ends) | Deleted within 30 days after you confirm Account deletion, except where retention is required by applicable law, regulation, court order, or legal process. Data is inaccessible once deletion begins. |
| Billing and payment records | Duration of relationship | 7 years from transaction date (tax and legal compliance) |
| Technical log data (IP addresses, access logs) | Duration of active account | 90 days on a rolling basis |
| Support communications | Duration of relationship | 3 years after last support interaction |
| Aggregated, anonymized analytics | Indefinitely | Not linked to individual users; retained for service improvement |
You may request early deletion of your Content or account data by contacting support@vertiso.ai. Note that once the deletion process begins, your data is immediately inaccessible and cannot be recovered, except where Vertiso is required by law to retain certain data. Please export any data you wish to retain before requesting deletion.
Vertiso uses the following categories of cookies and similar technologies:
Vertiso does not use third-party analytics services, advertising cookies, cross-site tracking cookies, or behavioral profiling technologies. No personal data derived from cookies is shared with any third party. Vertiso does not participate in advertising networks.
Vertiso implements reasonable and appropriate technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit (TLS), encryption of data at rest, access controls, audit logging, and regular encrypted database backups. Vertiso intends to pursue formal third-party security compliance certifications as the Service matures; details will be published when available.
HOWEVER, NO SECURITY MEASURE IS PERFECT OR IMPENETRABLE. VERTISO CANNOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR INFORMATION. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
The Service is directed exclusively at adults and is not intended for use by individuals under the age of 18. Vertiso does not knowingly collect personal information from anyone under the age of 13, and the Service is not directed at children as defined under the Children's Online Privacy Protection Act (COPPA). Vertiso does not request or store age information from users and has no mechanism for verifying user age; however, by using the Service, users represent that they are at least 18 years of age.
If we become aware that we have inadvertently collected information from a child under 13, we will take prompt steps to delete it. If you believe we have collected information from a minor, please contact us at privacy@vertiso.ai.
The Service may contain links to third-party websites or integrate with third-party tools. This Privacy Policy does not apply to those third-party services, and Vertiso is not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date above and, where practicable, by sending notice to the email address associated with your Account. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Policy.
If you have questions, concerns, or requests relating to this Privacy Policy or Vertiso's privacy practices, please contact:
Vertiso Corporation
8201 164th Ave NE, Suite 200, Redmond, WA 98052
Email: privacy@vertiso.ai
Website: https://memory.vertiso.ai
We aim to respond to all privacy inquiries within thirty (30) business days.