Privacy Policy
Last updated: July 2026
1. Information We Collect
We collect information you provide directly (name, email, organisation details), usage data (AI interactions, feature usage, message counts), payment information (processed by Stripe — we never store card numbers), and data from connected social media accounts (encrypted access tokens, profile names, usernames).
2. How We Use Your Information
We use your data to provide and improve the Service, authenticate you, process payments, generate AI responses, post content to social media on your behalf (only when you explicitly trigger it), and send essential service communications.
3. Third-Party Services We Use
Vertinab is built on the following third-party infrastructure and services. Each has its own privacy policy:
| Service | Provider | Purpose |
|---|---|---|
| Supabase | Supabase Inc. | Database, authentication, and file storage. Your account data, chat history, and encrypted tokens are stored here. |
| Railway | Railway Corp. | API server hosting. All backend requests are processed on Railway-hosted infrastructure. |
| Vercel | Vercel Inc. | Web application hosting. The Vertinab web app is served via Vercel's global CDN. |
| OpenAI | OpenAI Inc. | Image generation (DALL-E / gpt-image models). Prompts you submit for image generation are sent to OpenAI. |
| OpenRouter | OpenRouter Inc. | AI model routing for agent chat responses. Your messages are routed through OpenRouter to the underlying LLM. |
| Anthropic | Anthropic PBC | Fallback AI provider (Claude models) when OpenRouter is not configured. |
| Stripe | Stripe Inc. | Payment processing. Subscription billing and plan upgrades. We never store card details. |
| Meta (Facebook / Instagram) | Meta Platforms Inc. | Social media posting and scheduling. We request only the permissions needed to post content on your behalf. |
| LinkedIn Corp. (Microsoft) | Social media posting and scheduling. We use the LinkedIn API to post content you generate and approve. | |
| X (Twitter) | X Corp. | Social media posting. We use the X API v2 to post tweets on your behalf. |
| TikTok | TikTok Ltd. | Social media integration. Data obtained through TikTok's API is used solely to enable content scheduling within Vertinab. |
4. Social Media Data
When you connect a social media account, we store an encrypted access token to enable posting on your behalf. We access only the permissions you explicitly grant during the OAuth flow. We do not sell or share your social media data with third parties. You can disconnect any account at any time from your Social Media dashboard.
5. TikTok Data
Data obtained through TikTok's API is used solely to enable content posting and scheduling features within Vertinab. We do not use TikTok data for advertising or sell it to third parties. TikTok access tokens are encrypted at rest using AES-256. Users can revoke access at any time by disconnecting TikTok from their Vertinab account or revoking permissions directly in TikTok settings.
6. AI & Message Data
Messages you send to AI agents are processed by our AI provider (OpenRouter or Anthropic). We store chat history in Supabase to enable conversation continuity. Your prompts may be used by the underlying AI providers subject to their own policies. We recommend not including sensitive personal or financial information in chat messages.
7. Data Storage & Security
Your data is stored in Supabase (PostgreSQL) with encryption at rest. Social media tokens and database credentials are additionally encrypted using AES-256 (Fernet) before storage. All data in transit uses HTTPS/TLS. Our API runs on Railway with environment-based secret management.
8. Data Retention
We retain your data for as long as your account is active. Upon account deletion, we delete your personal data within 30 days, except where retention is required by law or for fraud prevention.
9. Your Rights
You have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at admin@vertinab.com. We will respond within 30 days.
10. Cookies
We use essential cookies and browser localStorage for authentication tokens and session management. We do not use tracking, advertising, or analytics cookies.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or in-app notice. Continued use of the Service after changes constitutes acceptance.
12. Contact
For privacy questions or data requests, contact us at admin@vertinab.com.