Verboo Code Privacy Policy

This Policy explains how Verboo Code handles data when you visit the website, create an account, or use the CLI, desktop app, chat, API, and dashboard. We collect what is needed to operate, secure, bill for, and improve the product. We do not sell personal data.

The controller for account and usage data is Verbeux Serviços Ltda., Brazilian CNPJ 46.214.362/0001-86, Rua Doutor Gilberto Studart, 55, Suite 1317, Tower 2, Cocó, Fortaleza-CE, ZIP 60192-105, Brazil. Privacy questions and requests may be sent to privacy@verboo.ai.

• Account and authentication: name, email, login identifiers, preferences, terms acceptance, and a verified phone number when required.
• Plans and billing: plan, subscription, credits, billable usage, status, and transaction identifiers. Full card details are processed by payment providers, not by Verboo Code.
• Product usage: prompts, context, files, and responses submitted through the CLI, desktop app, chat, or API to perform your request. The catalog separately identifies Zero Data Retention models; for those models, prompts and responses are not persisted, although technical telemetry and billing data are retained.
• Telemetry and security: IP address, browser, device, logs, request IDs, latency, selected model, token counts, failures, and fraud or abuse signals.
• Website and communications: visit source, cookies, navigation events, language preferences, and support messages.

We use data to perform our contract and deliver the service; authenticate users; process AI requests; administer plans, credits, and payments; provide support; prevent fraud and abuse; maintain security and availability; comply with legal obligations; measure acquisition and performance; and communicate important changes. Where consent is required, you may withdraw it.

Verboo Code does not use your prompts, files, or responses to train its own models. Content is processed to generate the requested response. Persistence rules can vary by model and service mode, so the catalog indicates when Zero Data Retention applies. Do not include unnecessary secrets, credentials, or personal data in prompts.

We share data only as needed with cloud, GPU, and inference providers; authentication services; payment providers such as Stripe and Woovi; transactional email; support; observability; security; and product analytics providers. They receive only the data needed for the contracted service. We may also disclose information to comply with law or a valid order, or to protect rights and safety.

Some providers may process data outside Brazil. In those cases, we use mechanisms consistent with the LGPD, including contracts and safeguards appropriate to the service and destination country.

We retain data for as long as needed to provide the product, protect the platform, resolve disputes, and meet legal and accounting obligations. The period depends on the data type, plan, model configuration, and security risk. When retention is no longer needed, data is deleted or anonymized. Account closure and deletion requests may be sent to the contact in this Policy.

We use technical and organizational controls, including encryption in transit, access segregation, audit logging, secret management, monitoring, and incident response. No system is infallible; report vulnerabilities to privacy@verboo.ai.

We use cookies needed for session, language, and security, plus analytics and advertising tools configured for the Verboo Code product. They may receive pseudonymous identifiers, campaign source, visited page, and usage events, but our events must not contain prompts, keys, email, phone numbers, or financial data. You may restrict cookies in your browser, subject to loss of some functionality.

Under the Brazilian LGPD, you may request confirmation, access, correction, anonymization, blocking, deletion, portability, information about sharing, objection, and consent withdrawal, as applicable. To exercise these rights, email privacy@verboo.ai. We may request information to verify your identity.

Verboo Code is intended for users who have legal capacity to enter into a contract and is not directed at children. If we learn that a child’s data was submitted without an appropriate legal basis, we will take steps to delete it.

We may update this Policy to reflect legal, technical, or product changes. The current version will remain on this page with its last-updated date. When a change is material, we will provide notice appropriate to the law and relationship context.