Privacy Policy

We collect the following categories of information.

Account information

You sign in with Google. Google sends us your name, email address, and profile picture so we can create and identify your account. We never see or receive your Google password. We also store the plan you are on and, for team accounts, your role.

Your documents and version history

Versidraft exists to store your drafts, so your document content is the core of what we hold. This includes the .docx files you upload or create, the text and images extracted from them so we can show comparisons, document titles, branch names, version names and messages, comments, approval requests, and the timestamps and authorship of each saved version. Your documents are private to you and to the people you share a team with.

Team information

If you create a team we store the team name, its members and their roles, and the email addresses you invite. An invited person’s email address is used to deliver and validate the invitation.

Billing information

Paid plans are processed by Stripe. Stripe collects and holds your payment details directly. We store only the identifiers Stripe gives us (customer ID, subscription ID, subscription status) and your plan. We never receive or store your full card number.

Messages you send us

When you use the support widget or the migration form we collect your name and email address, the message itself, and the page you sent it from. The migration form also collects the optional details you choose to give us, such as your company, roughly how many documents you have, your timeline, and a description of your workflow.

Imports from other services

If you import documents from Simul Docs, you give us an access token for your Simul Docs account. We use it to fetch your documents and their revisions, and we use it only for that import. The imported documents and versions then live in Versidraft like any other document.

Information collected automatically

• Log data. Our servers record IP address, browser and device type, the pages or API endpoints requested, timestamps, and error diagnostics. We use these to run the service, investigate faults, and detect abuse.
• Usage analytics. We use Google Analytics to understand which pages and features people use. These events describe actions in the product, such as opening the pricing page or saving a first version. They never include the content of your documents.
• Local browser storage. We use your browser’s local storage to remember small things, such as whether a one-time analytics milestone has already been recorded.

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• We do not use the contents of your documents to train artificial intelligence or machine learning models, ours or anyone else's.
• We do not serve advertising in Versidraft, and we do not run advertising or tracking pixels on our site.
• We do not read your documents. Access by our staff is limited to the rare cases described under Security below.

We keep this short. Versidraft sets the following.

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google’s opt-out add-on. Blocking the session cookie will sign you out and prevent you from using the application.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases under the GDPR:

• Performance of a contract for creating your account, storing your documents, and providing version history and billing.
• Legitimate interests for securing the service, preventing abuse, answering support requests, and understanding product usage in aggregate.
• Consent for analytics cookies where consent is required, and for any marketing email. You can withdraw consent at any time.
• Legal obligation for tax, accounting, and responding to lawful requests.

We share personal information only with the service providers we need to run Versidraft, and only for the purposes listed here. Each is bound by contract to protect it.

The document conversion and comparison that powers the in-browser editor runs on our own servers on Google Cloud. Your document content is not sent to a third-party conversion service.

We may also disclose information:

• To other people you choose to share with, such as members of your team.
• When required by law, subpoena, or other valid legal process, or to protect the rights, safety, and property of Versidraft, our users, or the public.
• In connection with a merger, acquisition, or sale of assets, in which case we will give you notice before your information becomes subject to a different privacy policy.

Versidraft is hosted in the United States, in Google Cloud’s us-central1 region. If you use Versidraft from outside the United States, your information will be transferred to and processed there, where data protection laws may differ from those in your country. Where we transfer personal information out of the EEA or the UK we rely on the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism, together with our providers.

• Documents, versions, drafts, and comments are kept until you delete them or close your account. Version history is the product, so we do not expire old versions on our own.
• Account and billing records are kept for as long as your account is open, and afterwards as long as we need them for tax and accounting purposes.
• Support and migration messages are kept for up to 24 months.
• Server logs are kept for a short period, typically 30 to 90 days, and then deleted.

When you ask us to delete your account we remove your documents and personal information from our production systems within 30 days. Copies may remain in encrypted backups for a further short period before those backups are rotated out.

All traffic between your browser, Microsoft Word, and our servers is encrypted with TLS. Data at rest, including your documents and our backups, is encrypted by our cloud provider. Session cookies are HttpOnly and Secure, and every request for a document is checked against the account that owns it.

Internal access to production data is restricted to the small number of people who need it to operate the service, and is used only to fix a fault, investigate abuse, or respond to a support request you have made. No system is perfectly secure, so we cannot guarantee absolute security, but we will notify you and any relevant regulator as required by law if a breach affects your personal information.

You can download any version of your documents as a .docx file at any time, and delete documents and versions from within the application. Depending on where you live, you may also have the right to:

• Access the personal information we hold about you and get a copy of it.
• Correct information that is inaccurate or incomplete.
• Delete your personal information and your account.
• Receive your information in a portable format, or ask us to transfer it.
• Object to or restrict certain processing, and withdraw consent where we rely on it.
• Complain to your local data protection authority.

California residents. Under the CCPA and CPRA you may request the categories and specific pieces of personal information we have collected, ask us to delete or correct it, and are entitled not to be discriminated against for exercising those rights. We do not sell personal information and we do not share it for cross-context behavioral advertising.

To exercise any of these rights, email us at privacy@versidraft.com. We will verify your request against your account email and respond within the time the law allows, normally within 30 days. You may use an authorized agent where the law permits.

Versidraft is a tool for professional work and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy as the product changes or the law requires. We will update the date at the top of this page, and if the change is significant we will tell you by email or with a notice in the application before it takes effect. Continuing to use Versidraft after a change means you accept the updated policy.

Questions about this policy or about how we handle your information? Email privacy@versidraft.com or use the support button in the corner of any page. We read every message.