Scope and controller
This Privacy Policy applies to the Verbum Nexus marketing website, web application and related services.
Verbum Nexus is operated from Portugal. For privacy requests, contact us at hello@verbumnexus.app.
Personal data we collect
We collect personal data you provide, data created while you use the service and data required to operate the platform securely.
- Account data: name, email address, authentication identifiers, language preferences, workspace membership, team roles and account settings.
- Ceremony content: ceremony details, participant information, notes, questionnaires, scripts, recordings, transcripts, files, photos, social media drafts and calendar entries.
- Billing data: plan, credits, invoices, tax information, Stripe customer identifiers and subscription status. Full card details are handled by Stripe and are not stored by Verbum Nexus.
- Technical and usage data: IP address, device and browser information, logs, session events, pages viewed, feature usage, cookies, local storage and session storage.
- Integration data: Google sign-in data, Google Calendar data and Google Maps or Places data when you choose to connect or use those integrations.
How we use personal data
We use personal data only for clear service, security, billing, support and compliance purposes.
- To create and manage accounts, sessions, workspaces, teams and permissions.
- To store, organize, transcribe, generate, translate and export ceremony-related content requested by users.
- To process subscriptions, invoices, credits, storage quotas, add-ons and payment events.
- To provide collaboration, presence, calendar synchronization, file storage and notifications.
- To secure the service, prevent abuse, investigate errors and maintain reliable infrastructure.
- To respond to support requests, legal requests and mandatory compliance obligations.
- To improve the service using aggregated or diagnostic information where appropriate.
Legal bases
Where the General Data Protection Regulation or similar laws apply, we rely on the following legal bases.
- Contract: to provide the service you requested, including account, workspace, billing and core platform features.
- Legitimate interests: to secure, maintain, debug and improve the service, provided those interests are not overridden by your rights.
- Consent: where you connect optional integrations, receive optional communications or use features that require consent.
- Legal obligation: where we must keep invoices, respond to lawful requests or comply with tax, accounting or regulatory requirements.
Recordings, transcripts and AI processing
Verbum Nexus lets users upload or record audio, create transcripts, fill questionnaires, generate scripts and produce social media content. This content may include personal data about clients, guests, relatives or other third parties.
When you use transcription, generation, translation or data extraction features, relevant recordings, transcripts, notes, questions, answers, files or instructions may be sent to AI or transcription processors such as Google Gemini, xAI/Grok or equivalent providers used to deliver the requested feature.
You are responsible for informing participants and obtaining any required consent or lawful basis before recording, uploading or processing information about them through Verbum Nexus.
Sharing and processors
We do not sell personal data. We share personal data only when needed to provide the service, comply with the law or protect our rights and users.
- Infrastructure, database, storage and hosting providers, including Supabase, Google Cloud and Cloudflare.
- Payment and billing providers, including Stripe.
- Email and notification providers, including Maileroo.
- AI, transcription and generation providers, including Google Gemini, xAI/Grok or equivalent processors.
- Google services when you use Google sign-in, Google Calendar, Google Maps or Google Places features.
- Workspace members, team administrators or invited collaborators according to the permissions configured in the product.
- Public authorities, courts, regulators or other parties when disclosure is legally required or necessary to protect rights, safety and security.
International transfers
Some providers may process personal data outside your country or the European Economic Area. When this happens, we rely on appropriate safeguards such as contractual protections, standard contractual clauses or equivalent transfer mechanisms where required.
Retention
We keep account, workspace and ceremony content while your account is active or as needed to provide the service. You may delete content through the product where deletion controls are available.
After account deletion, cancellation or a verified deletion request, we delete or anonymize personal data within a reasonable period unless we must keep it for legal, tax, billing, security, dispute resolution or backup reasons.
Security
We use technical and organizational measures designed to protect personal data, including authentication, access controls, row-level security, limited administrative access, encrypted transport and monitored infrastructure.
No online service can guarantee absolute security. You are responsible for keeping your login credentials secure and for managing access to your workspaces and teams.
Your rights
Depending on your location, you may have the right to access, correct, delete, restrict or port your personal data, object to certain processing, withdraw consent and lodge a complaint with a supervisory authority.
If you are in Portugal, you may contact the Comissão Nacional de Proteção de Dados. To exercise privacy rights with Verbum Nexus, email hello@verbumnexus.app.
Cookies and local storage
We use cookies, local storage and session storage to keep users signed in, remember preferences, operate security controls, preserve draft or session state and understand basic website or product usage.
You can control cookies in your browser settings. Blocking required storage may prevent parts of the service from working correctly.
Children
Verbum Nexus is not directed to children and is not intended for users under 16. Do not submit personal data about children unless you have the legal authority and consent required for the specific ceremony or service context.
Changes to this policy
We may update this Privacy Policy as the service, law or our processing practices change. The effective date above shows when this version applies. Material changes will be communicated through reasonable channels.