Privacy Policy

This Privacy Policy explains what personal data Verbatim collects, why it's collected, how it's used, and the rights you have under the EU General Data Protection Regulation (GDPR).

Plain English first. Legal terms only where they're load-bearing.

1. Data controller

Omar Bashar Fathi Abbas
Birkenallee 50
15745 Wildau, Germany
Email: omar@useverbatim.app

2. What data we collect

2.1 Lead capture (the email form)

When you submit the email form on this site, we collect:

• Your email address
• The app name or URL you submitted
• Submission timestamp
• Your IP address and User-Agent, included in the notification email so we can identify obvious spam submissions
• The page you submitted from (HTTP referer)

2.2 Subscriptions & billing

When you start a free trial or subscribe to a paid plan, checkout and billing are handled by our payment provider, Lemon Squeezy, acting as Merchant of Record. In connection with your subscription we process:

• Your name and email address
• Billing country and any address details you enter at checkout
• Your subscription plan, status, and renewal dates
• The app(s) and competitors you ask us to track, and the email address your reports are delivered to

We never see or store your full payment-card number — card data is collected and processed directly by Lemon Squeezy.

2.3 Free preview generator

Your first preview is free and needs no email. To unlock one additional preview we ask for your email address — which we then hold as a lead, as described in 2.1 above. We set two functional cookies (vb_teaser_used and vb_teaser_email) to track how many previews you've used. We do not store the app name you submitted beyond the duration of the request.

2.4 Technical logs

Our hosting provider (Vercel) automatically logs basic request data — IP address, User-Agent, timestamp, URL — for security and performance monitoring. These logs are retained for a short period and used only for operating the service.

2.5 Privacy-friendly analytics

We use Vercel Web Analytics to understand aggregate traffic — which pages are visited, referrers, country, and device type. It is cookieless: it sets no cookies and stores nothing on your device. It does not use a persistent identifier and does not track you across other websites. Vercel derives an anonymous, daily rotating hash to count unique visits and discards it, so individual visitors are not re-identifiable over time.

2.6 What we do not collect

• No advertising or cross-site tracking cookies, no tracking pixels, no fingerprinting for advertising.
• No advertising IDs. We don't sell or share data with advertisers.
• No third-party social plugins (no Facebook pixel, no LinkedIn Insight Tag).

3. Why we collect it (legal bases)

• Email + app name (lead form): performance of a contract / pre-contractual measures at your request (Art. 6(1)(b) GDPR). You gave us this info so we can send you the report you asked for.
• Subscription & billing data: performance of your subscription contract (Art. 6(1)(b) GDPR), and compliance with tax and accounting obligations (Art. 6(1)(c) GDPR).
• Free preview rate-limiting: legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
• Technical logs: legitimate interest in operating a secure service (Art. 6(1)(f) GDPR).
• Cookieless analytics: legitimate interest in understanding aggregate traffic to improve the service (Art. 6(1)(f) GDPR). Because no information is stored on or read from your device, no consent is required under §25(2) TTDSG.

4. Who sees your data (processors)

We use the following third-party processors. Each is bound by a data processing agreement and the same GDPR standards.

• Lemon Squeezy, LLC — payment processing and billing as our Merchant of Record. Handles checkout, card processing, invoices, and VAT / sales tax. Lemon Squeezy privacy policy.
• Vercel Inc. — hosting, CDN, and cookieless Web Analytics. Vercel privacy policy.
• Resend (Resend, Inc.) — transactional email delivery for lead notifications. Resend privacy policy.
• Anthropic, PBC — the AI model that powers the free preview generator. App names you submit may be sent as part of the generation request. Anthropic does not train on API inputs by default. Anthropic privacy policy.

5. International transfers

Some processors above (Vercel, Anthropic, Resend, Lemon Squeezy) are based in the United States. Transfers are governed by the EU Standard Contractual Clauses and / or the EU-U.S. Data Privacy Framework where applicable.

6. How long we keep it

• Lead emails: until you ask us to delete them, or until the relationship is clearly over (typically 24 months of inactivity).
• Billing & invoice records: retained for the statutory period required by German tax and commercial law (up to 10 years) once you have made a payment.
• Free preview cookies: 30 days, after which a new preview becomes available.
• Technical logs: typically up to 30 days at our hosting provider.

7. Your rights

Under GDPR you can:

• Access the data we hold about you (Art. 15)
• Correct inaccurate data (Art. 16)
• Delete your data (Art. 17 — “right to be forgotten”)
• Restrict processing (Art. 18)
• Receive your data in a portable format (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw any consent you've given, at any time
• Lodge a complaint with a supervisory authority (Art. 77). In Germany, the competent authority depends on your state of residence.

To exercise any of these, email omar@useverbatim.app. We aim to respond within 30 days.

8. Cookies

We use two functional cookies (vb_teaser_used andvb_teaser_email), plus a matching localStorageentry (vb_teaser_used_at) as a fast client-side check, to track how many free previews you've used. They are strictly necessary for the feature to work and are not used for tracking. No cookie banner is required for strictly-necessary storage under GDPR / TTDSG.

9. Changes

We'll update this page if our processors or practices change. The date at the top reflects the most recent revision.