Privacy Policy

This Privacy Policy explains how Vermeil (“Vermeil,” “we,” “us”) collects, uses, shares, and protects your information when you use the Vermeil app, website, or services (“Service”). By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

1Information We Collect

We collect information you provide and information generated as you use the Service:

• Account information: your name, email address, and authentication details, managed through our authentication provider (Clerk).
• Financial data: expenses, income, budgets, categories, and any notes you enter or import into the Service.
• Receipts and uploads: images or files you upload, and data extracted from them.
• Payment information: subscription and billing details. Card details are handled directly by our payment processors; we do not store full card numbers on our servers.
• Usage and device data: log data, IP address, device and browser information, and interactions with the Service, used for security and to operate and improve the Service.

2How We Use Your Information

We use your information to provide and maintain the Service; authenticate you and secure your account; process subscriptions and payments; generate expense categorization, insights, and reports; provide customer support; detect and prevent fraud and abuse; and comply with legal obligations.

3AI Processing

Certain features (such as expense parsing, receipt scanning, and chat-based assistance) send the relevant content to third-party AI providers to generate a response. This may include the text or receipt data needed for the feature. We do not sell your data, and these providers process it only to return results to you. AI outputs are provided for convenience and are not a substitute for professional financial advice.

4How We Share Information

We do not sell your personal information. We share it only with service providers who help us operate the Service and who are bound to protect it, including:

• Authentication (Clerk).
• Payment processing (Freemius, or app-store billing).
• AI providers (e.g. Anthropic, OpenAI, or Google) for AI features.
• Cloud hosting and file storage providers.
• Email delivery for support and notifications.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the Service. If Vermeil is involved in a merger or acquisition, your information may be transferred as part of that transaction.

5Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may delete your data or account at any time from within the app or by contacting us. Following deletion, we remove your personal data except where we are required to retain it for legal, tax, or fraud-prevention purposes.

6Data Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at the address below. We will respond in accordance with applicable law.

8International Data Transfers

Your information may be processed and stored in countries other than your own, where our service providers operate. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

9Children’s Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above, and continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].