Privacy policy

Verse is operated by Anthony Lamelas, a sole proprietor doing business as Verse, based in Florida, United States. For anything in this policy, including requests about your data, write to anthony.lamelas23@gmail.com.

Under European and UK data protection law, Anthony Lamelas is the controller of the personal data described here.

We keep the minimum needed to run an account and let you come back to your work.

• Account. Your email address and a password hash. If you sign in with Google, the name, email address and profile picture URL your Google account provides. We request only basic sign-in scopes and nothing else from Google.
• Your translations. Project and translation names, the source and target languages, the text detected on each page, its translation, your edits, and the coordinates and styling of each text box. This is what lets you reopen a translation and keep editing.
• Fonts you upload. The font file and its name, kept so your pages can be rendered with it.
• Messages you send us. Feedback and language requests you submit through the site, tied to your account so we can reply.
• Usage counts. How many pages you have processed, used to apply the plan limits.
• Technical records. Server logs holding request identifiers, timings and error types, and error reports sent to our monitoring provider with personal data removed before they leave our servers. Logs never contain your images or the text of your comics.
• Cookies. Only the session cookie that keeps you signed in. There are no advertising or analytics cookies.

Your artwork is never stored on our servers. Your comic pages stay in your browser, on your device. To translate and re-letter a page, it is encrypted on your device before it travels, decrypted only in temporary memory on the machine doing the work for the seconds that takes, and then discarded. It is never written to a disk, never logged, and never saved to our database. The lasting record is text and coordinates only. The longer explanation is on our security page.

We do not run analytics or tracking scripts, show advertising, build profiles, or sell or share personal data for marketing. We do not send marketing email.

• Providing the service — creating your account, detecting and translating text, rendering your pages, and sending sign-in and password-reset email. Basis: performing our contract with you.
• Translating — the detected text is sent to Anthropic, our AI provider, to produce the translation. Only text goes; never the image. Basis: performing our contract with you.
• Replying to you — reading and answering feedback and language requests. Basis: our legitimate interest in improving Verse.
• Keeping the service running and fair — plan limits, preventing abuse, diagnosing errors, and security. Basis: our legitimate interests, and legal obligations where they apply.

We do not use your data for anything that needs your consent. If that ever changes, we will ask first.

Verse runs on a small number of providers, each acting on our instructions. We do not sell personal data to anyone.

• Supabase — sign-in and the database that holds your account, text and coordinates.
• Vercel — hosts the website.
• Render — runs our servers and the short-lived queue that hands an encrypted page from upload to processing.
• Anthropic — translates the text of your pages. We use Anthropic's commercial API, under terms that do not allow training on your content.
• Modal — provides the GPU machines that read and clean a page. The page exists there in memory only, for the duration of the job.
• Resend — delivers sign-in and password email.
• Google — only if you choose to sign in with Google; Google's own privacy policy covers what it does on its side.
• Sentry — receives error reports with personal data removed, so we can find and fix crashes.

When paid plans launch, payments will be handled by Stripe. This policy will be updated before that happens.

Verse and its providers process data in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, that is a transfer outside your region. Our providers support it with safeguards recognised under your law, such as certification under the EU-US Data Privacy Framework or Standard Contractual Clauses. You can ask us at anthony.lamelas23@gmail.com which safeguard applies to a given provider.

• Your account, translations and fonts: until you delete them, or until you close your account.
• Pages in processing: the encrypted page is deleted the moment the job finishes, including when it fails. A rendered result is deleted when your browser fetches it, or within two minutes if it never does.
• Feedback and language requests: until you ask us to delete them.
• Error reports: kept by our monitoring provider for up to 90 days, then deleted. Server logs are kept for a short operational window and then discarded.

You can ask us to show you the personal data we hold about you, correct it, delete it, give you a copy in a portable form, restrict how we use it, or object to a use based on our legitimate interests. Write to anthony.lamelas23@gmail.com and we will respond within 30 days. During the pilot, closing your account works the same way: email us and we will delete the account and everything tied to it.

If you are in the EEA or the UK and think we have handled your data unlawfully, you can complain to your local data protection authority. We would rather you told us first, so we can fix it.

California residents. You have the same rights of access, deletion and correction described above. We do not sell or share personal information as those terms are defined in California law, and we do not use it for targeted advertising. Because we do not track visitors across other sites, there is nothing for a browser's Do Not Track signal to change; we treat every visitor the same way.

Verse is for people aged 13 and over. We do not knowingly collect personal data from anyone younger. If we learn that we have, we delete the account. If you believe a child has created one, tell us at anthony.lamelas23@gmail.com.

Everything travels over encrypted connections, your pages are additionally encrypted on your device before upload, and access to our systems is limited to the operator. No system is perfectly secure, and we cannot promise that no incident will ever happen; if one affects you, we will tell you as the law requires.

The effective date at the top tells you when this policy last changed. If we make a change that affects your rights or how we use your data, we will email account holders before it takes effect.

Anthony Lamelas, doing business as Verse, Florida, United States. anthony.lamelas23@gmail.com. Our terms of service are at verse.software/terms.