Legal

Privacy Policy

Last updated: 2026-07-19

This Privacy Policy describes how {{LEGAL_ENTITY}} ("VarsaAI", "we", "us") collects, uses and protects information about users of the VarsaAI platform. VarsaAI is operated from {{HQ_COUNTRY}}.

1. Information we collect

  • Account information — email address, name, workspace and role.
  • Usage logs — timestamps, endpoints called, model used, token counts.
  • MCP request metadata — tool name, scope, run outcome, credit consumption.
  • Saved library items — sources, notes and tags you save into your workspace library.

2. How we use it

To provide, secure and improve the service, meter usage against your plan, respond to support requests, and comply with legal obligations. We do not sell personal data and do not use your prompts, outputs or library content to train foundation models.

3. Sub-processors

  • Supabase — database, authentication and storage.
  • Anthropic — model inference (Claude).
  • Lovable AI Gateway — model routing and inference.
  • ElevenLabs — text-to-speech, when enabled.
  • Segmind — image generation, when enabled.

4. Data retention

  • Usage logs: retained for 12 months.
  • Library items: retained indefinitely until you delete them (soft-deleted for 30 days, then purged).
  • Account records: retained for the life of the account, then deleted within 90 days of closure.

5. Your rights (GDPR / CCPA)

You can request access, export, correction or deletion of your personal data by emailing support@varsaai.com. We respond within 30 days.

6. Cookies

We use essential cookies for authentication and session management, and analytics cookies to understand aggregate product usage. You can control non-essential cookies through your browser.

7. International transfers

Data may be processed in the United States, the United Kingdom and the European Economic Area. Transfers rely on Standard Contractual Clauses or equivalent safeguards.

8. Security

All data is encrypted in transit (TLS 1.2+) and at rest. Database access is protected by Row-Level Security (RLS). Bearer tokens are hashed and scoped per workspace.

9. Contact

Questions? Contact us at support@varsaai.com.