Privacy Policy

Last updated: July 28, 2026

This policy explains what personal data VersyNow processes, why, and what rights you have. It covers two groups: organizers, who hold accounts, and participants, who join events run by organizers. For participant data collected through an event, the organizer is the data controller and VersyNow acts as processor on their behalf.

1. Data we collect from organizers

Account data from Google sign-in (name, email address, profile picture); billing data processed by Stripe — card numbers never touch our servers, we store only your Stripe customer reference and subscription status; and the content you create (events, sessions, rounds, branding).

2. Data we process about participants

When you join an event as a participant, we process what you submit: questions, votes, poll answers, and — only if you provide it — your name, email address, and company. Participation is possible without an account. A random technical identifier is stored on your device so your submissions and votes stay yours; if the organizer enables anonymous mode, your name is hidden from the audience.

3. Technical data

We process IP addresses and standard request metadata to operate the service, prevent abuse (rate limiting), and keep it secure. Server logs are retained for a limited period. Google Analytics runs on our marketing pages only when configured, never inside event sessions.

4. Why we process data (legal bases)

To provide the service under our contract with you; to comply with legal obligations (tax and accounting for payments); with your consent where we ask for it (participant contact capture, marketing emails); and for our legitimate interests in securing and improving the service.

5. Processors we rely on

We use vetted providers to run VersyNow: Railway (hosting), PostgreSQL managed storage, Stripe (payments), Google (sign-in), Resend (transactional email), Pusher-compatible websockets (real-time updates), and UploadThing (image storage). Each processes data only as needed to provide its function.

6. How long we keep data

Organizer accounts and event data are kept until you delete them — downgrading or cancelling never deletes data. Participant data lives inside the organizer's event and is deleted when the organizer deletes it or their account; organizers can also erase individual participants. Unredeemed one-time credits expire but their purchase records are retained for accounting.

7. Your rights

You may access, correct, export, or delete your personal data. Organizers can exercise these rights directly in the product or by contacting us. Participants should contact the event organizer first, as the controller of their data; we support organizers in honouring such requests and will assist directly where the organizer is unreachable.

8. Cookies

The app itself uses only essential cookies: authentication for organizers and a language preference. No advertising cookies. If analytics is enabled on the marketing site, Google Analytics sets its own cookies there; event pages remain analytics-free.

9. International transfers

Our providers may process data in the United States and other countries. Where data leaves your jurisdiction, we rely on our providers' standard contractual protections and equivalent safeguards.

10. Security

Data is encrypted in transit, access to production systems is restricted, and participant-facing endpoints are protected by ownership tokens and rate limiting. No system is perfectly secure; we will notify affected users of any breach as required by law.

11. Children

VersyNow is not directed at children. Organizer accounts require the age of digital consent. Organizers running events for younger audiences are responsible for the lawfulness of any data collection they enable.

12. Changes and contact

We may update this policy; material changes are announced by email or in-product notice before they take effect. For any privacy question or request, reach us through the contact page — a human answers.

Questions about this document?