Privacy notice
Version 1.5 · Last updated 15 October 2026 · Applies to the Verso app (app.versonow.com) and the Verso website (versonow.com).
1. Who is responsible for your data
Verso EM Ltd, a company registered in England and Wales (company number 17240387), is the controller for the personal data described in this notice.
Contact for privacy matters, including our data protection lead: [email protected] ICO registration: ZC241635
Where your employer has bought Verso for a team, see Section 7.
2. What we collect
From you, to create an account
Handled by our authentication provider. Verso never sees or stores your password.
| Data | Notes |
|---|---|
| Name | First and last, as you enter them |
| Email address | Also the login identifier |
| Credentials | Password hash or social login, held by our authentication provider only |
| Session tokens | Short-lived, used to prove who you are on each request |
A copy of your name, email and account type is kept in our own database so the application can work without calling our authentication provider on every request.
From how you use Verso
Stored in our database, always keyed to your account.
| What | Contains | Sensitivity |
|---|---|---|
| Account record | Email, first and last name, account type, team, your two sharing choices | Ordinary personal data |
| Assessment results | Archetype, secondary archetype, confidence score, dimension scores, sustainability score, when you finished and how long it took | Behavioural profile |
| Assessment answers | Every individual answer you gave, as a number per question | Behavioural profile |
| Daily check-ins | An overall score, and your energy and confidence, each out of 5, and the date. No free-text note. | Wellbeing data |
| Weekly deal check-ins | For each deal you chose to focus on: an overall score, and your energy, confidence and pressure, each out of 5; the working phase that deal was in at the time; and the week | Wellbeing data |
| Derived trend bands | A band name per phase per week, for each of overall, energy, confidence and pressure: "stable", "worth watching", "sustained decline", held separately from your scores, and containing none | Wellbeing data |
| Sharing choice per team | Whether you share nothing, share anonymously, or share under your name, for each team you are in | Ordinary personal data |
| Deal records | A label you choose for the deal, its stage and its outcome | A deal name may identify a third party. See below |
| Articulation attempts | A written transcript of what you said, plus speaking rate, filler-word count, hedging count, longest sentence and your score | Voice-derived content |
| Verso Duel | What you wrote in each round, the AI buyer's and AI rep's lines, the judge's scores and notes, the result, and your private duel rating. Like a deal label, a reply could name a client: keep names out | Ordinary personal data |
| Team record | Team name, join code, which account is the manager | Ordinary personal data |
| Reminder settings and device notification tokens | Only if you switch reminders on: the time you chose and your time zone, whether to remind you at the hour you usually check in (worked out from your own check-ins), and a token your phone or browser gives us so we can send the reminder | Ordinary personal data |
| Tool use | Which tool you used (for example box breathing or the AI Companion) and on which day, and, if you answer the next day, whether it helped. Never what you wrote or said. Used to show you which tools seem to help | Wellbeing data |
| What worked on a won deal | One to three words you pick from a fixed list (for example preparation or timing). Never free text, so nothing about the client. Used to show you what your wins have in common | Ordinary personal data |
| Your weekly focus | The focus you chose for a week and whether you ticked it off | Wellbeing data |
| Coaching scenarios you opened | Which coaching scenario you opened, by week. Used, only in groups of five or more people, to show your manager what the team is working through. Crisis scenarios are never recorded | Wellbeing data |
| When a deal closed | The date you closed a deal as won or lost, so Verso can show how quickly you bounce back after a loss | Ordinary personal data |
| Research choice and role | Whether you opted into anonymised research and when; optionally, what you do in sales and for how long | Ordinary personal data |
| Your choice about the AI tools | Whether you agreed to the AI tools, and when | Ordinary personal data |
| AI replies you report | The reply you reported, the message that led to it, the reason you chose and any note you added | Ordinary personal data |
Two things worth calling out plainly:
- Deal names are free text and we do not inspect them. If you type a client's or contact's name, you have entered someone else's personal data into Verso. Use a reference or a company name rather than an individual's name.
- Articulation stores the transcript, never the audio. Your recording is sent once for transcription and is not written to disk by us. The text is kept so you can see what was measured, and is erased after 90 days while your scores remain.
From your device
| What | Why | Where it lives |
|---|---|---|
verso_role cookie, plus session and local storage entries | Carries the account type you picked from the marketing page through sign-up, and caches your latest results so the app is fast | Your browser. Cleared by signing out or clearing site data |
| Onboarding-seen flag | Stops the intro carousel repeating | Your browser |
If we add analytics or any other non-essential cookies, we will update this notice first and ask for your consent before setting them.
What we deliberately do not collect
No heart rate, sleep, step count or wearable data. No location. No contacts, calendar or CRM access unless you explicitly connect one.
3. Why we use it, and our lawful basis
| Purpose | Data used | Lawful basis |
|---|---|---|
| Create and run your account, sign you in | Identity data | Contract |
| Score your assessment and show your archetype and profile | Assessment answers and results | Contract |
| Track your trend over time and produce the wellbeing map | Check-ins, assessments | Contract |
| Show how your state relates to deal stages | Deals, check-ins | Contract |
| Give AI coaching replies, reframes and articulation feedback | Your message or transcript, plus your archetype and the matching guidance from Verso's coaching library | Contract |
| Run Verso Duel: your replies scored against an AI rep's by an AI judge that does not know which is yours | What you write in the duel, the setup you chose | Contract |
| Review AI replies you report, to fix answers that are harmful, offensive or wrong | The reported reply, the message before it, your reason and note | Legitimate interests: keeping the AI tools safe |
| Share your archetype and trend with your manager | Assessment result, check-in trend, name if you allow it | Consent (Section 7) |
| Show your own insights back to you: bounce-back after a loss, which stage of the sale costs you most, what seems to help, what your wins have in common, your quarter, your week | Check-ins, deals, tool use, what worked on won deals, your weekly focus | Contract |
| Show your company anonymised figures for its teams, in groups of five or more people who share with their manager | Check-in trends, pattern, bounce-back, win rate by confidence | Consent (Section 7) |
| Anonymised research and benchmarks, in groups of ten or more people from at least three organisations | Your results, check-ins and role, without your name | Consent: off until you opt in, in Settings, and you can withdraw at any time |
| Keep the service secure and prevent abuse | Request metadata, account identifiers | Legitimate interests |
| Send you reminders to check in | Your reminder settings and notification token | Consent: reminders are off until you switch them on, and you can switch them off in Settings at any time |
| Meet legal and accounting obligations | Account and billing records | Legal obligation |
Profiling. Assigning you an archetype from your answers is profiling. It is not a solely automated decision with legal or similarly significant effect: it produces guidance for you, nothing is decided about your employment, pay or access to anything, and a manager sees a wellbeing trend rather than a recommendation to act.
4. Who else processes it
| Processor | What they do | Where | Transfer mechanism |
|---|---|---|---|
| Authentication provider | Sign-in, credential storage, session management | United States | Standard contractual clauses under the provider's data processing agreement |
| Cloud hosting provider | Hosting, our database, and the AI models that process chat messages and audio transcription | Primarily Western Europe, on a global network | Standard contractual clauses under the provider's data processing agreement |
If you switch reminders on, they are delivered by your phone or browser maker's notification service. The reminder is encrypted so that service cannot read it.
The AI models process your chat messages and audio to generate a response.
- The AI tools ask first. Before you first use the AI Companion, Reframe, Mock Practice, Articulation's feedback or Verso Duel, Verso explains what is sent to the AI and what is kept, and asks you to agree. You can turn the AI tools off in Settings at any time; everything else in Verso works without them.
- If you report an AI reply, the reply and the message that led to it go to the Verso team with the reason you chose and any note, so we can fix the cause. Nothing else from the conversation is sent. Reports are kept for 12 months (Section 5).
- Verso does not store your conversations with the AI Companion, Reframe or Mock Practice, and does not use them - or anything else you enter - to train an AI model. Articulation transcripts and Verso Duel rounds are the things kept, for 90 days (Section 5), so you can see what was measured and look back at a duel.
- Our AI provider does not use them to train models either. Under its terms, what is sent to and returned by the models is not used to train any model or to improve its own or anyone else's services, and is not stored unless we choose to store it, which we do not.
We do not sell personal data and we do not share it with advertisers.
5. How long we keep it, and where
Enforced by a scheduled job that runs every day. These are not aspirations; expiry happens without anyone asking for it.
| Data | Stored in | Retention | Why that period |
|---|---|---|---|
| Name, email, credentials, sessions | Our authentication provider (United States) | Life of the account | Needed to sign you in |
| Account record | Our database | Life of the account | Needed to run the account |
| Assessment results | Our database | 24 months | The product compares a retest against a baseline at 6 months, and a year-on-year view needs two annual cycles |
| Raw assessment answers | Our database | 12 months | Only needed to rescore a result if the scoring model changes. The result outlives the answers |
| Daily check-ins | Our database | 24 months | Supports the trend, the retest comparison and two seasonal cycles |
| Weekly deal check-ins | Our database | 24 months | Same window, same reason |
| Derived trend bands | Our database | 24 months, and never longer than the scores behind them | Removed with the scores they come from |
| Deal records | Our database | 24 months | Matches the check-in window they are correlated against |
| Articulation transcripts | Our database | 90 days, then erased in place | The words stop being useful once you have reviewed the attempt |
| Articulation scores and metrics | Our database | 24 months | Progress over time |
| Verso Duel words (the lines, your replies, the judge's notes) | Our database | 90 days, then erased in place | Long enough to look back at a duel |
| Verso Duel scores and results | Our database | 24 months; your duel rating until you clear your data or close your account | Progress over time |
| Tool use | Our database | 12 months | Long enough to see what helps you |
| What worked on a won deal | Our database | 24 months, and deleted with the deal | The same window as the deal |
| Your weekly focus | Our database | 12 months | Long enough to look back over a year |
| Coaching scenarios you opened | Our database | 8 weeks | A team topic reads the last four weeks |
| Team events and team figures a company enters | Our database | 24 months | The same window as the trends they are read against |
| Team record | Our database | Life of the team | Deleted with the manager's account |
| Audio recordings | Nowhere: held only for the length of the transcription request | Not stored | Nothing to retain |
| Chat messages and transcripts in transit to the model | Our AI provider | Transient | Processed, not retained by us |
| Usage counters for the AI features | Our database | 2 days | Fair use of the AI features |
| AI replies you report | Our database | 12 months | Long enough to review the reply and fix the cause |
| Record of manager access to your data | Our database | 24 months | So you can see when your data was shown to your manager |
| Reminder settings and notification tokens | Our database | Until you switch reminders off on that device, or close your account | Needed to send the reminder |
| Cookie, cached results, onboarding flag | Your browser | Session, or until you clear site data | Functional only |
| Backups | Our hosting provider | Rolled off within 35 days of deletion | Operational recovery window |
Articulation transcripts are erased after 90 days while your scores remain.
Inactive accounts. An account with no activity for 24 months is reviewed and removed.
Usage counters and the record of manager access are kept for the periods above even if you clear your data, because they protect the service and other people: the access record covers the colleagues who appeared alongside you. When your account is closed, your part of the access record is removed. We record that your manager viewed the team, not which manager.
If you delete something yourself it goes immediately. The periods above are an outer limit, not a hold.
6. Your rights
Under UK GDPR you can ask for access, correction, deletion, restriction, portability, and to object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time.
Most of this is built into the product, under Settings:
| You want to | Do this | What happens |
|---|---|---|
| See what is held | Settings → your data summary | Live row counts per category |
| Get a copy | Settings → Export my data | A JSON file of everything, generated on request, including both kinds of check-in, your sharing choices, and the trend bands your manager was shown |
| Stop sharing with your manager | Settings, or Privacy & Sharing | Takes effect immediately; you drop out of the team view |
| Clear your data, keep the account | Settings → Clear your data | Assessments, check-ins of both kinds, your sharing choices, deals and articulation attempts erased, and you leave your team; your account stays so you can start again |
| Delete everything | Email [email protected] to close your account | All of the above, plus your account record, plus your sign-in account. Done within one month of the request, as the law requires |
Deletion is immediate and irreversible. Export first if you want a copy. If you are a manager, deleting your account also deletes your teams and unlinks the members: their own data is untouched, but their manager-sharing choice is reset to off.
For anything not covered by those controls, email [email protected]. We answer within one month.
You can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you gave us a chance to fix it first.
7. Team and manager visibility
Company figures (10 October 2026). If your team belongs to a company on Verso Enterprise, its Verso administrators see anonymised figures for its teams: how the teams' trends are moving, the mix of patterns, how quickly people bounce back after a lost deal, and win rates by confidence. Every figure needs five or more people who share with their manager behind it, and is withheld below that. Nobody is named, and no individual answer, score or check-in is shown. Your manager also sees, in groups of five or more, how many of the team checked in that week (as high, medium or low) and which coaching scenarios several of you opened, never who.
Research (10 October 2026). Separately, and only if you opt in under Settings, your answers can count in anonymised benchmarks Verso publishes or shows to companies, only in groups of ten or more people from at least three organisations. Opting out takes effect the next time a benchmark is worked out.
Manager sharing is off by default. Nothing reaches your manager unless you turn it on.
You are asked once, when you join a team, and both choices (whether to appear at all, and whether to appear by name) start switched off. Joining a team does not switch sharing on by itself. Being in a team and being visible within it are separate facts, and you can change the second at any time under Settings without leaving the team.
We ask at that one point rather than prompting you repeatedly. You can also see when your data was actually shown to your manager, under Settings.
When sharing is on, your manager sees your archetype and your wellbeing trend - overall, and for your energy, confidence and pressure - and your name only if you also allow that. They do not see:
- any score you entered, on any check-in: they see a band, never a number
- your individual assessment answers
- your articulation transcripts, scores, or that you practised at all
- your AI coaching conversations
If you have not allowed your name, your manager sees you as "Anonymised" and your name is never sent to them.
8. Security
We protect your data with industry-standard measures, including:
- Encryption in transit. Everything between your device and Verso travels over HTTPS.
- Verified sign-in. Every request is checked against your sign-in, and your password is never stored by us.
- Access to your own data only. The service only ever returns or changes data belonging to the account that is signed in, and account permissions cannot be raised from the app.
- No audio kept. Recordings from articulation practice are transcribed and never stored.
- Limited staff access. Access to production data is limited to the small number of Verso staff who run the service.
If a personal data breach is likely to put you at risk, we report it to the ICO within 72 hours of becoming aware of it and tell you without undue delay.
9. This website
versonow.com collects very little. It is a static site: no account system, no database, no contact form and no login.
- Email. If you email us, we hold the email and your address for as long as we need to answer you.
- Fonts. The site loads typefaces from a third-party font service, which receives your IP address and basic request information when a page loads. We do not receive that data.
- Hosting. Our hosting provider may log technical information such as IP address and user agent for security and reliability.
10. Changes
Material changes will be notified in the app and by email before they take effect. Version history: version 1, published 26 September 2026; versions 1.1 to 1.3, the same day - less personal and technical detail, and providers named by category; version 1.4, 27 September 2026 - optional reminder notifications; version 1.5, 15 October 2026 - the AI tools asking first, reporting an AI reply, your own insights, research and company figures, tool feedback, your weekly focus and Verso Duel.