Privacy notice
Version 1.3 · Last updated 26 September 2026 · Applies to the Verso app (app.versonow.com) and the Verso website (versonow.com).
1. Who is responsible for your data
Verso EM Ltd, a company registered in England and Wales (company number 17240387), is the controller for the personal data described in this notice.
Contact for privacy matters, including our data protection lead: [email protected] ICO registration: ZC241635
Where your employer has bought Verso for a team, see Section 7.
2. What we collect
From you, to create an account
Handled by our authentication provider. Verso never sees or stores your password.
| Data | Notes |
|---|---|
| Name | First and last, as you enter them |
| Email address | Also the login identifier |
| Credentials | Password hash or social login, held by our authentication provider only |
| Session tokens | Short-lived, used to prove who you are on each request |
A copy of your name, email and account type is kept in our own database so the application can work without calling our authentication provider on every request.
From how you use Verso
Stored in our database, always keyed to your account.
| What | Contains | Sensitivity |
|---|---|---|
| Account record | Email, first and last name, account type, team, your two sharing choices | Ordinary personal data |
| Assessment results | Archetype, secondary archetype, confidence score, dimension scores, sustainability score, when you finished and how long it took | Behavioural profile |
| Assessment answers | Every individual answer you gave, as a number per question | Behavioural profile |
| Daily check-ins | An overall score, and your energy and confidence, each out of 5, and the date. No free-text note. | Wellbeing data |
| Weekly deal check-ins | For each deal you chose to focus on: an overall score, and your energy, confidence and pressure, each out of 5; the working phase that deal was in at the time; and the week | Wellbeing data |
| Derived trend bands | A band name per phase per week, for each of overall, energy, confidence and pressure — "stable", "worth watching", "sustained decline" — held separately from your scores, and containing none | Wellbeing data |
| Sharing choice per team | Whether you share nothing, share anonymously, or share under your name, for each team you are in | Ordinary personal data |
| Deal records | A label you choose for the deal, its stage and its outcome | A deal name may identify a third party. See below |
| Articulation attempts | A written transcript of what you said, plus speaking rate, filler-word count, hedging count, longest sentence and your score | Voice-derived content |
| Team record | Team name, join code, which account is the manager | Ordinary personal data |
Two things worth calling out plainly:
- Deal names are free text and we do not inspect them. If you type a client's or contact's name, you have entered someone else's personal data into Verso. Use a reference or a company name rather than an individual's name.
- Articulation stores the transcript, never the audio. Your recording is sent once for transcription and is not written to disk by us. The text is kept so you can see what was measured, and is erased after 90 days while your scores remain.
From your device
| What | Why | Where it lives |
|---|---|---|
verso_role cookie, plus session and local storage entries | Carries the account type you picked from the marketing page through sign-up, and caches your latest results so the app is fast | Your browser. Cleared by signing out or clearing site data |
| Onboarding-seen flag | Stops the intro carousel repeating | Your browser |
If we add analytics or any other non-essential cookies, we will update this notice first and ask for your consent before setting them.
What we deliberately do not collect
No heart rate, sleep, step count or wearable data. No location. No contacts, calendar or CRM access unless you explicitly connect one.
3. Why we use it, and our lawful basis
| Purpose | Data used | Lawful basis |
|---|---|---|
| Create and run your account, sign you in | Identity data | Contract |
| Score your assessment and show your archetype and profile | Assessment answers and results | Contract |
| Track your trend over time and produce the wellbeing map | Check-ins, assessments | Contract |
| Show how your state relates to deal stages | Deals, check-ins | Contract |
| Give AI coaching replies, reframes and articulation feedback | Your message or transcript, plus your archetype and the matching guidance from Verso's coaching library | Contract |
| Share your archetype and trend with your manager | Assessment result, check-in trend, name if you allow it | Consent (Section 7) |
| Keep the service secure and prevent abuse | Request metadata, account identifiers | Legitimate interests |
| Meet legal and accounting obligations | Account and billing records | Legal obligation |
Profiling. Assigning you an archetype from your answers is profiling. It is not a solely automated decision with legal or similarly significant effect: it produces guidance for you, nothing is decided about your employment, pay or access to anything, and a manager sees a wellbeing trend rather than a recommendation to act.
4. Who else processes it
| Processor | What they do | Where | Transfer mechanism |
|---|---|---|---|
| Authentication provider | Sign-in, credential storage, session management | United States | Standard contractual clauses under the provider's data processing agreement |
| Cloud hosting provider | Hosting, our database, and the AI models that process chat messages and audio transcription | Primarily Western Europe, on a global network | Standard contractual clauses under the provider's data processing agreement |
The AI models process your chat messages and audio to generate a response.
- Verso does not store your conversations with the AI Companion, Reframe or Mock Practice, and does not use them - or anything else you enter - to train an AI model. Articulation transcripts are the one thing kept, for 90 days (Section 5), so you can see what was measured.
- Our AI provider does not use them to train models either. Under its terms, what is sent to and returned by the models is not used to train any model or to improve its own or anyone else's services, and is not stored unless we choose to store it, which we do not.
We do not sell personal data and we do not share it with advertisers.
5. How long we keep it, and where
Enforced by a scheduled job that runs every day. These are not aspirations; expiry happens without anyone asking for it.
| Data | Stored in | Retention | Why that period |
|---|---|---|---|
| Name, email, credentials, sessions | Our authentication provider (United States) | Life of the account | Needed to sign you in |
| Account record | Our database | Life of the account | Needed to run the account |
| Assessment results | Our database | 24 months | The product compares a retest against a baseline at 6 months, and a year-on-year view needs two annual cycles |
| Raw assessment answers | Our database | 12 months | Only needed to rescore a result if the scoring model changes. The result outlives the answers |
| Daily check-ins | Our database | 24 months | Supports the trend, the retest comparison and two seasonal cycles |
| Weekly deal check-ins | Our database | 24 months | Same window, same reason |
| Derived trend bands | Our database | 24 months, and never longer than the scores behind them | Removed with the scores they come from |
| Deal records | Our database | 24 months | Matches the check-in window they are correlated against |
| Articulation transcripts | Our database | 90 days, then erased in place | The words stop being useful once you have reviewed the attempt |
| Articulation scores and metrics | Our database | 24 months | Progress over time |
| Team record | Our database | Life of the team | Deleted with the manager's account |
| Audio recordings | Nowhere — held only for the length of the transcription request | Not stored | Nothing to retain |
| Chat messages and transcripts in transit to the model | Our AI provider | Transient | Processed, not retained by us |
| Usage counters for the AI features | Our database | 2 days | Fair use of the AI features |
| Record of manager access to your data | Our database | 24 months | So you can see when your data was shown to your manager |
| Cookie, cached results, onboarding flag | Your browser | Session, or until you clear site data | Functional only |
| Backups | Our hosting provider | Rolled off within 35 days of deletion | Operational recovery window |
Articulation transcripts are erased after 90 days while your scores remain.
Inactive accounts. An account with no activity for 24 months is reviewed and removed.
Usage counters and the record of manager access are kept for the periods above even if you clear your data, because they protect the service and other people: the access record covers the colleagues who appeared alongside you. When your account is closed, your part of the access record is removed. We record that your manager viewed the team, not which manager.
If you delete something yourself it goes immediately. The periods above are an outer limit, not a hold.
6. Your rights
Under UK GDPR you can ask for access, correction, deletion, restriction, portability, and to object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time.
Most of this is built into the product, under Settings:
| You want to | Do this | What happens |
|---|---|---|
| See what is held | Settings → your data summary | Live row counts per category |
| Get a copy | Settings → Export my data | A JSON file of everything, generated on request — including both kinds of check-in, your sharing choices, and the trend bands your manager was shown |
| Stop sharing with your manager | Settings, or Privacy & Sharing | Takes effect immediately; you drop out of the team view |
| Clear your data, keep the account | Settings → Clear your data | Assessments, check-ins of both kinds, your sharing choices, deals and articulation attempts erased, and you leave your team; your account stays so you can start again |
| Delete everything | Email [email protected] to close your account | All of the above, plus your account record, plus your sign-in account. Done within one month of the request, as the law requires |
Deletion is immediate and irreversible. Export first if you want a copy. If you are a manager, deleting your account also deletes your teams and unlinks the members — their own data is untouched, but their manager-sharing choice is reset to off.
For anything not covered by those controls, email [email protected]. We answer within one month.
You can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you gave us a chance to fix it first.
7. Team and manager visibility
Manager sharing is off by default. Nothing reaches your manager unless you turn it on.
You are asked once, when you join a team, and both choices — whether to appear at all, and whether to appear by name — start switched off. Joining a team does not switch sharing on by itself. Being in a team and being visible within it are separate facts, and you can change the second at any time under Settings without leaving the team.
We ask at that one point rather than prompting you repeatedly. You can also see when your data was actually shown to your manager, under Settings.
When sharing is on, your manager sees your archetype and your wellbeing trend - overall, and for your energy, confidence and pressure - and your name only if you also allow that. They do not see:
- any score you entered, on any check-in — they see a band, never a number
- your individual assessment answers
- your articulation transcripts, scores, or that you practised at all
- your AI coaching conversations
If you have not allowed your name, your manager sees you as "Anonymised" and your name is never sent to them.
8. Security
We protect your data with industry-standard measures, including:
- Encryption in transit. Everything between your device and Verso travels over HTTPS.
- Verified sign-in. Every request is checked against your sign-in, and your password is never stored by us.
- Access to your own data only. The service only ever returns or changes data belonging to the account that is signed in, and account permissions cannot be raised from the app.
- No audio kept. Recordings from articulation practice are transcribed and never stored.
- Limited staff access. Access to production data is limited to the small number of Verso staff who run the service.
If a personal data breach is likely to put you at risk, we report it to the ICO within 72 hours of becoming aware of it and tell you without undue delay.
9. This website
versonow.com collects very little. It is a static site: no account system, no database, no contact form and no login.
- Email. If you email us, we hold the email and your address for as long as we need to answer you.
- Fonts. The site loads typefaces from a third-party font service, which receives your IP address and basic request information when a page loads. We do not receive that data.
- Hosting. Our hosting provider may log technical information such as IP address and user agent for security and reliability.
10. Changes
Material changes will be notified in the app and by email before they take effect. Version history: version 1, published 26 September 2026; versions 1.1 to 1.3, the same day - less personal and technical detail, and providers named by category.