Privacy
This is a working draft, not finished legal advice. It describes accurately what the software does today. Before Verbal takes payment it needs a review by someone qualified, and the two gaps marked below need filling in.
The short version
Verbal stores the writing you create and the material you give it about your brand, so it can write in your voice and so you can get your work back later. We do not sell it. We do not use it to train a general purpose model. You can ask for a copy or ask us to delete it.
Who we are
Verbal is operated by Stoodioos. For anything about your data, email sam@stoodioos.com.
To be completed before launch: registered company name, company number, registered address, and the UK or EU representative if one is required.
What we store
- Your account. Your name and email address, from the Google account you sign in with. We never see or hold your password.
- Your brands. What you tell us about how your brand sounds, the phrases you approve or ban, and the examples you add.
- Your writing. Every draft, including earlier versions, so nothing you write is lost when you change it.
- Pages you point us at. When you give us a URL during setup, we fetch that page and keep the text we take from it.
- What you did. Which drafts you generated, refined, approved or rewrote. This is what lets Verbal learn your voice, and it is the only reason it is kept.
- Usage counts. How many times you used each feature, so daily limits and billing can be worked out.
What we do not store
- Card or bank details. If and when payments are added, a payment provider handles them and we never see the numbers.
- Your Google password, or any password.
- Anything about you from anywhere other than what you give us.
Why we are allowed to hold it
We hold your account and content because we need it to provide the service you asked for, which is a contract between us. We hold usage counts because we have a legitimate interest in keeping the service running and preventing abuse.
Who else touches it
Verbal is built on services that process data on our behalf. They may not use it for their own purposes.
- Hosting and application delivery. Runs the website and the servers behind it.
- Database and sign-in. Stores your account and your content.
- AI infrastructure. Receives your brief and the brand context needed to write a draft, and returns the writing. It does not use your content to train its models.
To be completed before launch: each of these must be named, with the country its servers sit in. A policy that describes subprocessors without naming them does not meet UK or EU requirements.
Where it lives
Data may be processed outside the UK and the European Economic Area. Where it is, the transfer is covered by the standard contractual terms those providers offer.
How long we keep it
Your content stays until you delete it or ask us to close your account. Usage records are kept for as long as they are needed for billing and for spotting abuse. If you ask us to delete your account, we remove your content within 30 days.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it. Email sam@stoodioos.com and we will respond within 30 days. There is no charge.
If you think we have handled your data badly and we have not put it right, you can complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
Verbal sets cookies only to keep you signed in and to complete the sign-in handshake securely. There is no advertising, no analytics and no tracking across other websites, which is why there is no consent banner: there is nothing to consent to beyond what the service needs to work.
Children
Verbal is a tool for businesses and is not intended for anyone under 18.
Changes
If this policy changes in a way that matters, we will say so on this page and update the date at the top. If the change is significant and we hold your email, we will email you.