Privacy policy

[Company being created], which publishes Verticale (see the legal notice), is responsible for the personal data described here. For any question or request about your data, write to hello@getverticale.com.

This policy covers getverticale.com, the Verticale app (app.getverticale.com and each vertical’s address, such as golf.getverticale.com) and VerticaleBot. Each website made with Verticale has its own privacy page for its visitors: the business that publishes it is responsible for that data, and Verticale handles it on its behalf.

This site sets no cookies unless you choose a language with its language switch: one cookie then remembers that choice, so the home page opens in your language. It counts its visits with Plausible Analytics, which we run ourselves: it stores no IP addresses or browser details, and recognises a visitor for one day only, so we see totals such as pages viewed and where visitors came from, never who they are. Like any website, our host receives your IP address and browser details with each request, to deliver the page and protect the service. If you write to us, we keep your email to answer it.

• Your email address, and your name if you add one in Account settings.
• Your password, stored only as a secure hash that can’t be read back.
• Your signed-in devices: each session keeps the IP address and the browser it started from, so you can see and sign out your devices, and to protect your account.
• Before you create an account, you can start as a visitor: we create an anonymous account with no email, which becomes yours when you sign up or sign in.
• When someone invites you to a workspace, your email address and the role they chose, until you accept or the invitation is cancelled.

To keep sign-in safe, we record the IP address of sign-in attempts for 24 hours to limit repeated tries. Before a free website is created, a Cloudflare Turnstile check confirms you’re a person: it runs in your browser and sends your IP address to Cloudflare for that check.

To build your website, we keep what you give us and what we read for you: the address of your current website, the text, PDFs and photos VerticaleBot reads there (up to 32 pages, 8 PDFs and 32 photos, following its robots.txt), the files you upload, your answers, your drafts, their history and the websites you publish. VerticaleBot only reads public pages and never signs in; see how it works.

These pages may name people, such as staff or contacts. We use what we read only to prepare that business’s website. It isn’t sold, used for advertising or used to train AI models.

Verticale writes your website with OpenAI’s models. For a draft or a change you ask for, our server sends OpenAI your answers, the text read from your website, a few of your photos and your request. We ask OpenAI not to store the results. OpenAI doesn’t train its models on data sent this way, and keeps it for at most 30 days to detect abuse, unless the law requires otherwise.

We keep the text of each request, without its photos, to look into problems. It is deleted with the website.

The Paid plan is sold through Stripe. Stripe collects your card details, which we never see, and your email, billing name, address and VAT number if you give one. We keep only your Stripe customer reference and each website’s plan.

We send emails only about your account and your websites: sign-in and confirmation links, invitations, plan and domain notices, and updates on ideas you shared. They go through Cloudflare’s email service. We don’t keep a copy, only a monthly count of emails sent. Idea updates have a link to stop them.

On the feedback board, your ideas, comments and votes are linked to your account and show only your first name. If you delete your account, your votes are removed and your ideas and comments stay without your name.

• getverticale.com uses one only if you choose a language with its switch: it holds that choice (English or French), nothing else, for a year. It only applies a preference you set, so it needs no consent.
• The app uses one cookie, to keep you signed in (a session cookie, secure and not readable by scripts, valid for 7 days after your last visit). It is strictly necessary, so it needs no consent.
• The app also keeps an unfinished website and images waiting to be uploaded in your browser’s storage, until they are saved or you sign out.
• Websites made with Verticale set no cookies. A visitor who turns their counting off is remembered in their own browser.

Published websites count their visitors without cookies. IP addresses and browser details are never stored: a visitor is recognised for one day only, through a code whose key is deleted at the end of that day. The details of each visit are deleted after 48 hours, and the daily totals the business sees are kept for 25 months. Visitors can turn counting off on each website’s privacy page, and a browser’s Global Privacy Control signal is respected.

These providers process data on our behalf, only for the purposes above:

Cloudflare, Inc.

Hosting, database and file storage, emails, the Turnstile check and security (United States)

OpenAI

Writing websites and changes with AI (United States)

Stripe

Payments, invoices and tax

Some Golf websites show Chronogolf’s booking widget to visitors outside Europe; Chronogolf then sets its own cookies, as those websites’ privacy pages explain. We don’t sell personal data or share it for advertising.

Cloudflare and OpenAI may process data in the United States. These transfers rely on the safeguards these providers offer under the GDPR, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

• To provide the service you asked for: your account, your websites, AI generation, payments and the emails that go with them (performing our contract with you).
• To keep the service secure and working: sign-in limits, bot checks, request logs and fixing problems (our legitimate interest).
• To keep invoices and accounting records (a legal obligation).

Your account

Until you delete it, in Account settings

Sign-in sessions

Until you sign out, or 7 days after your last visit

Sign-in attempts (IP address)

24 hours

Your websites and what was read for them

Until you delete the website or your account, then 30 days

Invoices

As long as French accounting law requires (10 years)

Deleting a website takes it offline at once. We keep it for 30 days, then permanently erase its files, drafts, history, readings, AI requests and visitor counts. What remains names no person: the website’s name and vertical, its dates, and what its AI requests cost us.

You can ask to see, correct, export or delete your data, or object to or limit how we use it. You can delete your account yourself in Account settings, with the websites only you manage. For anything else, including your billing details at Stripe, write to hello@getverticale.com. We answer within one month.

You can also complain to a data protection authority: the CNIL in France (cnil.fr), the Commission d’accès à l’information in Quebec, or the one where you live.

Every address is served over HTTPS. Passwords are stored as hashes, the sign-in cookie can’t be read by scripts, emailed links expire, and published websites live on a separate domain from your account. Only the people who need it to run the service can reach your data.

When this policy changes, we update this page and its date. If a change matters for your account, we tell you by email first.