At a glance
We collect only what we need to run Verbios. We do not sell your personal information, we do not run advertising trackers, and we never use the content you create on the platform to train AI models we sell to anyone else. You can export or delete your data at any time from your account settings, or by emailing privacy@verbios.net.
The rest of this page is the long version, written so you can actually read it. If something is unclear, write to us and we'll answer.
1. Who we are
Verbios is a product of SuiteTech, LLC, a Florida limited liability company. In this Privacy Policy, "Verbios", "we", "us", and "our" refer to SuiteTech, LLC acting in its capacity as the operator of the verbios.net marketing site and the app.verbios.net application (together, the "Service"). We are the data controller for personal information we collect directly from you about your use of the Service.
Where a teacher, school, or institution uses Verbios to instruct their own students, that teacher or school is the data controller of their students' personal information and we act as their data processor for that information. See section 10 for the split.
2. Information we collect
a. Information you give us
- Account information. Your email address, display name, optional profile photo, role (student, teacher, or assistant teacher), preferred language, and authentication credentials. If you sign in with Google or another supported identity provider, we receive the basic profile data that provider sends us (typically email, name, and avatar URL) — never your password.
- Content you create. Courses, modules, lessons, blocks (text, images, audio, vocabulary lists, quizzes, etc.), course-listing copy, marketplace metadata, live-lesson whiteboards, in-app chat messages, and any files you upload (images, audio recordings, course imports).
- Learning activity. If you are a student, your answers to lesson blocks, vocabulary you save, lesson progress, attendance in live lessons, and feedback your teacher records about your performance.
- Bookings and schedule. Lesson bookings, recurring schedules, cancellation history, and (if you connect Google Calendar) the calendar events Verbios creates on your behalf and the busy-time windows we read to avoid double-booking. We never read your non-Verbios calendar contents.
- Communications. Messages you exchange with other users through Verbios, support tickets and emails you send us, and replies to invitations.
- Billing details. Plan, billing status, renewal dates, invoice history, marketplace earnings, and payouts. Card numbers, bank details, and tax IDs are handled by our payment processor (Paddle); we receive only non-sensitive billing metadata (the last four digits of a card, country, transaction outcome, etc.).
b. Information collected automatically
- Device and connection data. IP address, browser type and version, operating system, device type, referring URL, language preference, and time-zone.
- Usage data. Pages visited, features used, actions taken inside lessons, error reports, and approximate session timing. We use this to fix bugs, plan features, and detect abuse.
- Cookies and local storage. See section 13 for what we store on your device and why.
c. Information from third parties
- Identity providers when you sign in with Google (or another OAuth provider): the basic profile fields the provider shares.
- Payment processor (Paddle): subscription and transaction status, country/region for tax, fraud signals.
- Calendar provider (Google Calendar) if you opt in: free/busy times on the calendars you've authorised, plus the events we created on your behalf so we can update or delete them.
3. How we use information
We use the information described above to:
- Provide, maintain, and improve the Service.
- Authenticate you, keep your account secure, and prevent abuse, fraud, and policy violations.
- Process payments, calculate platform fees, pay out earnings, and meet tax and accounting obligations.
- Operate the marketplace and lesson-booking flows, including matching students with teachers and showing public teacher profiles when a teacher has published one.
- Run live lessons, including the shared whiteboard, the saved-words tab, per-student answer views, and chat.
- Send service messages (invitations, lesson reminders, booking confirmations, billing receipts, security alerts, policy updates). These are required to operate your account and you cannot opt out of them while your account is active.
- Send optional product updates and newsletters where you have asked to receive them — you can unsubscribe at any time from the footer of those emails.
- Analyse usage in aggregate to improve the Service and prioritise the roadmap.
- Comply with applicable laws, respond to lawful requests, and enforce our Terms of Service and other agreements.
4. Legal bases (EEA / UK)
If you are in the European Economic Area, the United Kingdom, or another jurisdiction whose data-protection law requires a legal basis for processing, we rely on the following bases:
- Performance of a contract — to provide the Service to you under our Terms of Service (account creation, lesson delivery, marketplace, payments, support).
- Legitimate interests — to keep the Service secure, detect fraud and abuse, debug and improve the product, communicate about the Service, defend ourselves from legal claims, and run our business. We balance these interests against your rights; if you want details on the balancing test for a specific processing activity, ask us.
- Consent — for optional cookies/analytics (where consent is required), optional marketing emails, and optional integrations like Google Calendar. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
- Legal obligation — to keep tax, accounting, and similar records, and to respond to lawful government or court requests.
6. Subprocessors
We use the following third-party subprocessors to operate the Service. Each is bound by a written data-processing agreement. We update this list when subprocessors change.
| Provider | Purpose | Primary processing region |
|---|---|---|
| Supabase, Inc. | Database, authentication, file storage, edge functions | United States |
| Netlify, Inc. | Static hosting and CDN for verbios.net and app.verbios.net | United States / global CDN |
| Paddle.com Market Limited | Payment processing, billing, Merchant of Record (tax) | United Kingdom / European Union |
| Resend (Drape Inc.) | Transactional email (invitations, receipts, reminders) | United States |
| Anthropic, PBC | AI block generation when a teacher uses the in-app "Generate blocks" feature | United States |
| Google LLC | Sign-in with Google (optional); Google Calendar two-way sync (optional) | United States / global |
| Pexels GmbH | Stock-image search results when a user runs an in-editor image search | European Union |
If you connect a third-party AI client to your Verbios account through our MCP server (for example, Claude, ChatGPT, or Cursor), the operator of that client is an independent controller of the data you choose to send through it. We have no contractual control over how that client processes data outside the Service, and you should review its own privacy notice before connecting it.
7. International data transfers
Verbios is operated using infrastructure located primarily in the United States and the European Union. If you access the Service from a country other than the country where our servers are located, your information may be transferred to, stored in, and processed in countries other than your own.
Where personal information is transferred out of the EEA, the United Kingdom, or Switzerland to a country that has not been recognised as providing an adequate level of data protection, we rely on Standard Contractual Clauses approved by the European Commission (and the UK International Data Transfer Addendum where applicable), together with supplementary measures appropriate to the transfer. You may request a copy of the relevant transfer mechanism by emailing privacy@verbios.net.
8. Data retention
We retain personal information for as long as your account is active and for the period afterward needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:
- Active accounts: for as long as the account exists.
- Closed accounts: we delete or anonymise account, learning, and content data within 90 days of account closure, except where a longer retention period is required by law (for example, invoices and tax records, which we keep for up to 10 years depending on jurisdiction).
- Backups: personal information may persist in encrypted backups for up to 35 days after deletion from live systems, after which it is overwritten on the regular backup-rotation schedule.
- Marketplace transactions: records of payments, payouts, refunds, and chargebacks are kept for as long as required by tax, anti-money-laundering, and accounting laws.
- Server logs: connection and security logs are kept for up to 30 days.
9. Your rights and choices
Depending on where you live, you may have the following rights in respect of your personal information:
- Access — request a copy of the personal information we hold about you.
- Rectification — ask us to correct inaccurate or incomplete information.
- Erasure / deletion — ask us to delete your personal information. You can delete your account directly from your account settings, or write to us.
- Restriction — ask us to limit how we process your information in certain circumstances.
- Objection — object to processing based on our legitimate interests.
- Portability — receive your information in a structured, machine-readable format, and ask us to transmit it to another controller where technically feasible.
- Withdraw consent — where we rely on consent, withdraw it at any time without affecting the lawfulness of processing before withdrawal.
- Lodge a complaint — with the data protection authority in your country (in the UK, the ICO; in Ireland, the DPC; in your US state, the office of your attorney general or other competent authority).
- Non-discrimination — we will not discriminate against you for exercising any of these rights.
To exercise any of these rights, email privacy@verbios.net. We may need to verify your identity before we can act on a request, and we will respond within the time required by applicable law (typically within 30 days). You can authorise an agent to make a request on your behalf, subject to verifying their authority.
10. Teachers, students, and schools
Verbios is built for teachers to deliver instruction to students. When a teacher (or school) invites students into a class, sets coursework, records grades, or otherwise uses the Service to instruct those students, the teacher or school is the data controller for their students' personal information and learning records, and Verbios acts as their data processor for that information. The teacher or school decides what content to set, what feedback to leave, and how long to retain student records (subject to the platform-wide retention limits in section 8).
If you are a student whose teacher set up your account or invited you, please direct requests about your learning records to your teacher in the first instance. We will support your teacher in responding to your request, and we will act directly on requests about the underlying account (email address, login, etc.) where we are the controller.
Teachers and schools are responsible for getting any consents their local law requires before adding students (including parental consent for minors — see section 11) and for using student information consistently with the agreements they have with their students and, where applicable, parents or guardians.
11. Children's privacy
The Service is not directed to children under the age of 13 (or, in the EEA and UK, under the local digital-consent age, which is 16 unless the local member state has set a lower age). We do not knowingly create accounts for children under that age without verifiable parental or guardian consent obtained by the teacher or school that invited the child.
If you are a parent or guardian and you believe a child under the applicable age has provided personal information to us without your consent, please contact privacy@verbios.net and we will take reasonable steps to delete that information.
12. Security
We use administrative, technical, and organisational measures designed to protect personal information against loss, theft, and unauthorised access, use, disclosure, alteration, or destruction. These include encryption in transit (TLS), encryption at rest for stored data and backups, row-level authorisation policies on our database, scoped access tokens for third-party AI integrations, payment-data isolation through our PCI-compliant payment processor, and regular review of access by our staff and subprocessors.
No method of transmission over the Internet or method of electronic storage is 100% secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for the security of the AI clients and other third-party tools you connect to your account.
14. AI features and your content
Verbios ships AI features in two distinct shapes, and the data flow is different for each.
- In-app AI ("Generate blocks"). When you click an in-app AI button, we send the prompt and the context you provided (for example, the lesson topic and any source material you pasted in) to our AI provider (currently Anthropic) so it can return draft content. We do not use this content to train any model and we do not authorise Anthropic to use it to train its general models. The draft returns to your course library and is yours.
- Your own AI client connected via MCP. Verbios runs an open MCP (Model Context Protocol) server. When you connect a third-party AI client (Claude, ChatGPT, Cursor, etc.) using a personal access token or OAuth, that client can read, create, and edit the content you own within the limits of the token. The third-party client operates under its own terms and privacy notice, and is an independent controller of any data you choose to send to it. You can revoke its access at any time from your account settings.
We do not use your courses, lessons, student answers, messages, or other private content to train AI models we sell or license to anyone else.
15. Marketing communications
If you join the waitlist on the marketing site or otherwise tell us you want product updates, we may send you occasional emails about new features, beta openings, and other Verbios news. Every marketing email has a one-click unsubscribe link in the footer. Unsubscribing from marketing does not stop service messages (lesson reminders, billing receipts, security alerts, etc.), which are necessary to operate your account.
16. Regional disclosures
a. California residents
In the previous 12 months we have collected the following categories of personal information described in the CCPA/CPRA: identifiers (name, email, account ID); customer records (billing and account information); commercial information (subscription history, marketplace purchases); internet or similar activity (usage and device data); geolocation data (general, from IP address); audio/visual information (audio and images you upload as part of lessons); professional information (where teachers add it to their public profile); and inferences drawn from the foregoing. We use this information for the purposes described in section 3, and we share it only with the categories of recipients listed in section 5.
We do not "sell" personal information and we do not "share" it for cross-context behavioural advertising under CCPA/CPRA. California residents have the rights to know, delete, correct, and limit, and the right not to be discriminated against for exercising those rights. To exercise a right, email privacy@verbios.net.
b. EEA, UK, and Switzerland
Our representative for inquiries from data subjects in these regions is reachable at privacy@verbios.net. You have the right to lodge a complaint with your local supervisory authority. Our legal bases for processing are described in section 4 and our international-transfer mechanisms are described in section 7.
c. Other US states
Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other US states with comprehensive consumer-privacy laws have rights similar to those described in section 9. We respond to verifiable requests in accordance with applicable state law.
17. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will, where required by law, notify you in advance — for example, by posting a banner in the product, by emailing the address associated with your account, or both. The "Effective" date at the top of the page tells you when the current version took effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy where permitted by applicable law.
18. Contact us
For any privacy-related question, request, or complaint, email privacy@verbios.net. For general support, email support@verbios.net. We try to respond within five business days, and within the time required by law for formal data-subject requests.
Postal mail can be sent to: SuiteTech, LLC, Attn: Privacy, c/o the registered agent of SuiteTech, LLC on file with the Florida Department of State, Division of Corporations.