Verstia

Privacy Policy

Last updated: 2026-07-13

This is a legal draft, not a finished policy. It describes what this product actually does today, sourced from its own code, but it has not been reviewed by a qualified privacy lawyer. Have this reviewed before relying on it as your operative privacy policy.

Who we are

Verstia (“we”, “us”) provides document templates, calculators, and related information for the UK, US, and Canada, at verstia.com. Verstia is a product operated by Manolyasoft, a sole trader operated by N. Yılmaz, based in Konya, Türkiye.

Data controller: Manolyasoft (N. Yılmaz), Yazır Mah., Öztekinler Sok. 38/47, Selçuklu/Konya, Türkiye. Contact: manolyasoft@gmail.com.

The operator is based in Türkiye, outside the UK and EU. Personal data from UK and EU users is processed by the operator on that basis, using the safeguards and service providers described below. This does not by itself change which data protection law applies to you as a user — see “Your rights” below.

What data we collect, and why

We collect only what the product needs to function:

  • Account data — your email address and password, used to create and secure your account. Authentication and password storage are handled by our authentication provider, Supabase (Supabase, Inc.) — we never see or store your raw password ourselves.
  • Document data — the details you fill into a template (e.g. names, dates, employment terms). This is stored so you can return to a document, and is used only to fill and generate your own documents. It is not used to train any AI model and is not sold or shared with third parties.
  • Payment data — if you subscribe to a paid plan, payment is processed entirely by our payment provider, Lemon Squeezy (a Merchant of Record). We do not receive or store your card details; we receive only confirmation of your subscription status.
  • Usage data — standard technical logs (e.g. IP address, browser type) collected by our hosting provider for security and reliability, not for tracking or advertising.

Who processes your data

  • Supabase, Inc. — authentication and database hosting. See Supabase's privacy policy.
  • Lemon Squeezy, Inc. — payment processing (acting as Merchant of Record for subscriptions). See Lemon Squeezy's privacy policy.
  • OpenAI, L.L.C. — AI processing for the Risk Radar feature (clause explanations). Only the clause text you ask about is sent, not your full document or account details. See OpenAI's privacy policy.

Your rights (UK GDPR)

If you are in the UK or EU, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us — see the Contact page.

Data retention

We retain your account and document data for as long as your account is active. If you delete your account, we delete your data within a reasonable period, except where we are required to retain records (for example, payment records for tax purposes).

Cookies

We use only the cookies strictly necessary to keep you signed in (set by our authentication provider, Supabase). We do not use advertising or third-party tracking cookies.

Contact

Questions about this policy or your data can be sent to manolyasoft@gmail.com.