Last updated: September 12, 2026
Effective Date: September 12, 2026
Versia provides a hosted experimentation service that lets customers test versions of their product and automatically route traffic to the versions that perform best. This policy explains what personal data we collect, why, and what rights you have.
For any privacy question or request, contact us at [email protected].
Account data. When you sign up we collect your email address and name. If you sign in with Google or GitHub, we receive your email address and basic profile information from that provider. If you use a password, we store it in hashed form only.
Billing data. Payments are handled by our payment processor. We receive your subscription status and invoicing details; we never see or store your full card number.
Service data. When you use Versia we store the configuration you create (flags, versions, targeting rules) and aggregate statistics about how each version performs: counts of evaluations and successes per version over time. The user identifiers and attributes your systems attach to individual requests are not stored on our servers. They are processed transiently to make and learn from each decision, and between requests they travel inside an encrypted token that your own systems hold and send back.
Website data. We use a small number of cookies, described in our Cookie Policy. Optional analytics cookies are set only with your consent. If you subscribe to our newsletter, we store your email address for that purpose.
Support data. If you email us, we keep the correspondence so we can help you.
The identifiers and attributes you send with evaluation and reward requests (for example a user ID, plan, or device type) belong to you. For that data we act as a processor on your behalf, and we process it only to provide the service. We do not keep raw identifiers at rest: individual request data is handled transiently as described above, what persists is aggregate statistics, and the learning models we maintain for your flags retain only irreversibly hashed features rather than raw values. You remain responsible for having a lawful basis to send this data to us. Do not send us special categories of personal data.
Your data is stored and processed in the European Union. If a service provider we use processes limited data outside the EU, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
We share data only with service providers who help us run Versia, such as cloud hosting, email delivery, and payment processing, and only to the extent needed for them to provide their service to us. We may disclose data if required by law. We never sell or rent your personal data.
Account and service data is kept while your account is active. When you close your account, we delete or anonymize your personal data within 90 days, except where we must keep records longer for legal reasons (for example invoices). Newsletter data is kept until you unsubscribe.
Under the GDPR and similar laws you can ask us to access, correct, delete, or export your personal data, to restrict or object to processing, and to withdraw consent. Write to [email protected] and we will respond within one month. You can also lodge a complaint with your local data protection authority.
We protect data with encryption in transit, access controls, and the principle of least access. No online service can guarantee absolute security, but we take reasonable and appropriate measures for the data we hold.
Versia is a business tool and is not directed at children under 16. We do not knowingly collect data from them.
If we make material changes we will update this page and, where appropriate, notify you by email. The effective date at the top always reflects the current version.