Vereon AI
Client LoginFree Automation Review

Privacy Policy

Last updated: 6 September 2026

This Privacy Policy explains how Vereon AI ("Vereon", "we", "us" or "our") handles personal information when you use our website, contact us, request a demo, use an account, communicate through a Vereon-powered workflow, or interact with a business that uses Vereon to automate customer communications and administration.

1. Who is responsible for your information

For information submitted directly to Vereon through our website, account area, contact forms or sales process, Vereon generally acts as the data controller. Where a client business uses Vereon to process its own customer enquiries, WhatsApp conversations, documents or workflow data, that client business will usually be the controller and Vereon will process the information on its behalf as a service provider or processor.

If you are a customer of a business using Vereon, you may also wish to read that business's own privacy notice because it decides why your information is being processed.

2. Information we may collect

Depending on how you use the service, we may process:

  • name, email address, telephone number, business name and job title;
  • account, profile and business configuration information;
  • website enquiries, form submissions, support requests and demo bookings;
  • WhatsApp phone numbers, profile names, message content, message identifiers and conversation history;
  • documents uploaded for automation, such as invoices, quotes, receipts and job sheets, together with information extracted from those documents;
  • lead scores, AI-generated summaries, draft responses, workflow decisions and review status;
  • technical and security information such as timestamps, request data, browser/device information and service logs where needed to operate and protect the platform.

Please avoid sending special-category, highly sensitive or unnecessary personal information unless it is genuinely required for the service you are using.

3. WhatsApp and messaging data

When WhatsApp is connected to a Vereon workflow, messages are sent and received through the WhatsApp Business Platform operated by Meta. We may receive the sender's WhatsApp identifier or phone number, profile name, message content, message type, message ID and delivery-related information.

Vereon may store the conversation, analyse the latest message together with relevant conversation history, generate a suggested or automatic response, assess workflow factors such as urgency or qualification, and record the resulting action. Client businesses can configure controls that determine when a response may be sent automatically and when human review is required.

WhatsApp and Meta process information under their own terms and privacy policies. Using WhatsApp may therefore involve information being processed by Meta as an independent provider of the messaging platform.

4. AI processing

Vereon uses artificial intelligence to support tasks such as understanding enquiries, drafting replies, summarising conversations, extracting structured information from documents and routing work. Relevant content may be sent to our AI service providers for this purpose.

AI output can be imperfect. Our workflows are designed to allow business rules, confidence thresholds, safeguards and human review where appropriate. Vereon is not intended to make solely automated decisions that produce legal or similarly significant effects on individuals.

5. How we use personal information

We may use personal information to:

  • provide, operate and secure Vereon services;
  • respond to enquiries and provide requested information;
  • run AI-powered email, WhatsApp, lead, document and workflow automations;
  • maintain accounts, preferences and business automation settings;
  • store conversation and workflow history so automations have the context they need;
  • detect errors, abuse, duplicate webhook events and security issues;
  • improve reliability, support customers and develop our services;
  • meet legal, regulatory, tax, accounting or dispute-resolution obligations where applicable.

6. Lawful bases

Where UK data-protection law applies, we rely on one or more lawful bases depending on the activity. These may include performing a contract or taking steps at your request before entering a contract, our legitimate interests in operating and improving a secure business service, consent where required, and compliance with legal obligations.

7. Service providers and sharing

We do not sell personal information. To operate Vereon, information may be processed by providers that supply infrastructure or functionality to us, including:

  • Meta / WhatsApp for WhatsApp Business messaging;
  • OpenAI for AI analysis and generation used by configured workflows;
  • Supabase for database and file-storage infrastructure;
  • Vercel for website and application hosting;
  • Resend where email delivery is used;
  • other professional, security or infrastructure providers where reasonably necessary to run the service.

We may also disclose information where required by law, to protect rights or security, in connection with a business restructuring, or where a client has instructed us to process information on its behalf.

8. International transfers

Some service providers may process information outside the United Kingdom. Where required, we use appropriate contractual or legal safeguards for international transfers and assess the providers used to operate the service.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide the relevant service, maintain appropriate business and security records, resolve disputes and comply with legal obligations. Retention may also depend on the settings and instructions of the client business responsible for a particular workflow.

10. Security

We use technical and organisational measures intended to protect information, including access controls, server-side credentials, private storage where appropriate, webhook verification, duplicate-event protection and restricted administrative access. No online service can guarantee absolute security.

11. Your rights

Where applicable, you may have rights to request access to personal information, correction, deletion, restriction, portability, or to object to certain processing. You may also have the right to withdraw consent where processing is based on consent.

If your information was provided to a client business using Vereon, contacting that business directly may be the quickest way to exercise your rights because it will usually be the controller of that information.

12. Cookies

For information about cookies and similar technologies used on our website, see our Cookie Policy.

13. Contact and complaints

For privacy questions or requests relating directly to Vereon, use our contact page. Please provide enough information for us to understand and verify your request without sending unnecessary sensitive data.

If UK data-protection law applies and you are unhappy with how your information has been handled, you may also have the right to complain to the Information Commissioner's Office (ICO).

14. Changes to this policy

We may update this policy as Vereon's services, integrations or legal obligations change. The latest version will be published on this page with an updated date.