Privacy policy

Plain-english summary

We built Vesk to help people handle customer-drafted NDAs with more confidence. Because Vesk involves uploading contracts and sharing negotiation materials through secure deal rooms, privacy matters to us.

In short:

• We collect the information needed to operate Vesk, communicate with you, and deliver the preview, secure redline package, and deal room.
• We do not use your uploaded contracts, generated documents, negotiation briefs, or deal room content to train public or third-party foundation models. We use OpenAI and Anthropic only as service providers to help operate the Vesk service on our behalf.
• We keep retention limited — generally no more than 30 days for uploaded contract materials — and support deletion requests.
• We respond to verifiable privacy requests within 45 days, and we will notify you if we need more time.
• In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

Scope

This Privacy Policy explains how Vesk, Inc. (“Vesk,” “we,” “us,” or “our”) collects, uses, shares, and retains information when you use our website, join our waitlist, contact us, upload documents, use the Vesk service, or access a Vesk deal room — including as a deal room recipient who is not a registered Vesk user.

This Privacy Policy applies to information collected through the Vesk website and service. It does not apply to third-party websites, services, or applications that we do not control, even if they are linked from Vesk.

Vesk is currently offered to customers in the United States.

Definitions

As used in this Privacy Policy:

Personal information means information that identifies, relates to, describes, or could reasonably be associated with a particular individual, as defined under applicable law. It does not include de-identified or aggregate information.

Service means the Vesk website, platform, and related features, including the preview, redline tool, deal rooms, and any associated content or communications.

Deal room recipient means any individual who accesses a Vesk deal room or receives shared deal room materials but is not a registered Vesk user.

Information we collect

Information you provide directly

We may collect information you provide directly to us, including:

• your name and email address
• waitlist information or signup details
• messages you send us by email or through the site
• information you provide when requesting support, deletion, or other assistance
• answers you provide during the Vesk workflow, such as your role in the NDA and your negotiation goal

Documents and deal room content

If you use Vesk, we may collect and process:

• uploaded NDAs and related files
• preview results and related workflow data
• redlined and clean document versions generated through the service
• negotiation briefs and related output
• deal room content and related sharing activity
• later-round documents that you or a counterparty upload or rerun through Vesk

Usage and technical information

We may automatically collect certain technical and usage information, such as:

• IP address
• browser type and device information
• pages viewed and features used
• referral information
• approximate location derived from IP address
• log data, cookies, and similar technologies

Information collected from deal room recipients

If you receive access to a Vesk deal room shared by another user, we may collect limited technical information in connection with that access, including your IP address, browser type, and deal room activity such as viewing and downloads. We collect this information to operate and secure the deal room experience.

Deal room recipients may contact us at hello@vesk.ai to request information about or deletion of data associated with their access.

How we use information

We use information we collect to:

• operate, maintain, and improve the Vesk website and service
• provide previews, redline packages, deal rooms, and related functionality
• communicate with you about the waitlist, product access, service updates, and support requests
• authenticate users and protect deal rooms and other service features
• monitor usage, troubleshoot issues, detect abuse, and maintain security
• comply with legal obligations and enforce our terms and policies
• analyze product usage and performance at a high level

We may also use information in aggregated or de-identified form. When we do, we apply reasonable technical and organizational measures so that the information cannot reasonably be re-identified and does not reveal the content of uploaded contracts or deal room materials.

How we use AI and your documents

Vesk uses software and AI-assisted systems to help review, redline, and explain customer-drafted NDAs.

We do not use your uploaded contracts, generated documents, negotiation briefs, or deal room content to train public or third-party foundation models.

We use OpenAI and Anthropic to process prompts and outputs on Vesk’s behalf, and Amazon Web Services (AWS) for hosting, database, and related infrastructure. These providers act as service providers or processors in support of the Vesk service.

We do not permit OpenAI or Anthropic to use your uploaded contracts, generated documents, negotiation briefs, or deal room content to train public or third-party foundation models.

We may use service data, product analytics, support interactions, and other information to maintain, improve, and secure Vesk. We may also review specific content when needed to provide support, investigate abuse, address security issues, or comply with law.

Secure deal rooms and sharing with counterparties

Vesk may provide a secure deal room that allows a user to review and share a redline package in connection with an NDA negotiation.

If you choose to share a deal room or related materials with a counterparty, the information available through that shared experience may be visible to the people you authorize or to anyone who gains access through the shared link or credentials. You should share deal room access only with individuals you intend to receive it.

Once you choose to share deal room access, Vesk cannot control how recipients further use, forward, or store information they receive outside the service.

You are responsible for deciding whether to share deal room access or export documents for delivery outside the platform.

We may collect information related to deal room access and activity — such as link usage, viewing activity, and downloads — to operate the service, secure the experience, and troubleshoot issues.

How we share information

Service providers and subprocessors

We may share information with vendors and service providers that help us operate Vesk. These currently include Amazon Web Services (AWS) for hosting, database, and related infrastructure, and OpenAI and Anthropic for AI-assisted processing. We may also use providers for analytics, email delivery, authentication, and security. These providers are authorized to use your information only as necessary to provide services to Vesk and are bound by appropriate data protection obligations.

Authorized sharing through the Service

If you choose to share a deal room, redline package, or related materials with a counterparty or another person, we will share the relevant information as directed by you through the service.

Legal, compliance, and protection purposes

We may disclose information if we believe doing so is reasonably necessary to:

• comply with applicable law, regulation, legal process, or government request
• enforce our terms or other agreements
• protect the rights, property, or safety of Vesk, our users, or others
• detect, investigate, or prevent fraud, abuse, or security issues

Business transfers

We may share or transfer information in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction. If such a transaction involves a material change to how your personal information is handled, we will provide notice by updating this Privacy Policy and, where appropriate, notifying registered users before the new policy takes effect.

We do not sell your personal information, including uploaded contracts or deal room content. We do not share personal information for cross-context behavioral advertising.

Retention and deletion

We keep information for as long as reasonably necessary to operate the service, comply with legal obligations, resolve disputes, enforce agreements, and protect Vesk and its users.

For uploaded contracts and related service content, our current practice is limited retention. Unless a longer retention period is required for legal, security, or operational reasons, we aim to retain customer-uploaded contract materials for no longer than 30 days after creation or upload.

We support deletion requests. If you want us to delete your information or uploaded materials, contact us at hello@vesk.ai from the email address associated with your submission or account. Deal room recipients may also submit deletion requests using the contact information below.

Please note that we may retain certain information where required or permitted by law, or where necessary for security, fraud prevention, backup integrity, dispute resolution, or enforcement purposes.

Security and data breach notification

We use reasonable administrative, technical, and organizational measures designed to protect information processed through Vesk, including access controls, encryption in transit, and vendor security requirements.

No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, including Washington’s data breach notification statute and any other applicable state breach notification law. We will provide notice without unreasonable delay and in accordance with applicable legal requirements.

You are also responsible for protecting your own devices, email account, and any links or credentials you use to access Vesk or share deal room content.

Your privacy choices and rights

Depending on where you live and subject to applicable law, you may have rights relating to your personal information, such as the right to request access, correction, deletion, or information about how your personal information is used.

California residents

If and to the extent Vesk is subject to the California Consumer Privacy Act (“CCPA”), California residents may have certain rights under California law, including the right to request access to, deletion of, or correction of certain personal information, and the right to receive information about how personal information is collected, used, and disclosed.

Regardless of whether the CCPA applies to Vesk at a given time, you may still contact us with privacy requests, and we may honor them where appropriate and feasible.

How to submit a privacy request

To make a privacy request, contact us at hello@vesk.ai and include enough information for us to understand and verify your request.

We will respond to verifiable requests within 45 days. If we need additional time, we will notify you within the initial 45-day period and may extend our response period by up to an additional 45 days where permitted by applicable law.

We may need to verify your identity before fulfilling a request, and we may deny or limit a request where permitted by applicable law.

Cookies and analytics

We may use cookies, log files, pixels, and similar technologies to operate the website and service, understand usage, maintain security, and improve performance.

Some of these technologies are necessary for the site or service to function properly. Others help us understand how people use Vesk.

You can usually control cookies through your browser settings. Blocking certain cookies may affect how parts of the website or service work.

Some browsers offer a “Do Not Track” (“DNT”) setting. At this time, Vesk does not respond to browser DNT signals. We also do not knowingly permit third parties to conduct cross-site tracking on the Vesk service for cross-context behavioral advertising purposes.

Children’s privacy

Vesk is a professional service directed to adults and is not intended for use by individuals under the age of 18.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact us at hello@vesk.ai and we will investigate and take appropriate steps.

If you believe a minor under 18 has provided personal information to us in a way that is inconsistent with this policy, you may also contact us at hello@vesk.ai.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and may provide additional notice where appropriate, such as by emailing registered users or displaying a notice on our website.

Your continued use of Vesk after an updated Privacy Policy becomes effective will be subject to the revised policy.

Contact us

If you have questions about this Privacy Policy or want to make a privacy-related request, contact us at:

hello@vesk.ai

Vesk, Inc. Startup Hall 1100 NE Campus Parkway Seattle, WA 98105