Privacy Policy

When you use Vesper, we collect your email address (for account creation), the characters you create or interact with, and the conversations you have with those characters. We also collect basic technical information like IP address, browser type, and session duration for security and product analytics purposes. If you sign in with Google, we receive your name, email address and Google account ID. We get no other access to your Google account. When you create an account we ask for your date of birth, to confirm you are 18 or over, and keep it with a record of when you agreed to our Terms.

We use your data to operate the service, debug issues, improve the product, and communicate with you about your account. We may review conversations to investigate technical problems, understand how characters perform, and improve the underlying architecture. When we do this, it is done by the founder or a small internal team. Other than the AI model providers described below, we do not share the contents of your conversations with third parties. We email you about your account and, occasionally, about a story you left unfinished. Every such email has an opt-out.

We do not train AI models on your conversations. We do not sell your data. We do not share your conversations with advertisers, partners, or other users. Your characters and conversations remain yours.

We retain your data while your account is active. You can delete your account at any time. When you delete your account, your conversations and personal data are removed from our active systems within 30 days. Some data may remain in backups for up to 90 days before final deletion.

Vesper uses large language model providers to generate character responses: currently Google (Gemini), Anthropic (Claude) and DeepSeek. Your messages in a conversation are sent to whichever provider is answering it. You can see and change the model in the chat header; original Vesper characters use DeepSeek unless you choose otherwise. DeepSeek is a company based in China, and messages sent to it may be processed and stored there. Each provider handles this data under its own terms and privacy policy, and we cannot make promises on their behalf.

We use Vercel (hosting and cookieless analytics), DigitalOcean (the server that stores your data), Resend (email delivery) and Google (sign-in). They process data only to provide those services.

Passwords are hashed with bcrypt and never stored in readable form. Sign-in sessions use signed tokens that expire after 30 days. Your connection to heyvesper.io is encrypted (HTTPS). Your data is stored on a server we control, hosted by DigitalOcean in the United States. Email addresses and conversations are stored unencrypted on that server, and only the founder has access to it. We do not process payments, so we hold no card data.

Characters who are minors in their source material refuse sexual content, and attempts to direct it at them are logged.

If we confirm a breach affecting your data, we will email affected users promptly, say what was exposed, and what we have done about it.

Vesper is intended for users 18 and over. We do not knowingly collect information from anyone under 18. If the date of birth given for an account is under 18, the account is stopped and can't be used for stories.

We may update this policy as the product evolves. Significant changes will be communicated to active users via email.

Questions about this policy can be sent to nadir@heyvesper.io.