Privacy Policy

Information You Provide Directly

We collect the following information directly from you when using our Sites and Services.

• Contact Information. We collect your contact information when you use, inquire about, or purchase our Services or engage in our Marketing Activities. This information may include your full name, email address, phone number, and location.

• Professional Information. We collect professional information about you, including your company name, company website, job title, and industry.

• Account Information. We collect information you provide to us to create, update, or administer your account on the Sites & Services, such as email, phone number, and username. We also provide you the option of submitting a profile picture and social media profiles. By voluntarily providing us with such account information, you represent that you are the owner of such information or have the requisite consent to provide it to us.

• Transactional Information. We collect payment and other transactional information related to our Services, such as hashed payment card values and billing address.

• Domain Registration Information. We collect registration data when you purchase a domain, such as domain name and registrant contact information. This data may be made publicly available per ICANN policies.

• User Content and File Information. We collect your website information that you upload, post, deliver, or otherwise provide to the Service, such as source code, text, photographs, document, or other files including videos or recordings (collectively, "Customer Content"), Git information, and other files that you provide us.

• AI Product Information. We collect information when you interact with certain features or Services related to our AI products, such as user chat prompts, uploaded images, design or text generations. Please see our AI Policy for more information on the development, deployment, and usage of our AI products and features.

• Marketing Information. When you engage and interact with our Marketing Activities or one of our sales or customer support representatives we collect information, including through form submissions, surveys, email communications, or phone calls to inquire about Vercel and our Services, such as the nature of your communication, contact preferences, and any information you choose to provide to us when completing any "free text" boxes.

• Image and Audio Information. We may collect your image or audio recordings. If you contact us by phone or video, we may record those calls. If you attend an event hosted or sponsored by Vercel, we may capture your image and/or voice in any video, photograph, or audio recording taken at the event. For more information, please see our Event Terms and Conditions.

• Troubleshooting and Support Information. We collect information about your account preferences or information you provide when you contact us for support, such as the solution you use, the content of chats and other communications with Vercel, and other details that help us provide support or comply with legal obligations. Support information includes content of a message or attachments that you send to us.

• Social Media Information. Our Sites and Services may use social media features, such as the "X" button and other sharing widgets. Vercel is not responsible for how these social media features collect, process, and disclose your information so we encourage you to review the social media platforms' privacy policies.

• Any Information You Voluntarily Provide to Us. For example, when you provide feedback on your experience with our Services or join a public discussion forum as part of our Marketing Activities.

Information We Collect from Third Parties

We receive information about Customers from third parties or Vercel partners that provide services or support our business operations. We limit our use of your information to the purposes described in this Notice. Information that we receive from third parties includes:

• Organization Information. We collect information from referral partners, such as company name, contact name, job title, and company address.
• Transaction Information. We collect information from our payment providers and partners, such as fraud metrics (i.e., financial risk scores) and details about failed payments.

Information We Collect from Customers

We receive information from our Customers about their authorized users (i.e., account holders) and their End Users when they interact with our Customers' websites, web applications, and APIs. Information that we receive from our Customers includes:

• Contact Information. We collect information when a Customer adds you to their account and/or designates you as an authorized user, such as name, email address, and username.
• Website Information. We collect information about traffic to and from Customers' websites, such as End User IP address, location information derived from IP address, and system configuration information.

Customers are responsible for the content transmitted across our network (e.g., images, written content, graphics, runtime logs, etc.), any personal information they process, and following acceptable behavior practices when using our Services. For more information about Vercel's shared responsibility model, please see our Documentation.

Information We Collect Automatically

When you use or interact with our Sites and Services, we automatically collect or receive certain information about you, your device, and your usage of our Site and Services. This information includes:

• Usage Information. We collect information about how you interact with our Sites, Marketing Activities, and Services, such as clicks, pages viewed, searches, web browser used, page response times, errors, date/timestamps associated with your usage, request information (e.g., speed, frequency, the site from which you linked to us ("referring page"), and the name of the website you choose to visit immediately after ours ("exit page"), the amount of time spent on our Sites, and information about other websites you have recently visited.
• Device Information. We collect information about how your devices interact with our Sites, Marketing Activities, and Services, such as browser type and settings, device details (e.g., device type, screen size, operating system, model, model number), language preferences, Internet Service Provider, mobile network, push notification tokens, and device event information (e.g., system activity and hardware settings, application version, and unique device identifiers, such as device ID).
• Service-Generated Information. We collect and use information generated from using our Services and Sites, such as log files, Internet Protocol (IP) address, location information derived from your IP address, proxy server, diagnostics, capacity and usage information to determine storage requirements, performance information from our servers, data settings, and system configurations, including your elected privacy and security settings.
• Location Information. We collect Customers' and End Users' city and country based on IP address. We do not identify precise location.
• Telemetry Information. We collect anonymized statistical and telemetry information as well as aggregated, de-identified information about how you use our Sites and Services.
• API Information. We collect functional data and customer-initiated events (i.e., authentication token, database URL, etc.) from Third-Party Services that connect or integrate with Vercel's Services.
• Cookies. We collect information from your browser by using cookies (which may use a cookie ID) and similar tracking technologies, depending on your settings or preferences in connection with our Sites, Marketing Activities, and Services. Where required by applicable law, we obtain your consent for the use of cookies. You may choose to delete or not accept our cookies as described in our Cookie Notice.

From time to time, except as restricted by applicable law or our data processing addendums with our customers, we may combine information that we collect as described above with information we obtain from different sources. For example, we may combine information entered through a Vercel sales submission with information we receive from a third-party sales intelligence platform to enhance our ability to market our Services to potential Customers. We may combine usage information with feedback to improve our Services or inform Customers about products that may be relevant to them.

United States

This section applies to individuals based in the U.S. and supplements our Privacy Notice with respect to the processing of your personal information in accordance with all applicable privacy and data protection laws and regulations and in each case, as amended, superseded, or replaced from time to time ("Data Privacy Laws").

Data Collection, Use, and Disclosure

We act as a service provider to businesses (or equivalent terms as defined by U.S. Data Privacy Laws) when we collect and process personal information on behalf of our Customers who use our Sites and Services.

We collect the following categories of information as classified by Data Privacy Laws:

• Personal Identifiers. We collect your email address, billing address, login credentials, and IP address.
• Personal Information. We collect your contact information and billing address.
• Professional Information. We collect your company name and industry.
• Characteristics of Protected Classifications. When you communicate with us using your social media account, you may share with us, or direct others to share with us, your age, gender, and other protected information that we do not request.
• Commercial Information. We collect information about the Sites and Services you request and records of Services purchased.
• Internet or Other Network Activity Information. We collect browsing and search history, information collected from cookies and similar technologies, and analytics data.
• Geolocation Information. We collect location information of your city and country derived from IP address.
• Other Inferences Drawn from Personal Information. We draw inferences from the categories of information collected to understand a consumer's preferences, characteristics, or predispositions.

Please see Information We Collect in our Notice to see the full description of the information that we collect.

We use your personal information to:

• Interact with you;
• Facilitate transactions;
• Provide our Sites and Services;
• Conduct internal research and development;
• Improve the quality and safety of our Sites and Services; and
• Detect security incidents and prevent fraud.

Please see How We Use Information in our Privacy Notice for a full description of how we use your personal information.

We disclose your personal information collected with third-party service providers, such as suppliers, vendors, business partners, advertising partners, resellers and consultants to operate our business and provide you with our Sites and Services as well as help us with our Marketing Activities. These third parties may use tracking technologies, such as cookies, to gather information about your activities on our Site to deliver our Marketing Activities to you.

Under certain U.S. laws (e.g., California Consumer Privacy Act), "sharing" may refer to the targeting of advertising to a consumer based on that consumer's personal information received from the consumer's activity across websites. We may "share" your information for these purposes to provide more relevant and tailored advertising to you regarding our Sites and Services. Similarly, while we are not in the business of selling your information, under such laws and the broad definition of "sale," we may "sell" your personal information relating to your browsing activities and our Marketing Activities.

Your Privacy Rights

U.S. Data Privacy Laws grant individuals certain rights in connection with the personal information that we collect, as described below.

• Right to Access. You have the right to request access and receive certain information that we have collected about you.

• Right to Know. You have the right to know the categories and specific pieces of your personal information we have collected in the previous 12 months.

• Right to Rectify or Update. You have the right to request correction of your personal information where it is inaccurate or incomplete. We generally recommend first making any changes in your Account Settings.

• Right to Delete or Limit. You have the right to request that we delete or limit the processing of your personal information.

• Right to Object. You have the right to object to our processing of your personal information as allowed by applicable laws.

• Right to Withdraw Consent. You have the right to withdraw consent where you have provided your consent for us to process your personal information.

• Right to Request Information. You have the right to request information about the collection, sale, and disclosure of your personal information from the previous 12 months.

• Right to Opt-out of the Sale of Information. You have the right to opt-out of the sale of personal information we have collected about you. Please complete this form to opt out.

• Right to Opt-out of the Sharing of Information for Cross-contextual Advertising Purposes. You may opt out of sharing data for cross-contextual advertising purposes by completing this form.

• Right to Non-Discrimination. You have the right to not receive discriminatory treatment for exercising any of your rights. We do not treat anyone differently for exercising any of the rights described above.

• Right to Data Portability. You have the right to request a copy of your personal information in a structured, commonly-used, machine-readable format to facilitate the transfer to another company when technically feasible.

Exercising Your Privacy Rights

You, or an authorized individual acting on your behalf, may submit a verifiable request relating to your personal information.

If you wish to exercise any of the above rights please complete:

• This form to opt out of the sale or sharing of information.
• This form for any other rights listed above that apply to your jurisdiction.

We may need you to provide certain identifying information related to your account (i.e., user ID) or your recent interactions with us to verify your identity or the identity of any individual for whom you are requesting information. We cannot respond to your request if we cannot verify your identity and/or authority to make the request on behalf of another and confirm that the personal information relates to you.

If you wish to use an authorized agent to submit a request to exercise your rights on your behalf, you must provide the authorized agent written permission signed by you. We may deny a request from an authorized agent if the agent cannot provide Vercel your signed permission demonstrating that the agent is authorized to act on your behalf.

We fulfill requests within 45 days of receiving your request. Please note that your request may be limited in certain cases, for example if complying with your request would conflict with:

• Federal, state, or local law;
• Regulatory inquiries;
• Subpoenas; or
• Exercising or defending legal claims.

EEA and UK

This section applies to individuals based in the EEA and UK and outlines the processing of your personal information under Data Privacy Laws, including the General Data Protection Regulation ("GDPR").

Vercel acts as a data controller for personal information that we collect about you while using our Sites, Services, or interacting with our Marketing Activities as described in this Notice. We act as a data processor on behalf of our Customers for the personal information contained in Customer Data.

This Notice does not apply to any personal information that we process as a data processor, as we only process that information on behalf of our Customers and in accordance with our agreements with them. A Customer that has entered into an agreement to use our Services (e.g., an individual or organization that uses our platform to deploy their websites) controls its instance of the Service and any associated data. If your personal information is contained in Customer Data, and you have any questions about the specific settings and privacy practices the relevant Customer has made to share your personal information with us, please contact the relevant Customer or review the Customer's privacy notice.

Data Collection, Use, and Disclosure

We collect and process personal information about you only where we have a legal basis for doing so under Data Privacy Laws. Our legal bases for processing personal information include:

• Your Consent. Where appropriate or legally required, we collect and use your personal information subject to your consent.
• Performance of Contract. We collect and use your personal information to contract with you or to perform a contract that you have with us.
• Legitimate Interests. We collect and use personal information about you for our legitimate interests to deliver content, optimize your experience, secure, and improve our Sites and Services.
• Compliance with Laws. We may also collect and use personal information about you:
  • As required by law, such as to comply with a subpoena or similar legal process;
  • When we believe in good faith that disclosure is necessary to protect our rights or property, protect your health and safety or the health and safety of others, investigate fraud, or respond to a government request; or
  • If we participate in a merger, acquisition, or sale of all or a portion of its assets.

Your Privacy Rights

You have certain rights related to the personal information that we process when you use our Sites and Services. Some of these rights only apply in certain circumstances, as set out below.

EEA and UK Data Privacy Laws provide individuals with the following rights:

• Right of Access. You have the right to request access and receive certain information about how we use your personal information and with whom we share it.

• Right to Rectification. You have the right to request correction of your personal information where it is inaccurate or incomplete. We generally recommend first making any changes in your Account Settings.

• Right to Data Portability. You have the right to request a copy of your personal information in a structured, machine-readable format and to ask us to share this information with another entity.

• Right to Erasure. You have the right to request deletion of your personal information:

  • Where you believe that it is no longer necessary for us to hold your personal information;
  • Where we are processing your personal information based on legitimate interests and you object to such processing and we cannot demonstrate an overriding legitimate ground for the processing;
  • Where you have provided your personal information to us with your consent and you wish to withdraw your consent and there is no other ground under which we can process your personal information; or
  • Where you believe your personal information is being unlawfully processed by us.

• Right to Restriction of Processing. You have the right to ask us to stop any active processing of your personal information:

  • Where you believe your personal information is inaccurate and while we verify accuracy;
  • Where we want to erase your personal information as the processing is unlawful, but you want us to continue to store it;
  • Where we no longer need your personal information for our processing, but you require us to retain the data for the establishment, exercise, or defense of legal claims; or
  • Where you have objected to us processing your personal information based on our legitimate interests and we are considering your objection.

• Right to Object. You can object to our processing of your personal information based on our legitimate interests. We will no longer process your personal information unless we can demonstrate an overriding legitimate purpose.

• Objection to Marketing, Automated Decision Making, and Profiling. You have the right to object to our processing of personal information for marketing communications, automated decision making and profiling. We will stop processing your personal information for that purpose.

• Right to Withdraw Consent. You have the right to withdraw consent where you have provided your consent for us to process your personal information.

Exercising your Rights

You, or an authorized individual acting on your behalf, may submit a verifiable request to exercise your rights relating to the personal information that we process about you.

To exercise the rights above, please complete this form.

Depending on the Sites and Services provided, End Users seeking to access, correct, amend, or delete personal information should directly contact the Customer, who has transferred such data to us for processing (data controller), directly to fulfill any requests. If our Customer receives a data subject request and sends the request to us, we will respond to the Customer's request within the agreed timeframe outlined in our Customer agreements. The Customer is responsible for responding to data subject requests as determined under the applicable local data protection laws.

We may need to provide certain identifying information, related to your account (i.e., user ID) or your recent interactions with us to verify your identity, or the identity of any data subject for whom you are requesting information. We cannot respond to your request if we cannot verify your identity and/or authority to make the request on behalf of another and confirm that the personal information relates to you.

We will fulfill your request within 30 days of receipt. Please note that the above rights may be limited in the following situations:

• Where fulfilling your request would adversely affect other individuals, company trade secrets or intellectual property;
• Where there are overriding public interest reasons; or
• Where we are required by law to retain your personal information.

If you have unresolved concerns, we encourage you to come to us in the first instance, but you are entitled to address any grievance directly to the relevant Supervisory Authority. In certain instances, if you are an End User, we encourage you to reach out to the relevant Customer first to address any complaints.

Previous Versions

The previous versions of our Privacy Policies are listed below:

• March 15, 2021
• April 22, 2024