Legal

Privacy Notice

Effective: 28 August 2026

VerWater is part of the AI Rights Stack ecosystem. This notice explains what personal data VerWater handles when you browse the site, sign in with AIVerID, save engineering work or contact us. It does not cover AIVerID's independent processing on its own service.

1. Data controller and contact

VerWater is responsible for the processing described here. Privacy questions and verified requests can be sent to aivisibilityrights@gmail.com.

2. Personal data we process

  • AIVerID account data: membership identifier, display name, email, profile image and verification level when supplied by AIVerID.
  • Saved work: project names, descriptions, calculator inputs, results and timestamps that you choose to save.
  • Technical and security data: request metadata, error details, browser URL, timestamps and security events needed to operate and protect the service.
  • Communications: email address and message content when you contact us.

Guest calculations normally remain in your browser storage. Do not enter unnecessary personal, confidential or regulated information into project names, descriptions or engineering inputs.

3. Why we use the data

  • Authenticate users and maintain secure sessions.
  • Save, load, export and delete engineering projects requested by the user.
  • Protect accounts, investigate failures and prevent abuse.
  • Respond to support, privacy and service communications.
  • Meet applicable legal obligations and establish or defend legal claims.

Depending on the activity, processing is necessary to provide the requested service, comply with law, or pursue legitimate interests in service security and reliability. Where consent is legally required, it will be requested separately and can be withdrawn without affecting earlier lawful processing.

4. Service providers and international processing

Data is disclosed only as needed to operate VerWater:

  • AIVerID provides identity and authentication.
  • Vercel hosts and delivers the web application and operational logs.
  • Supabase hosts account profile caches and cloud-saved projects.
  • Email and infrastructure providers process communications and technical data when required.

Providers may process data outside your country. We use contractual, access-control and security measures appropriate to the service and disclose data to public authorities only when legally required. VerWater does not sell personal data or use third-party advertising trackers.

5. Retention and deletion

  • Cloud projects remain until you delete them or submit a verified account-data deletion request.
  • The profile cache remains while the account is used and is removed with a verified account-data deletion request, unless retention is legally required.
  • Security and operational records are retained only as long as reasonably necessary to investigate incidents, operate the service and meet legal obligations.
  • Browser-local projects remain under your browser's control until cleared by you or the browser.

6. Your choices and rights

Subject to applicable law, you may request access, a copy, correction, deletion, restriction, objection or portability of personal data, and may withdraw consent where processing relies on it. We may need to verify the request through your AIVerID session or other appropriate evidence.

Individual cloud projects can be deleted inside the owning calculator. For an account-level export or deletion, contact the address above from the email associated with AIVerID. You may also lodge a complaint with the competent data-protection authority, including Thailand's Personal Data Protection Committee.

7. Security and automated decisions

VerWater uses encrypted transport, signed or encrypted session controls, scoped project access, database privilege restrictions and automated security checks. No system can guarantee absolute security. VerWater does not make decisions producing legal or similarly significant effects about individuals.

8. Updates

Material changes will be published on this page with a new effective date. If a change requires consent or direct notice under applicable law, VerWater will provide it before the change takes effect.

Official reference: Thailand's Office of the Personal Data Protection Committee publishes privacy-notice and data-subject-rights guidance through its official website. See also the VerWater Terms of Service.