01Who we are
Vespera is a platform of services that share one account: Mirror (portfolios and CVs), Souk (online shops), Anchor (tasks, projects, an assistant and email outreach) and Atlas (a study planner with an AI whiteboard, guides, study groups and projects). This policy explains what personal information those services handle, why, and the choices you have.
It applies to vspera.me and its subdomains, including mirror.vspera.me, souk.vspera.me, anchor.vspera.me and atlas.vspera.me, and to sites people publish with them. In this policy, “Vespera”, “we” and “us” mean the operator of the platform; “you” means anyone who uses it.
Questions or requests about your information can be sent to privacy@vspera.me.
02Information we collect
Information you give us
- Account details: your name, email address and password. Passwords are stored only as a secure hash, never in readable form.
- Profile and preferences: language, theme, the look you choose for Anchor, your email signature and similar settings.
- Content you create: portfolios, CVs, projects and images in Mirror; shops, products, pages and orders in Souk; tasks, projects, notes, chats with the assistant, email drafts and outreach lists in Anchor; plans, whiteboards, guides, groups and projects in Atlas.
- Files you upload, such as images, CVs and documents you attach to emails.
- Messages you send us, for example when you ask for support.
Information created as you use the services
- Assistant memory: short facts Anchor’s assistant keeps so it can help you over time, such as the name you like to be called. You can see and delete every item in Anchor’s settings.
- Security records: sign-ins, password changes, administrative actions and the IP address they came from, kept to protect accounts and investigate abuse.
- Subscription status: if paid plans are offered, which plan you are on. Any payment is arranged directly with Vespera and no card details are stored on the platform.
- Technical data: our servers keep standard logs (IP address, browser type, time and address requested) for security and troubleshooting.
- Email tracking records for the emails you send with Anchor, described in Email tracking in Anchor.
Information from Google
If you choose to sign in with Google or connect Gmail, we receive the information described in How we use Google user data.
Information about other people
Some features involve information about people other than you: customers who order from a Souk shop, recipients you import into an Anchor outreach list, and members of an Atlas study group. You are responsible for having the right to share their information with us. We use it only to provide the feature to you.
03How we use Google user data
Connecting Google is optional. Vespera asks Google for only two things: to sign you in, and to send the emails you approve from your own Gmail address. It asks for each when you choose that feature, and uses the data only to provide that feature to you.
| Permission | When it is requested | What it is used for |
|---|---|---|
Basic profileopenid email profile | When you choose “Continue with Google”. | To create your account or sign you in, using your name, email address and profile picture. |
Send emailgmail.send | When you choose “Connect Gmail” in Anchor’s settings. | To send, from your own Gmail address, the emails you write or review in Anchor, after you approve them: when you press Send, or at the time you chose if you scheduled them. |
What Vespera cannot do
The send permission lets Anchor send an email as you. It does not let Vespera read, list, search, change or delete anything in your mailbox, and Vespera does not do so. Replies and delivery failures reach your Gmail as usual; Anchor does not read them. Because Anchor has no access to your Gmail messages, no Gmail content can be sent to an AI model or used to train one. If we ever add a feature that reads your mailbox, it will stay off until this policy has been updated and you have given a separate consent.
What we store
- The access and refresh tokens Google issues, encrypted at rest, so Anchor can send when you ask it to.
- For emails you send through Anchor: the recipient, subject and text you wrote, the date it was sent, and the Gmail message and conversation identifiers.
- For a scheduled email: the same, held until the time you chose.
- The open and click records described in Email tracking in Anchor, if tracking is on for that email.
What we never do
- We do not sell Google user data or use it for advertising.
- We do not use Google user data to develop, improve or train generalized artificial intelligence or machine-learning models.
- We do not send Google user data to any AI model. The AI features in Anchor work from the instructions, drafts and details that you provide (see AI features); they never receive Gmail content.
- No person at Vespera reads your Gmail data, except with your explicit permission for specific messages (for example, to help with a support request), when necessary for security purposes such as investigating abuse, or to comply with applicable law.
- We do not transfer Google user data to anyone else, except as necessary to provide the features described here, for security, to comply with the law, or as part of a merger or acquisition with adequate notice to you.
Limited Use disclosure
Vespera’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting
You can disconnect Google at any time in Anchor › Settings › Gmail › Disconnect Google. Disconnecting revokes Vespera’s access at Google and deletes the stored tokens. You can also remove access from your Google Account at myaccount.google.com/permissions. The records of emails you sent are deleted with your account, or earlier on request.
04Email tracking in Anchor
Emails sent through Anchor can carry tracking, which is on by default and which the sender can switch off for a batch or an email. With tracking on, the email may contain a tiny invisible image and links that pass briefly through anchor.vspera.me before opening their destination. This lets the sender see whether the email was opened and which links were clicked.
- For each open or click we record: the time, which link was clicked (its web address, up to 500 characters), and a general description of the mail app or device (for example “Gmail” or “iPhone”). Requests that look like automatic link scanners are kept but marked, and left out of the counts.
- Tracking records do not include the recipient’s IP address or the raw browser string, and no cookies are set. Like every request, the request itself passes through the standard server logs described above.
- The records are visible only to the sender, appear in Anchor and, if the sender linked Telegram, in Telegram notices (see section 7), and are deleted with the sender’s account.
- Recipients can prevent open tracking by not loading images in their email app. Open information is an estimate: some mail apps load images automatically.
If you received an email sent through Anchor and want the related tracking records removed, contact privacy@vspera.me with the address it was sent to.
05How we use information
- To provide the services: host your portfolio and shop, run Anchor’s tasks and assistant, send the emails you approve, and keep your one account working across all of them.
- To keep them secure: protect accounts, prevent spam and abuse, and investigate incidents.
- To communicate with you: account verification, password resets, security notices and important changes to the services, and, if you linked Telegram, the notices you chose to receive.
- To support you when you contact us.
- To keep them working well: diagnose errors and understand capacity, using technical logs.
- To meet legal obligations.
We process your information because it is necessary to provide the services you asked for, because we have a legitimate interest in keeping them secure and working, because you gave your consent (for example when you connect Gmail, which you can withdraw at any time), or because the law requires it.
06AI features
Several features use AI: writing letters and portfolio text, translating content, describing images you attach, and the assistants in Anchor and Atlas. When you use one, the following is sent to an AI model to produce the result:
- the instruction or question you typed, and the text you wrote or selected for that request (for example a draft, a portfolio section or a note);
- the details the feature needs from your own workspace, such as the recipient’s name and organisation and the portfolio information you provide for a letter, or the tasks and notes the assistant needs to answer you;
- images you attach to a request, for features that describe pictures.
Never sent: the content of your Gmail messages (Vespera has no access to them), your password, or your stored keys and tokens.
Depending on your settings, the AI model is:
- the model Vespera provides, run by an AI provider on our behalf;
- an AI provider you connected yourself with your own key, whose own terms then also apply; or
- Puter, if you choose it, which runs in your browser under your own Puter account and its terms, including its free daily usage allowance.
We send only what the request needs, and we do not use your content to train AI models. AI output can be wrong: review it before you publish or send it.
08Storage and security
Vespera’s servers and databases are hosted in the European Union (Paris, France). Some providers listed above may process data in other countries. Where they do, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses.
Connections to Vespera are encrypted with TLS. Sensitive credentials such as Google tokens and AI keys are encrypted at rest. Access to production systems is restricted. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities of a breach where the law requires.
Who can see your content
Chats with the assistant and other content you create are private. Vespera staff do not browse them. A named administrator may open a specific item only when you ask for help, or when needed to investigate abuse, a security incident or a legal request. Every such access requires a written reason and is recorded in our audit log.
09How long we keep information
- Account and content: for as long as your account exists. When you delete content, it is removed from the service.
- After you delete your account: your personal information is removed from our active systems within 30 days, except where we must keep something to meet a legal obligation, resolve a dispute or prevent abuse.
- Google tokens: deleted as soon as you disconnect Google or delete your account.
- Records of emails you sent, and email tracking records: kept while your account exists, and deleted with it, or earlier on request.
- Security records and server logs: kept only as long as they are needed to protect accounts and investigate problems.
10Your rights and choices
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy in a portable format, object to or restrict certain processing, and withdraw consent you gave.
- Download your data: in Mirror, open your profile and its Security tab, and choose Download my data. You get a copy of your profile, portfolios, sections, projects and CVs as one JSON file. For anything not included, such as your Anchor letters or Souk orders, email us.
- Delete your account: on the same Security tab, choose Delete my account. It permanently deletes your account and everything in it across Mirror, Souk, Anchor and Atlas: portfolios, shops, letters, workspaces and uploaded files.
- Disconnect Google: in Anchor › Settings › Gmail, or at myaccount.google.com/permissions.
- You can also edit your profile and content, delete items and clear Anchor’s memory yourself.
- For anything else, email privacy@vspera.me from the address on your account. We reply within 30 days.
- If you are not satisfied with our answer, you can complain to your local data protection authority.
12Children
Vespera is not intended for children under 16, and we do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.
13Changes to this policy
We may update this policy as the services change. The effective date at the top always shows the latest version. If a change is significant, we will tell you in the services or by email before it takes effect.
Version 1.1 (6 October 2026) describes the current Google permissions precisely: sign-in and sending only.
14Contact
For questions about this policy or your information, or to exercise your rights: