Privacy Notice

At Vercel, we respect customers' need for privacy. We offer our Sites and Services (defined below) to customers and users either directly or via a reseller. Where we refer to our "Customers" in this Privacy Notice, we refer to customers that have entered into an agreement with us or our resellers to use the Services (each, an "Agreement"). Each Customer's respective website users or applicable visitors are referred to as their "End Users."

By using or accessing our Sites and Services in any manner, you accept the practices and policies outlined in this Privacy Notice and you acknowledge that we may process and share your information.

About Vercel Products and Services

Vercel is a frontend cloud for deploying and scaling frontend applications. Our Developer Experience Platform and Managed Infrastructure services provide Customers the ability to build applications and create, share and collaborate on deployments. Customers can preview changes, make Customer content immediately available through our global Edge Network, and test from the perspective of its End Users around the world.

Vercel offers tools, workflows, and infrastructure products that Customers need to build and deploy their websites and applications. We may provide relevant privacy-specific information about our products and services in our Documentation.

Applicability

This Privacy Notice ("Notice") explains Vercel's practices regarding the collection, use, disclosure, and processing of your personal information; the rights and choices you may have with respect to such information; how you may contact us; and how we protect your information when you:

1. Visit Vercel's websites, such as https://vercel.com, https://nextjs.org, https://turbo.build, and other Vercel affiliated websites, such as blogs, event registrations, community discussions, forums, and social media platforms (collectively our "Sites");

2. Access or use products or services made available by Vercel or its affiliates (collectively, the "Services") as a Customer or authorized user; and

3. Interact with us in any way, including registering for, attending, or otherwise partaking in our events, accelerators, learning portals, or webinars (collectively, "Marketing Activities").

Under this Notice, Vercel acts as a data controller or "business" for the personal information we process. This means we decide how to collect and process personal information.

This Privacy Notice does not apply to:

• When we process information at the direction of our Customer as their data processor subject to our Data Processing Addendum. In those circumstances, the Customer operates as the data controller and their privacy notice will govern how personal information is processed. Customers are solely responsible for ensuring compliance with all applicable laws and regulations with respect to their End Users, including notifying their End Users of their personal information collection, use, and disclosure under their own terms of service and privacy policies. If your personal information is contained in Customer Content (defined below) and you have any questions about the specific settings and privacy practices the relevant Customer has made to share your personal information with us, please contact the relevant Customer directly or review their privacy notice.
• Third-party products, services, businesses, or any software accessible via the Service or that integrates with the Service. If you have any questions about the specific settings and privacy practices of such third parties, please contact the relevant third-party product, service, or business to review its privacy notice.
• Job applicants. To learn more about our privacy practices related to personal information collected and used for recruiting purposes, please see our Job Applicant Privacy Notice.

Information We Collect

The information that we collect depends on your interactions with us, the choices that you make, the products and features you use, your location, and applicable laws. We may collect or receive information directly from you, such as your name and email address when you or your organization sign up for our Services or Marketing Activities. In other cases, we receive information through your use of our Services, such as IP address and telemetry data.

How We Use Information

We use your information as described in this Notice to provide our Sites and Services. For example, we may use your information in the following ways:

• Service Operation. To operate and administer our Sites and provide, operate, deliver, monitor, and maintain our Services, including troubleshooting, system maintenance and upgrades.

• Product Development and Improvement. To improve functionality, quality, user experience, and develop new features, including our AI Products and Services. Customers can learn about how to control the use of their information for AI product training here.

• Support. To provide Customer assistance and technical support, such as responding to your requests and inquiries. Vercel personnel are prohibited from viewing Customer Content, except when instructed by you, as necessary to resolve Customer support issues, or for security, Services integrity, or legal purposes.

• Communication. To send you marketing and administrative messages, such as technical or legal notices, invoices, product updates, surveys, security alerts, marketing promotions, newsletters, training, event reminders, and/or provide other news or information about Vercel and/or our partners. Please see Your Privacy Choices and Rights to learn how to manage your communication preferences.

• Account Administration. To create and manage your account, complete transactions, and send billing, tax and other administrative information, such as purchase confirmations, receipts, and invoices.

• Marketing Activities. To develop and improve our Marketing Activities, such as to review and analyze trends, usage, and interactions with our Services, Site, and to personalize and improve our Marketing Activities.

• Advertising. We may use your information to provide you with content and/or features that match your interests and preferences. We advertise our Services through third parties, and may use cookies and other tracking technologies to support targeted advertising and serve relevant ads.

• Security. To detect, investigate, prevent, protect against and respond to potential threats, fraudulent transactions, unauthorized access, and other malicious, deceptive, fraudulent, or illegal activity.

• Legal, Safety, and Compliance. To comply with applicable laws and regulations or a court or legal order, and to review compliance with applicable terms.

• For Any Other Purposes with Your Consent.

How We Retain Your Information

We retain your information for the minimum necessary period to fulfill our legal and contractual obligations, develop our Sites and Services, resolve disputes, enforce our rights, for legitimate business purposes, such as tax or accounting requirements, as described in this Notice and as recommended by industry standards.

When we no longer have an ongoing legitimate business need to process your information, we will either delete or anonymize it. When we choose to anonymize information, we strive to make sure that the information cannot be linked back to you or any specific user. If deletion is not possible (e.g., backups), we will store it securely.

How We Disclose Information

We disclose information as necessary to provide the Sites and Services, as required by law, or as part of our business practices as follows. We only disclose information on a need-to-know basis where appropriate safeguards and contractual arrangements are in place and as described below.

• Corporate Affiliates. We may share or transfer information to any person or entity which directly or indirectly controls, is controlled by or is under common control with Vercel, whether by ownership or otherwise ("Corporate Affiliate"). Any information relating to you that we provide to our Corporate Affiliates will be treated by those Corporate Affiliates in accordance with the terms of this Notice.

• New Owner and Other Corporate Transactions. We may disclose or transfer your information to relevant third parties in the event of, or as part of the due diligence or during negotiations of, any proposed or actual reorganization, sale, merger, consolidation, joint venture, assignment, transfer, or other disposition of all or part of our business, assets, or stock (including in connection with any bankruptcy or similar proceeding). Personal information may be part of the transferred assets. You may be notified thereafter of any such change in ownership or control through email or other means as applicable.

• Vercel Customers. We disclose information to our Customers when using our Services, in accordance with our contractual obligations. For example, if you join a Vercel Customer team within our Services, certain information about you including your name, contact information, and profile image may become accessible to that Customer and other individuals with whom the Customer shares access. If you are a Customer managing authorized users within our Services, such as an account administrator or team owner, we may share authorized user information for the purpose of facilitating Services-related requests.

• Vercel Partners and Event Sponsors. We engage with several partners, such as third-party advertising networks, integration service partners, event sponsors, and resellers. We may share information with them to provide and support our Services, and to conduct our Advertising and Marketing Activities.

• Third-Party Service Providers. We disclose information with third-party service providers that require access to information to support our operations and delivery of our Sites and Services. The third parties that Vercel discloses your information with may include:

  • Professional services advisors to protect and manage our business interests.
  • Cloud providers to provide data hosting, data storage and content delivery network services.
  • Billing and payment providers to authorize, record, settle and clear transactions.
  • Customer support providers to respond and resolve Customer inquiries and support requests.
  • AI providers in connection with providing you Vercel's AI Products and Services.
  • Security, abuse, and fraud service providers to monitor and protect the Services and Customers from illegal, deceptive, or malicious activity.
  • Domain registrars, registries and other domain name service providers for the purposes of domain registration and listing via the WHOIS protocol.
  • Corporate and information technology services to facilitate business operations and communications.
  • Analytics companies to review and report on our Advertising and Marketing Activities and Services.
  • Any other suppliers, sub-contractors, partners, vendors, and other service providers acting on our behalf.

These service providers are authorized to use your information only as necessary to provide Services to Vercel. We may use and disclose aggregate information that does not identify or otherwise relate to an individual for any purpose unless we are prohibited from doing so under applicable law.

• Legal or Public Authorities. We only disclose your information when:

  • It is reasonably necessary to comply with any applicable law or regulation;
  • We are required by law to comply or respond to any court order, legal process, government and/or regulatory request;
  • Necessary to enforce our agreements and this Notice;
  • Necessary to protect the security or integrity of our Sites and Services;
  • Necessary to protect against harm to the rights, property, or safety of Vercel, its agents and affiliates, you, or the public as required or permitted by law; and
  • Necessary to respond to an emergency which we believe in good faith requires us to disclose information to assist in preventing the death or serious bodily injury of any person.

• Any Other Party with Your Consent. We may disclose your information with other third parties with your consent.

Note that we may also disclose information that we have de-identified. For Hobby and Pro plan users, subject to your data preferences in your team settings, we may disclose de-identified information (including de-identified AI Product Information) to AI business partners for their product improvement and development, including training and improving AI and machine learning models, with the ultimate purpose of improving the Vercel Services you use. You can learn more here.

How We Secure Your Information

We use reasonable and appropriate administrative, technical, and physical safeguards designed to protect the information that we have about you from unauthorized or unlawful access, use, modification, destruction, loss, alteration and/or disclosure.

We require third parties acting on our behalf or with whom we disclose your information to provide security measures in accordance with industry standards and in compliance with contractual obligations, their privacy and security obligations, and any other appropriate confidentiality and security measures. We are not responsible for the privacy and security practices of such third parties outside of the information we receive from or disclose to them.

Notwithstanding our security safeguards, it is impossible to guarantee absolute security in all situations. For information on our shared responsibility model with Customers, please see our Documentation.

If you have any questions about the security of our Sites and Services, please contact us as provided in Contact Us.

Third-Party Services

Our Sites and Services may contain links to or integrations with other websites or applications not operated or controlled by Vercel ("Third-Party Services"). Certain Third-Party Services used to navigate to and from our Sites and Services have separate user terms and privacy notices that are independent of this Notice. We are not responsible for the content, accuracy, or opinions expressed in such Third-Party Services. We do not monitor or check these Third-Party Services for accuracy or completeness. We recommend carefully reviewing the terms and privacy notices of each Third-Party Service prior to use in alignment with your specific compliance, privacy, and security requirements.

How We Transfer Your Information

If you are accessing or using our Sites and Services or otherwise providing your information to us, you consent to the processing of your information in the United States and other jurisdictions in which we operate.

To provide our Sites and Services, Vercel may store, process and transmit your information outside of your country of residence, which may have different data protection laws and may not offer the same level of protection or guarantees as in your country or the country where you initially provided the information. To the extent required by applicable law, whenever we transfer your information, we take the appropriate steps to protect your information, including the use of standard contractual clauses or other appropriate legal mechanisms.

Data Privacy Framework

Vercel complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Vercel has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Vercel has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit the Data Privacy Framework website.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Vercel commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, should first contact us at privacy@vercel.com.

If a privacy complaint or dispute relating to personal information received by Vercel in reliance on the Data Privacy Framework (or any of its predecessors) cannot be resolved through our internal processes, we have agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure. Subject to the terms of the VeraSafe Data Privacy Framework Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you. To file a complaint with VeraSafe and participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, please submit the required information here: https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/.

For transfers of personal information to a third party acting as a controller, Vercel complies with the DPF Notice Principle and Choice Principle. For onward transfers, Vercel is responsible for the processing of personal information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on its behalf. Vercel remains liable under the DPF Principles if its agent processes such personal information in a manner inconsistent with the DPF Principles, unless Vercel proves that it is not responsible for the event giving rise to the damage.

The Federal Trade Commission has jurisdiction over Vercel's compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Vercel is obligated to arbitrate claims and follow the terms as set forth in Annex I of the DPF Principles. You have the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms. For additional information please see Annex I.

Your Privacy Rights and Choices

You may have certain rights and choices available when it comes to how we collect and use your information. The rights available to you depend on your jurisdiction and applicable law. Below is a summary of rights and choices that may be available to you and how to exercise them. For more details on jurisdiction-specific rights, see the Jurisdiction-Specific Information section in our policy.

• Right to Access and Portability. You have the right to request access and receive certain information that we have collected about you.

• Right to Rectify or Update. You have the right to request correction of your personal information where it is inaccurate or incomplete.

• Right to Restriction. You have the right to request that Vercel restrict the processing of your personal information in certain instances and/or restrict further disclosures, such as for certain sensitive information.

• Right to Delete. You have the right to request that we delete your personal information that we have collected.

• Right to Withdraw Consent. You have the right to withdraw consent where you have provided your consent for us to process your personal information. Please note that the withdrawal of your consent will not affect processing done previously based on that consent.

• Automated Decision-Making. We sometimes use AI features and automated decision-making to analyze your personal information, but we do not use these technologies for decisions that have legal or similarly significant effects on you.

• Opt-out of Marketing Communications. You may opt-out of receiving marketing communications by clicking the "Unsubscribe" link within each email or by contacting us as provided in Contact Us. If you are a Customer, you will continue to receive transactional and administrative communications from us regarding our Sites and Services.

• Right to Lodge a Complaint. You may also have the right to lodge a complaint with a supervisory authority about our processing of your personal information. This may, for example, be the supervisory authority of your specific jurisdiction.

Exercising your Rights. To exercise your rights you can either:

1. Use your Account and Team Preferences as described below,
2. Submit a request via our Privacy Request Center, or
3. Contact us using the Contact Us information provided below.

Account Preferences. Your Account Preferences allow you to:

• Access, update and correct certain account information at any time by logging into your account or contacting our support services.
• Delete your account, by following the instructions in our Documentation.
• Update certain communication preferences, such as receiving SMS notifications.

Team Preferences. Your Team Preferences allow you to:

• Opt-out of Model Training as described in Section 3 of the Terms of Service. You can learn more here.

Minimum Age Requirements for Our Sites and Services

The Sites and Services are not directed or intended for use by individuals under the age of 16. To use Vercel's Sites and Services, you must be old enough to consent to the processing of your information in your jurisdiction. We do not knowingly collect personal information from anyone under the age of 16. If you are a parent or guardian and you become aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from anyone under the age of 16 without verification or parental consent, we take steps to remove such information.

Changes to Our Privacy Notice

We periodically review and update this Notice to describe new Services or changes to our practices. You can determine when this Notice was last revised by referring to the "Last Update" date at the bottom of this Notice. We encourage you to review the Notice whenever you interact with us to stay informed about our privacy practices and the ways that you can help protect your privacy.

Jurisdiction-Specific Information

Contact Us

If you have questions about this Notice, please contact us at privacy@vercel.com or write to us:

Vercel Inc.
440 N Barranca Avenue #4133
Covina, CA 91723
United States