Your data. Your rights.
Last updated: April 19, 2026
Vernacia is a product of CloudServe Digital, a division of CloudServe Infotech, operated by RAMSIO CLOUDSERVE INFOTECH PRIVATE LIMITED (CIN: U62091KA2025PTC210162), headquartered at #36, WeWork Prestige Central, Infantry Road, Bengaluru – 560001, Karnataka, India. This page explains how we comply with the EU General Data Protection Regulation (GDPR) and how to exercise your rights.
30-day auto-deletion
Uploaded documents and translated outputs are automatically and permanently deleted 30 days after job completion.
AES-256 encryption
All files encrypted at rest (AES-256-CBC) and in transit (TLS 1.3). No human reviewer accesses your content.
No AI training on your data
Your documents are never used to train AI models. OpenAI's API terms and our DPA confirm this explicitly.
Chapter III GDPR
Your data subject rights
Right of access (Art. 15)
You can request a copy of all personal data Vernacia holds about you. We will provide it within 30 days, free of charge, in a structured machine-readable format.
Right to rectification (Art. 16)
If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected without undue delay.
Right to erasure (Art. 17)
You may request deletion of your account and all associated personal data. Erasure is processed without undue delay — typically within 24 hours and in any case within 30 days — subject to legal retention obligations.
Right to data portability (Art. 20)
You can receive your personal data in a structured, commonly-used, machine-readable format (JSON) and transmit it to another controller.
Right to object (Art. 21)
You can object to processing of your personal data for direct marketing at any time. Use the unsubscribe link in any email, or update notification preferences in settings.
Right to restrict processing (Art. 18)
You can request restriction of processing in certain circumstances — for example, while contesting the accuracy of your data.
We respond to all data subject requests within 30 calendar days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g., your national data protection authority within the EU/EEA).
Article 6 GDPR
Lawful bases for processing
| Lawful basis | GDPR article | Examples |
|---|---|---|
| Contract performance | Art. 6(1)(b) | Account creation, translation jobs, billing, customer support |
| Legitimate interests | Art. 6(1)(f) | Security monitoring, fraud prevention, product improvement analytics (aggregated only) |
| Legal obligation | Art. 6(1)(c) | Tax records, audit logs, regulatory compliance |
| Consent | Art. 6(1)(a) | Marketing emails, optional product feedback surveys |
Article 28 GDPR
Sub-processors
Vernacia engages the following sub-processors to deliver the service. Each sub-processor is bound by data processing terms consistent with GDPR requirements.
| Sub-processor | Purpose | Data location |
|---|---|---|
| OpenAI | AI translation engine | USA (EU SCCs in place) |
| Google Cloud Translation | AI translation for certain language pairs (low-resource fallback) | USA (EU SCCs in place) |
| Cloud hosting provider | Compute, object storage, and database (ap-south-1) | India |
| Resend | Transactional email delivery | USA (EU SCCs in place) |
| Sentry | Error monitoring (anonymized) | USA (EU SCCs in place) |
| Stripe | Payment processing (global) | USA (EU SCCs in place) |
| Razorpay | Payment processing (India) | India |
| Twilio | SMS delivery for phone-based MFA | USA (EU SCCs in place) |
We will notify you of any changes to this sub-processor list with at least 30 days' notice where required by your DPA.
For Business Customers
Data Processing Agreement
If you use Vernacia to process personal data on behalf of your organisation, you may need a Data Processing Agreement (DPA) under GDPR Article 28. Our standard DPA is available immediately — no negotiation required for standard terms.
Questions about your data?
Contact our Data Protection contact at [email protected]. We respond to all enquiries within 30 calendar days.
RAMSIO CLOUDSERVE INFOTECH PRIVATE LIMITED · CIN: U62091KA2025PTC210162 · GST: 29AAPCR1639E1Z3 · #36, WeWork Prestige Central, Infantry Road, Bengaluru – 560001, Karnataka, India