At a glance
The good
- You can get a human to review automated decisions.+3
- They extend GDPR/CCPA-style rights to all users.+5
Watch out for
- Your personal data can be sold or handed to data brokers.-15
- You give up your right to sue in court over disputes.-12
- They can change the terms at any time without telling you.-10
- Your content and data are used to train their AI models.-8
- You're tracked across the web for targeted advertising.-6
- Any lawsuit must happen in their distant home court.-5
This analysis is generated automatically by AI and can make mistakes, since every flag includes the original clause below, you can check for yourself.
The details (19 clauses)
Sells Your Data-15 pts· 1 clause▾
The clause acknowledges that Vercel may have shared personal data with third‑party advertising networks, which can be considered a sale or sharing of personal information under certain laws.
Show original clause · Privacy Notice
Categories of Personal Information Shared and the Categories of Third Parties to Whom it was Shared: Our Services are for users ages 16 and older, and we do not "sell" or "share" the personal information of users we know are under 16 years old. To the extent that certain US Data Privacy Laws consider some sharing of personal information for Advertising purposes to be "selling" or "sharing" of personal information, Vercel may have shared the following categories of personal information with third-party advertising networks in the preceding 12 months: Identifiers; Commercial information; and In
Forced Arbitration-12 pts· 1 clause▾
Users must submit unresolved DPF‑related complaints to a binding arbitration process outlined in Annex I.
Show original clause · Privacy Notice
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Vercel is obligated to arbitrate claims and follow the terms as set forth in Annex I of the DPF Principles. You have the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms. For additional information please see Annex I. Your Privacy Rights and Choices You may have certain rights and choices available when it comes to how we collect and use your information. The rights available to you depend o
Silent Term Changes-10 pts· 1 clause▾
The clause says Vercel can modify the policy at any time by posting it online, and the changes take effect immediately upon posting.
Show original clause · Acceptable Use Policy
6. Changes to Policy Vercel may update this Policy by posting a revised version at vercel.com/legal, effective upon posting.
Trains AI on Your Data-8 pts· 2 clauses▾
Vercel may share de‑identified data, including AI product information, with AI partners to train and improve machine‑learning models, a practice imposed on users even though the data is de‑identified.
Show original clause · Privacy Notice
Note that we may also disclose information that we have de-identified. For Hobby and Pro plan users, subject to your data preferences in your team settings, we may disclose de-identified information (including de-identified AI Product Information) to AI business partners for their product improvement and development, including training and improving AI and machine learning models, with the ultimate purpose of improving the Vercel Services you use. You can learn more here. How We Secure Your Information We use reasonable and appropriate administrative, technical, and physical safeguards design
It lists personal data types that Vercel may use to train its AI models, indicating that your information can be used for AI product improvement.
Show original clause · Privacy Notice
Contact information, Professional and organizational information, Account information, Transactional information, Domain registration information, User content and file information, Website information, Device, location, and telemetry information, Image and audio information, AI product information Where necessary, we process this information to perform a contract with you, such as processing your contact information to send you a technical announcement about the Services. Internal product development and improvement, including AI model training AI product information, Domain registration i
Third-Party Tracking-6 pts· 1 clause▾
The clause says the company may use cookies and other tracking technologies to deliver targeted ads based on your interests.
Show original clause · Privacy Notice
Communication. To send you marketing and administrative messages, such as technical or legal notices, invoices, product updates, surveys, security alerts, marketing promotions, newsletters, training, event reminders, and/or provide other news or information about Vercel and/or our partners. Please see Your Privacy Choices and Rights to learn how to manage your communication preferences. Account Administration. To create and manage your account, complete transactions, and send billing, tax and other administrative information, such as purchase confirmations, receipts, and invoices. Marketing
Inconvenient Venue-5 pts· 1 clause▾
The clause states that the U.S. Federal Trade Commission has jurisdiction over Vercel’s compliance, imposing a potentially inconvenient forum on users.
Show original clause · Privacy Notice
For transfers of personal information to a third party acting as a controller, Vercel complies with the DPF Notice Principle and Choice Principle. For onward transfers, Vercel is responsible for the processing of personal information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on its behalf. Vercel remains liable under the DPF Principles if its agent processes such personal information in a manner inconsistent with the DPF Principles, unless Vercel proves that it is not responsible for the event giving rise to the damage. The Federal Tra
Human Review+3 pts· 1 clause▾
Vercel says it uses AI‑driven decisions but never for legal or similarly significant effects, limiting the impact on users.
Show original clause · Privacy Notice
Right to Restriction. You have the right to request that Vercel restrict the processing of your personal information in certain instances and/or restrict further disclosures, such as for certain sensitive information. Right to Delete. You have the right to request that we delete your personal information that we have collected. Right to Withdraw Consent. You have the right to withdraw consent where you have provided your consent for us to process your personal information. Please note that the withdrawal of your consent will not affect processing done previously based on that consent. Autom
Privacy Rights for All+5 pts· 8 clauses▾
The clause tells users they can complain to a data‑protection authority and exercise rights like accessing, updating, or deleting their data through account settings or a privacy request portal.
Show original clause · Privacy Notice
Right to Lodge a Complaint. You may also have the right to lodge a complaint with a supervisory authority about our processing of your personal information. This may, for example, be the supervisory authority of your specific jurisdiction. Exercising your Rights. To exercise your rights you can either: Use your Account and Team Preferences as described below, Submit a request via our Privacy Request Center, or Contact us using the Contact Us information provided below. Account Preferences. Your Account Preferences allow you to: Access, update and correct certain account information at any t
The clause outlines users' rights to access, correct, delete, withdraw consent, opt out of sale, limit sensitive data use, receive non‑discriminatory treatment, and obtain data portability.
Show original clause · Privacy Notice
Right to Access. You have the right to request access and receive certain information that we have collected about you. Right to Correct. You have the right to request correction of your personal information where it is inaccurate or incomplete. We generally recommend first making any changes in your Account Settings. Right to Delete. You have the right to request that we delete your personal information. Right to Withdraw Consent. You have the right to withdraw consent where you have provided your consent for us to process your personal information. Right to Know. You have the right to reques
The clause explains how you can request access to or control over your personal data, including using an authorized agent, and sets verification requirements.
Show original clause · Privacy Notice
Use your Account and Team Preferences (as described in section Your Rights and Privacy Choices) Submit a request via our Privacy Request Center Contact us using the Contact Us information provided below. You, or an authorized individual acting on your behalf, may submit a request relating to your personal information. We may need you to provide certain identifying information related to your account (i.e., user ID) or your recent interactions with us to verify your identity or the identity of any individual for whom you are requesting information. We cannot respond to your request if we canno
It states that Vercel will respond to data‑subject requests within 45 days but may limit them for legal reasons, and clarifies its role as data controller under GDPR.
Show original clause · Privacy Notice
We fulfill requests within 45 days of receiving your request. Please note that your request may be limited in certain cases, for example if complying with your request would conflict with: Federal, state, or local law; Regulatory inquiries; Subpoenas; or Exercising or defending legal claims. EEA and UK This section applies to individuals based in the EEA and UK and outlines the processing of your personal information under Data Privacy Laws, including the General Data Protection Regulation ("GDPR"). Vercel acts as a data controller for personal information that we collect about you while usi
The clause informs users that they have certain privacy rights regarding their personal information, granting them legal protections.
Show original clause · Privacy Notice
Your Privacy Rights You have certain rights related to the personal information that we process when you use our Sites and Services. Some of these rights only apply in certain circumstances, as set out below.
The clause gives users a range of privacy rights—including access, correction, data portability, deletion, restriction, objection, and consent withdrawal—and explains they can exercise these rights.
Show original clause · Privacy Notice
Right of Access. You have the right to request access and receive certain information about how we use your personal information and with whom we share it. Right to Rectification. You have the right to request correction of your personal information where it is inaccurate or incomplete. We generally recommend first making any changes in your Account Settings. Right to Data Portability. You have the right to request a copy of your personal information in a structured, machine-readable format and to ask us to share this information with another entity. Right to Erasure. You have the right to req
It explains how users can submit verified requests for their privacy rights, the verification needed, and a 30‑day response window.
Show original clause · Privacy Notice
Use your Account and Team Preferences, (as described in section Your Rights and Privacy Choices) Submit a request via our Privacy Request Center, or Contact us using the Contact Us information provided below. You, or an authorized individual acting on your behalf, may submit a verifiable request to exercise your rights relating to the personal information that we process about you. We may need to provide certain identifying information, related to your account (i.e., user ID) or your recent interactions with us to verify your identity, or the identity of any data subject for whom you are requ
It lists the limited circumstances where a user’s privacy requests may be denied and directs users to supervisory authorities for unresolved issues.
Show original clause · Privacy Notice
Where fulfilling your request would adversely affect other individuals, company trade secrets or intellectual property; Where there are overriding public interest reasons; or Where we are required by law to retain your personal information. If you have unresolved concerns, we encourage you to come to us in the first instance, but you are entitled to address any grievance directly to the relevant Supervisory Authority. In certain instances if you are an End User, we encourage you to reach out to the relevant Customer first to address any complaints.
No AI Training / Opt-Out+8 pts· 3 clauses▾
It states that collected information may be used to train AI products, but also provides customers with ways to control how their data is used for AI training.
Show original clause · Privacy Notice
How We Use Information We use your information as described in this Notice to provide our Sites and Services. For example, we may use your information in the following ways: Service Operation. To operate and administer our Sites and provide, operate, deliver, monitor, and maintain our Services, including troubleshooting, system maintenance and upgrades. Product Development and Improvement. To improve functionality, quality, user experience, and develop new features, including our AI Products and Services. Customers can learn about how to control the use of their information for AI product tr
Users may opt out of having their data used to train the company’s AI models, giving them control over that use.
Show original clause · Privacy Notice
Opt-out of Model Training as described in Section 3 of the Terms of Service. You can learn more here. Minimum Age Requirements for Our Sites and Services The Sites and Services are not directed or intended for use by individuals under the age of 16. To use Vercel's Sites and Services, you must be old enough to consent to the processing of your information in your jurisdiction. We do not knowingly collect personal information from anyone under the age of 16. If you are a parent or guardian and you become aware that your child has provided us with personal information, please contact us. If we b
The clause says the company may use your data to train AI models but provides you with an opt‑out, limiting the practice.
Show original clause · Privacy Notice
We process this information based on our legitimate interest and the interests of third-party AI providers in developing and improving AI models under commercial arrangements, subject to appropriate and feasible safeguards and user opt-out rights. This processing does not apply to Enterprise Customers and is handled solely in accordance with applicable customer agreements and data processing addenda. Customer support Troubleshooting and support information, Device, location, and telemetry information, Contact Information, Account Information, User Content and file Information, AI Product Inf
Each category counts once toward the score, and extra issues of the same kind have diminishing impact — the grade reflects the breadth of problems, not repetition.
Change history
- · Acceptable Use Policy-10 pts
Vercel can now make changes to the Acceptable Use Policy at any time and have those changes take effect immediately. This means users must check the policy regularly to stay informed. No notice to users is required before changes occur.
6 added · 0 modified · 0 removed
- · Privacy Notice-38 pts
Changes to the privacy notice allow the company to use collected information for AI training and share de-identified data with AI partners, but also provide users with ways to control how their data is used. The company may use cookies and tracking technologies for targeted ads and may have shared personal data with third-party advertising networks. Users have certain rights, including accessing, correcting, or deleting their data, and opting out of data use for AI training or targeted ads. A binding arbitration process has been introduced for unresolved complaints.
47 added · 0 modified · 0 removed