Privacy policy

Last updated 11 October 2026

This policy explains what personal data VerGen processes, why, who else receives it, and the rights you have over it. Bezep Solutions Sh.p.k. is the controller of the data described here. For the content your organisation connects to VerGen, we process it on your organisation's behalf and on its instructions.

What we collect

• Account data: your name, email address, a hash of your password, the organisations and teams you belong to, and your role in each.
• Work data: what your organisation connects — tickets from trackers and help desks, repositories and pull requests, chat workspaces — and the estimates, delivery trails and reports VerGen makes from them.
• Local session records: where an engineer installs Tollgate, the coding-agent sessions on their machine, including the prompts written. Their team can read these records. Prompt text is deleted after 90 days.
• Billing data: the plan, invoices and payment status. Card and bank details are entered on Paysera and never reach us.
• Technical data: IP address and request logs, kept to secure the service and limit abuse.

Why we use it

• To provide the service your organisation subscribed to (performing the contract).
• To bill for it and keep accounting records (a legal obligation).
• To keep the service secure and working (our legitimate interest).
• To send emails about your account, your organisation and its billing. We do not send marketing without your consent, and we do not sell personal data.

Who receives it

Only the processors needed to run the service, each bound to use it for that alone:

• Paysera — takes payments.
• Resend — delivers our emails.
• Sentry (Functional Software, Inc.), in its European Union region — receives the console's error reports and the feedback you choose to send. The short recording that travels with a report masks every word and input on the page; a screenshot is attached only if you add it.
• OpenRouter (OpenRouter, Inc.), and the model provider it routes to — receives the session records it is asked to review and, to estimate a ticket, the ticket's text and the source files of your connected repositories that the estimate reads. Nothing else.
• Hetzner Online GmbH — hosts the servers and the database, in the European Union.

Some of these process data outside Kosovo and the European Economic Area. Where they do, the transfer is covered by the provider's standard contractual clauses or an equivalent safeguard.

How long we keep it

• Account and work data: while your organisation's account is open, and 30 days after it closes.
• Prompt text from local sessions: 90 days.
• Invoices and payment records: as long as tax and accounting law require.

Cookies

The console sets only the cookies it needs to work: one that keeps you signed in, and a few that remember interface choices such as your theme. This public site sets none, and neither uses advertising or tracking cookies.

Your rights

You can ask to see the personal data we hold about you, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable form. Write to info@bezep.net; we answer within 30 days. You may also complain to the Information and Privacy Agency of Kosovo, or to the data protection authority where you live.

Security

Data travels over TLS. Credentials for the systems you connect are stored encrypted. Each part of the service reaches only the data it needs.

Changes

The date at the top shows when this policy last changed. A change in what we collect or who receives it is announced to your organisation's administrators by email.